Privacy policy

Last updated 2026-09-14 · Lowtide Digital Inc.

Who we are and whose data this covers

Lowtide Digital Inc. operates Killick for local service businesses. This policy covers account holders, team members, callers and customers whose information a business uses in Killick. For business records supplied by a workspace, the business decides why it collects and uses the data; we process it to provide Killick. We also use limited account, billing and security data to operate our own service.

What we collect and why

• Account and workspace information: names, phone numbers, email addresses, membership roles, business details and sign-in records. We use these for access, support and workspace administration.
• Business records: customer contact details, service addresses, leads, visits, jobs, estimates, invoices, payment status, notes and messages. Authorized workspace members can access records according to their role. Only upload information you are entitled to share with your team and providers.
• Uploaded photos and receipt attachments. These can contain personal or financial information, including cheque or bank details visible in an image. Avoid uploading unnecessary sensitive information.
• Call audio, transcripts, caller details and AI-generated summaries when call answering is used. The assistant identifies itself as AI, explains recording/transcription and its service-request purpose, and asks for agreement before intake. If agreement is absent or withdrawn, intake stops and an alternative contact route is offered. The provider may process the beginning of the call, including the notice and response. Unverified or declined calls are excluded from intake records and queued for provider cleanup; cleanup may not be immediate.
• Tell Killick text or voice requests and the records needed to answer them. AI providers process this content to perform the requested action. AI output can be incorrect; review estimates, invoices, schedules and messages before relying on them.
• Precise crew location only when you choose Share my location and grant device permission. Your workspace crew can see the latest shared point. Killick does not collect a continuous background route. A new share replaces the previous point. Disabling permission does not erase an already shared point; use Settings → Privacy preferences → Remove my shared location.
• Push delivery tokens, installation identifiers, app configuration and notification preferences support alerts. In Android builds configured for Firebase Cloud Messaging, Google can register an installation when the app starts before notification display is allowed. Device permission controls alert display; it does not disable all delivery identifiers. Notification content can appear on the lock screen according to your device settings.
• Subscription and payment information, including provider customer IDs, product IDs, purchase history and entitlement status. Stripe handles web checkout and invoice card payments; Apple handles supported in-app subscription purchases. RevenueCat helps validate and manage in-app entitlements. Killick does not receive the full card number from these checkout flows, but business records and attachments may contain other financial information.
• Connected accounting information, when the integration is available and your workspace owner authorizes it. QuickBooks connections use Intuit to exchange the customer, invoice, receipt, currency, tax and payment details required for the requested sync. Killick stores connection credentials and provider record identifiers to maintain access and reconcile sync results. Production QuickBooks sync is currently disabled; connecting or enabling it requires a separate setup action.
• Limited service diagnostics through Sentry, including error type, code location, app/runtime information and account/workspace IDs where available. The current diagnostic implementation excludes customer content, full error messages and authentication credentials from its payloads. Older releases may differ; update to the latest available version. These reports help us diagnose failures and operate the service.
• Optional product analytics through PostHog, including feature-use events, workspace milestones, opaque account/workspace IDs and limited plan or event properties; invoice amounts and customer record IDs are excluded. These are linked identifiers, not anonymous data. In versions with Privacy preferences, product analytics is off by default: your activity needs your opt-in and, within a workspace, the owner's workspace opt-in. Owners separately choose whether workspace milestones are included. Change these choices in Settings → Privacy preferences. There is no advertising tracking or session replay. Older apps may still attempt direct analytics delivery; we have retired the previous mobile ingestion key. Update to a version with Privacy preferences to use these controls.

Providers and international processing

We do not sell personal information or disclose it to advertisers. Providers process information to deliver the features you use: Railway for hosting and databases; Stripe for payments; Apple and RevenueCat for in-app subscriptions; Twilio for phone/SMS services; Resend for email; Retell and its configured voice/model providers for call handling; OpenAI, and Anthropic when enabled, for AI requests; Expo and Apple/Google push infrastructure for notifications; Sentry for diagnostics; PostHog for optional analytics; and Intuit for authorized QuickBooks connections when available. Not every provider is used for every account or feature.

Information may be processed or stored outside Canada, including in the United States. Our PostHog and Sentry projects use US regions. Other provider locations depend on their service configuration and infrastructure; we do not promise Canada-only storage. Information abroad may be accessible to courts, law enforcement or other authorities under local law. Contact us for information about our providers and international processing practices.

We may also disclose information when legally required, to protect the service or people's rights, or in a proposed sale or reorganization subject to appropriate confidentiality and applicable privacy requirements. A business transfer does not authorize unrelated new uses without the notice or consent required by law.

Messages and customer choices

Businesses must have a valid basis for the messages they request Killick to send. Killick records service-request confirmations and honors recorded opt-outs for the applicable sender and channel. Reply STOP to supported texts, use the preference link in supported emails, or contact the sending business. We retain minimal suppression information so an opt-out is not forgotten. Turning off marketing or service texts does not necessarily stop legally required notices or essential account security messages.

Retention and deletion

Account and business records remain while needed to provide the workspace, until removed through supported controls or an approved deletion request, or where law requires preservation. There is no general automatic expiry of all business records.

New calls handled under the updated privacy configuration use 30-day retention for provider recordings and associated provider call data, and 365-day retention from call start for full transcripts stored by Killick. New crew-location shares expire after 24 hours: expired points are hidden from the crew and removed by scheduled cleanup. Cleanup runs periodically and may finish after the expiry time. Call summaries, consent evidence, leads, invoices and other business records have the separate account/workspace lifecycle described here.

These periods apply to new data after the respective privacy controls are activated. Existing recordings, transcripts and location records are not retroactively assigned these expiry periods. Earlier provider settings remain until a separately reviewed change or deletion; an older shared point can be replaced or removed through Privacy preferences. Contact us for the active setting and rollout status for your workspace. We are not representing that older records have already been erased.

Settings → Delete account explains the scope before you confirm. Deleting an owner account deletes every workspace it owns and ends teammates' access to those workspaces. Deleting a member account does not delete a workspace owned by someone else or the business records it controls. Export needed business records before deletion; contact us for export assistance.

For owned Stripe subscriptions, deletion first attempts to stop ongoing subscription billing; if this cannot be confirmed, the account remains available to retry. Apple subscriptions must be managed separately in your Apple account and can continue after account deletion. The deletion result distinguishes removal from Killick's active database from cleanup still pending at external providers. We keep a restricted cleanup record and may retain information needed for legal, accounting, fraud-prevention, dispute or suppression obligations. Provider backups and legally retained payment records may outlast removal from the active service. Contact us with the deletion reference for status; deletion is not a promise that every third-party copy disappears immediately.

Turning off optional analytics stops future collection covered by that choice. Request removal of earlier analytics through our privacy contact. Turning off a permission or deleting the app does not by itself delete your account or cancel a subscription.

Your rights and contact

Contact us to request access, correction, export or deletion, withdraw consent where applicable, ask about retention or providers, or raise a privacy concern. We may verify identity and workspace authority before releasing or changing records. Customers may also contact the business that collected their information. We will explain applicable limits, including records that another business controls or that must be retained by law. Killick is intended for business use by adults, not children.

We will update the date of this policy when it changes and provide additional notice or seek consent when required for a material new use.

Lowtide Digital Inc. — Privacy contact: coady@lowtidedigital.ca
Business mailing address: 31 Motion Drive, Torbay, NL A1K 1A7, Canada