Privacy Policy

1. Who We Are

Kredify Inc. ("Kredify," "we," "us," or "our") is a Canadian company that operates a financial education membership service at kredify.ca. We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

This Privacy Policy describes how we collect, use, disclose, retain, and safeguard your personal information when you visit our website or enroll in a Kredify membership. By using our service, you consent to the practices described in this policy.

2. Information We Collect

We collect only the personal information that is necessary to provide our membership service, verify your identity, and process payments. This includes:

We do not collect, access, request, or store your online banking login credentials. We do not perform credit bureau inquiries or access your credit score or credit file in any way.

3. How We Use Your Information

We use your personal information solely for the purposes for which it was collected, including:

• Verifying your identity and eligibility for membership
• Setting up and processing pre-authorized debit payments according to your plan schedule
• Administering your membership and providing access to course content and member resources
• Issuing your welcome bonus in accordance with your membership agreement
• Communicating with you about your membership, billing, support requests, and any material changes to our service
• Detecting, preventing, and investigating fraud, unauthorized access, or other misuse of our platform
• Complying with applicable legal, regulatory, and financial recordkeeping obligations

We do not use your personal information for automated decision-making, scoring, or profiling beyond what is described above. We do not use your information for advertising or marketing beyond communications related to your Kredify membership.

4. How We Share Your Information

Kredify does not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited and specific circumstances:

• Service providers: Third-party vendors engaged to help us operate our platform, including payment processors, identity verification providers, banking verification services, and cloud infrastructure providers. These parties process your data only as directed by us and are contractually bound by confidentiality and data protection obligations.
• Legal compliance: When we are required to disclose information by law, court order, government authority, or applicable regulatory requirement.
• Fraud prevention and security: Where disclosure is necessary to investigate, prevent, or act on suspected fraud, unauthorized transactions, threats to safety, or illegal activity.
• Business transfers: In the event of a merger, acquisition, reorganization, or sale of all or substantially all of Kredify's assets, your personal information may be transferred to the successor entity, subject to equivalent privacy protections and prior notice to you.

In all cases where we engage third-party service providers, we take reasonable steps to ensure they handle your data in a manner consistent with this policy and applicable Canadian privacy law.

5. Banking & Payment Processing

To set up and process your pre-authorized debit payments, Kredify uses secure third-party payment processing and, where applicable, banking verification services. These services are used solely to confirm your bank account details and establish your payment authorization. We do not collect or store your online banking username or password at any point in this process.

All banking and payment data is transmitted using industry-standard encryption (256-bit SSL/TLS). Our payment processing partners are required to maintain security practices consistent with applicable Canadian privacy and financial regulations.

6. Data Retention

We retain your personal information for as long as is necessary to fulfill the purposes described in this policy and to comply with our legal obligations. Membership and payment records are generally retained for a minimum of seven (7) years following the conclusion of your membership, in accordance with applicable Canadian financial recordkeeping requirements.

Where personal information is no longer required, we securely delete or anonymize it in accordance with our internal data retention schedule. You may request deletion of your personal information at any time (subject to our legal obligations to retain certain records) by contacting us at privacy@kredify.ca.

7. Security

Kredify takes the security of your personal information seriously and employs industry-standard administrative, technical, and physical safeguards, including:

• 256-bit SSL/TLS encryption for all data in transit
• Encrypted storage of personal and payment data at rest
• Role-based access controls, limiting employee access to personal data strictly on a need-to-know basis
• Regular internal security reviews and monitoring

While we take all commercially reasonable steps to protect your information, no method of electronic transmission or storage can be guaranteed to be 100% secure. In the event of a data breach affecting your rights and freedoms, we will notify you and the Office of the Privacy Commissioner of Canada as required by law.

8. Cookies & Analytics

Our website uses cookies and similar technologies to support site functionality, remember your preferences, and analyze how visitors interact with our platform. We may use analytics tools to understand aggregate traffic patterns and improve our service. This data is collected in aggregate and does not identify you personally.

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. We do not use cookies to track your activity across unrelated third-party websites.

9. Your Rights

Under PIPEDA and applicable provincial privacy legislation, you have the following rights with respect to your personal information:

• Access: The right to request a copy of the personal information we hold about you
• Correction: The right to request correction of inaccurate or incomplete personal information
• Withdrawal of consent: The right to withdraw consent to the collection, use, or disclosure of your information at any time, subject to legal and contractual limitations (note: withdrawal of consent may affect our ability to provide you with membership services)
• Deletion: The right to request deletion of your personal information where we no longer have a legal basis to retain it
• Complaint: The right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, contact our Privacy Officer at privacy@kredify.ca. We will respond within 30 days of receipt of your request.

10. Children's Privacy

Kredify's membership service is intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from a minor, we will take steps to delete it promptly. If you believe a minor has provided us with personal information, please contact us at privacy@kredify.ca.

11. Changes to This Policy

Kredify may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. For material changes, we will notify active members via email before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our service after a policy update constitutes your acceptance of the revised terms.

The most current version of this Privacy Policy is always available at kredify.ca/privacy-policy.