Privacy Policy

Room · Last updated 18 October 2026

Room is run by Bluefox Software, a sole proprietorship in British Columbia, Canada ("we", "us"). This policy explains what personal information Room collects, why, who else handles it, how long we keep it and what you can ask of us. Questions go to privacy@bluefox.software.

What we collect

• Your account: your name, your email address and your password. The password is stored only as a one-way hash; nobody, including us, can read it.
• Your sessions: when you sign in, the IP address and the browser or device description (user agent) of that session. A session ends when you sign out, when you reset your password, after 30 days without use, or when you delete your account. The record of an ended session is kept until you delete your account.
• What you put in Room: the people you add to your household (a name you choose, the year each was born, the year each became a tax resident of Canada, when each opened an FHSA, and the RRSP limit or TFSA room you copy from the CRA), and the contributions and withdrawals you log (the date, the amount, the kind of account and, if you give it, the bank's name). Room never asks for a social insurance number, an account number or a bank login.
• The calculator on the home page: what you type there is worked out in your browser and, if you press "Show my room", on our server for that one answer. It is not stored unless you choose "Keep track of this" and create an account.
• Technical records: for each request to our servers, the page or address asked for, the time, the result, your IP address and your user agent, and the IP address a limit on repeated requests applies to. We use these only to run, secure and fix the service.
• Assistants you connect: if you let an AI assistant use Room for you, a record of that assistant and what you allowed it to do, until you revoke it, reset your password or delete your account. What the assistant reads (your name, your email address and the content its tools reach) goes to that assistant's provider, under its own terms.

What we do not do

No advertising, no tracking pixels, no third-party analytics, and we never sell your information or share it for advertising. To see how Room is used, the website counts visits and steps (such as "worked out their room") against a random id kept in your browser's local storage, with the page's address and how you arrived (from a search, a link, or directly), and never what you typed, a year or an amount; these counts stay in our own systems. The website uses one cookie, the session cookie that keeps you signed in; the home page and this page set none.

Why we use it

• To provide the service you signed up for (performing our agreement with you).
• To keep it secure and working, and to stop abuse (our legitimate interests).
• To send the emails the service needs, such as a password reset or the confirmation that your account was deleted, and the note on 1 January with your household's new room if you ask for it. We send no marketing.
• To count, without personal information, how the site is used, so we can make it better (our legitimate interests).
• To meet our legal obligations.

Who else handles it

We use these service providers, under contracts that limit them to processing on our behalf:

• OVHcloud: our servers and database, in Beauharnois, Quebec, Canada.
• Resend, a United States company: delivers our emails through its servers in Brazil, so it receives your email address and the message.
• Cloudflare: its R2 storage holds our database backups and technical records.

Some of these providers process information outside Canada, including in the United States and Brazil, where it may be subject to those countries' laws.

How long we keep it

• Your account and content: until you delete them, or your account.
• Technical records: about 30 days.
• Database backups: about 14 days.

When you delete your account, it is removed from our live database at once. It survives only in backups and technical records until those expire as above. Automatic rules in our storage remove any backup or technical record a failure leaves behind: backups within 90 days, technical records within 120.

Your rights

You can ask to see, correct, export or delete your personal information, and to withdraw a consent you gave. You can delete your account yourself, at any time, in the app: Account → Delete account. For anything else, write to privacy@bluefox.software; we answer within 30 days.

If you are not satisfied with our answer, you can complain to the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, or, in the European Union or the United Kingdom, your local data protection authority.

Security

Information travels encrypted (HTTPS), passwords are hashed, and access to our systems is limited to what running the service needs. No system is perfectly secure; if a breach puts you at risk, we will tell you and the authorities as the law requires.

Not advice

Room estimates contribution room from the rules the Canada Revenue Agency publishes and what you enter. It is not tax, legal or financial advice, and the CRA's records are the official ones. You are solely responsible for the information you enter and for tracking your own contributions and room; see the Terms of Use.

Children

Room is not intended for children under 16, and we do not knowingly collect their information.

Changes

We will post any change here with a new date. If a change matters to how we use your information, we will also tell you by email before it takes effect.