Privacy Policy
Last updated: March 2026
1. Introduction
This Privacy Policy explains how Amicably (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you use our website and services at amicably.ai (the “Service”). By using the Service, you consent to the practices described in this policy.
We are committed to protecting your privacy and handling your data in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
2. Information We Collect
We collect the following categories of information:
Information you provide directly:
- Email address (for account creation and passwordless authentication)
- Scenario data you enter (income amounts, custody arrangements, province of residence, number of children, and other family law parameters)
- Questions and messages you submit through the chat interface
- Google account information (email address and name) if you choose to sign in with Google
Information generated through your use:
- Calculation results generated from your scenario data
- Conversation history within the application
- Run summaries and explanation outputs
Technical information:
- IP address and browser type (collected automatically by our hosting infrastructure)
- Pages visited and general usage patterns
3. How We Use Your Information
We use your information for the following purposes:
- To provide, operate, and maintain the calculation and guidance service
- To authenticate your identity and secure your account
- To save your scenarios and calculation history for your continued use
- To send transactional emails, including login codes and account-related notifications
- To improve the accuracy, quality, and reliability of our service
- To respond to your inquiries or support requests
- To comply with legal obligations
4. AI Processing and Third-Party Services
Amicably uses artificial intelligence to provide conversational guidance and knowledge-grounded answers. When you interact with the chat feature, your messages and relevant scenario context may be sent to third-party AI service providers (currently OpenAI) for processing.
These AI providers process your data solely to generate responses on our behalf and are bound by their own data processing agreements. We do not use your data to train AI models. For details on how OpenAI handles data, refer to their privacy and data usage policies.
Our core support calculations (child support tables, spousal support ranges, tax computations) run entirely on our own servers and do not involve any third-party AI processing.
5. Data Storage and Security
Your data is stored on servers located in Canada, hosted on Fly.io’s Canadian infrastructure. We implement industry-standard security measures to protect your information, including:
- Encrypted connections (TLS/HTTPS) for all data in transit
- Hashed session tokens and authentication codes (we never store these values in plain text)
- Passwordless authentication (we do not store passwords because we do not use them)
- Encrypted database storage at rest
While we take reasonable measures to protect your information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security.
6. Data Sharing
We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:
- Service providers: We use third-party providers to operate the Service, including cloud hosting (Fly.io), transactional email delivery (Resend), AI processing (OpenAI), and authentication (Google OAuth). These providers access your data only as necessary to perform services on our behalf.
- Legal requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:
- Free-tier accounts: Scenario data and calculation history are retained for 30 days after your last access.
- Paid-tier accounts: Data is retained for the duration of your active account.
- After account deletion: We will delete your personal information within 30 days of a deletion request, except where retention is required by law.
Authentication codes are automatically deleted after use or expiration (10 minutes). Session tokens expire after 30 days of inactivity.
8. Cookies and Tracking
We use a single HTTP-only session cookie for authentication. This cookie is essential for the Service to function and cannot be disabled while using the Service.
We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We do not engage in cross-site tracking or behavioural advertising.
9. Children’s Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete such information.
10. Your Rights
Under applicable Canadian privacy law, including PIPEDA, you have the following rights regarding your personal information:
- Access: You may request a copy of the personal information we hold about you.
- Correction: You may request correction of inaccurate or incomplete personal information.
- Deletion: You may request deletion of your personal information, subject to legal retention requirements.
- Withdrawal of consent: You may withdraw your consent to our processing of your personal information at any time, which may limit your ability to use the Service.
To exercise any of these rights, contact us at privacy@amicably.ca. We will respond to your request within 30 days.
11. International Data Transfers
Your data is primarily stored and processed in Canada. However, some of our service providers (including AI processing providers) may process data in the United States or other jurisdictions. Where your data is transferred outside of Canada, we ensure that appropriate safeguards are in place consistent with applicable privacy legislation.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a notice on the Service or by sending you an email. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at: