Privacy Policy

Effective date: June 30, 2026

Omar Rihani (“we”, “us”, “our”) operates the following online services (collectively, the “Services”):

This Privacy Policy explains what personal information we collect across these Services, how we use it, and your rights. The canonical copy of this policy is published at https://voktera.com/privacy.

Contact us

Voktera personal dashboard (https://app.voktera.com)

We collect only what we need to run the dashboard app.

We do not collect payment card data (the dashboard is free), government ID, or precise GPS location for advertising.

How we use dashboard information

• Create and secure your account (email sign-in via our auth provider).
• Store and display your logs (food, gym, tasks, goals, health).
• Run label OCR on your device when you use scan (photos stay on your device); process pasted text on our servers only when you use server features that need it.
• Send push notifications you opt into.
• Operate, secure, and improve the dashboard.

UoG Degree Planner (https://uni.voktera.com)

UoG Degree Planner is a free degree-planning tool for University of Guelph programs. You can use it without an account (plans stay in your browser). If you sign in, we store your plans in the cloud.

Course catalog data (program requirements, course descriptions) is static public JSON served from our CDN. It is not personal information.

We do not receive your Google password. Google sign-in is limited to your email address for account identification. See Google’s Privacy Policy for how Google handles your Google account.

We do not sell your personal information or use planner data for advertising.

How we use planner information

• Create and secure your account when you choose cloud sync.
• Save, load, and delete your degree plans.
• Generate read-only share links when you explicitly make a plan public.
• Operate, secure, and improve the planner.

How we use your information (all Services)

We use personal information to:

• Provide the features you request.
• Operate, secure, and improve our Services.
• Respond to your requests and support messages.
• Comply with law and enforce our Terms.

We do not sell your personal information. We do not use your data for third-party advertising.

Legal bases (EEA/UK users)

Where GDPR applies, we rely on:

• Contract — to provide the Service you signed up for.
• Consent — for push notifications on the dashboard (you can withdraw consent).
• Legitimate interests — security, fraud prevention, and improving the Services, balanced against your rights.

Cookies and tracking

We use cookies and similar technologies for sign-in, preferences, and security. See our Cookie Policy for details. We do not run analytics or advertising trackers.

Third-party services

We use trusted providers who process data on our behalf:

These providers may process data in East US (Ohio), United States. By using the Services, you understand your information may be transferred outside your province or country.

How long we keep data

• Account data — while your account is active and for a short period after you ask us to delete it (we aim to complete deletion requests within about 30 days, subject to backups and legal holds).
• Dashboard label photos — not uploaded for in-app scan (OCR runs on your device). Pasted text is not stored as an image.
• Planner data — while your account is active; shared public plans remain readable via their link until you delete them or turn sharing off.
• Server logs — kept for a limited time per our hosts’ policies (typically weeks to months).
• Cookie consent record — stored in your browser until you clear it.

Your rights

Depending on where you live, you may have the right to:

• Access a copy of your personal information.
• Correct inaccurate information (many fields you can edit in the app).
• Delete your account and associated data.
• Export your data in a portable format (contact us — we will respond within a reasonable time).
• Withdraw consent for push notifications (dashboard).
• Object to or restrict certain processing where applicable.

Canada (PIPEDA): You may contact us with questions or complaints. You may also contact the Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca

California (CCPA/CPRA): We do not sell or share personal information for cross-context behavioral advertising. You may request access, correction, or deletion by emailing privacy@voktera.com. We will not discriminate against you for exercising your rights.

EEA/UK: You may lodge a complaint with your local supervisory authority. We encourage you to contact us first at privacy@voktera.com.

To exercise rights, email privacy@voktera.com from the address linked to your account. We may need to verify your identity.

Security

We use reasonable safeguards, including HTTPS, access controls, and database row-level security so users can only access their own data. No method of transmission or storage is 100% secure.

Children’s privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact privacy@voktera.com and we will delete it.

International transfers

We are based in Ontario, Canada. Your data may be processed in Canada and in other countries where our providers operate (including the United States). We rely on contractual protections and provider commitments where required.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the effective date. Continued use after changes means you accept the updated policy, to the extent permitted by law.

Contact

Questions about privacy: privacy@voktera.com

General contact: support@voktera.com

Omar Rihani
29 Sara Dr., Welland, Ontario, Canada