Privacy policy
IURIS-PUB-2026-10-08-B
Version 1. This version takes effect when it is first published.
1 Responsible organization and scope
Services Technologiques Iuris inc., the operating name of 9571-7138 Québec inc., operates the services described here. In this policy, “we” and “the Company” refer to this operator. Business address: 713, boulevard Saint-Joseph, Roberval (Québec) G8H 2L3, Canada. Phone: +1 418 276-9848.
This policy explains how personal information is handled on our websites iuris.ca and codecriminel.app where they refer to this policy, in the Iuris Codex application, including for the Criminal Code, and in the services needed to provide access to it. It distinguishes information stored on your device from information received by the Company or an external service.
Francis Boucher is the privacy officer and receives requests, complaints, reports, support questions and general inquiries at admin@iuris.ca. Mailing address: 713, boulevard Saint-Joseph, Roberval (Québec) G8H 2L3, Canada.
2 Websites and launch mailing list
When you visit a website, your device sends the servers information needed for the connection, including your IP address, the pages requested and technical information about your browser. Logs may be used to deliver the website, diagnose a problem and protect the service. The handling of browsing information and its retention periods are described in sections 6 and 7.
If you use the launch sign-up form offered on a website, it asks for your email address. We send it to Brevo to manage your sign-up and send the communications you have chosen to receive. Signing up is not a purchase. Taking part in a product pilot or test does not automatically subscribe you to promotional communications. Consent to other news or promotions, if offered, is a separate choice.
To withdraw from launch communications, write to admin@iuris.ca or use the unsubscribe link provided in a message. The information needed to respect that choice and retain minimum supporting evidence is handled separately from promotional communications. Withdrawal does not prevent a response needed to handle a request you have made to us.
3 Personal space on your device
Notes, bookmarks, recent searches, browsing histories and annotations associated with pinned decisions are stored in an encrypted database on your device. The application does not automatically send their content to our licensing service through the functions described here. Public legislative texts are stored separately.
The Company does not provide synchronization of these notes between your devices in this version. Backups or transfers managed by your device may create copies depending on your settings. They are separate from the Company’s licensing service. Local storage therefore does not guarantee that no copy will leave the device or that the information can be recovered after a loss or reinstallation.
If you enable the biometric protection offered by the application, verification is performed by your device’s mechanism. The Company does not receive your fingerprint or facial image through this function. Voluntary submissions to support and browsing external services are described below.
4 Sign in with Apple and institutional access
If you use Sign in with Apple for institutional access, Apple sends us the information authorized through that process: a sign-in identifier, a name when provided and a verified email address, which may be a relay address. We use this information to create and recognize your account, manage access and help you if you encounter difficulties. We retain a derived identifier that links the account to its licences; this transformation does not make the account anonymous.
Licence activation and validation also use the activation code; account, application, licence and installation identifiers; cryptographic verification elements; the device’s name and model; its software versions; and activation dates or statuses. This information is used to assign entitlements, apply device limits, restore access and prevent unauthorized use. Management operations are recorded in administrative and security logs.
If an organization provides your licence, the account, licence and device information described above is used to manage that access. The licence does not give the organization access to the content of your local notes through the licensing service.
5 Purchases and online functions
For an App Store purchase, Apple handles payment through your Apple account. The application uses transaction information provided by Apple, including the product and access entitlement status, relevant dates and transaction identifiers, to verify the purchase, its restoration and its validity. The Company does not collect your card number through this process. The purchase manager in this version does not send these transactions to our licensing portal.
When you open CanLII from the application, you are using an external website in an embedded web window. Your browsing and searches on that website, as well as connection data, are also subject to its privacy practices. Cookies and web storage may persist on the device, separately from the application’s encrypted database. A note that you locally associate with a decision remains separate from that browsing activity.
To load a historical version of the Criminal Code, the application downloads an inventory and the corresponding file from data.iuris.ca, then extracts the text on your device. The server receives the file request, including its version and language, and technical connection information. This download does not itself transmit your search text or the section number that the application extracts locally.
If you send us a report, we receive your email address, message and any attachments you add. The email prepared by the application may include the section, search, relevant screen and technical information about the device. Review this content before sending it and remove any case information that is not necessary. This support channel is not intended to receive a complete confidential legal file.
During the TestFlight pilot, Apple automatically collects crash and usage data and shares it with the developer. Feedback and screenshots you choose to submit are also received by Apple and made available to the Company. The visible name or email address depends in part on the invitation method. We use this data to improve the application. It is separate from the contents of the notes vault, which are not automatically synchronized to our licensing service.
6 Recipients and processing locations
Francis Boucher handles the Company’s requests and administrative operations. Vercel hosts the web services and portal API; Supabase hosts the portal’s primary database. Brevo is used when you join the launch list. File-hosting and email services are involved in historical downloads and email communications. Apple provides authentication, purchases and TestFlight; CanLII operates the external website you choose to visit. Their own processing remains distinct from processing performed for the Company.
We do not collect information for targeted advertising in the services described here. This does not exclude technical information needed for a connection or operational logs. Session technologies and web storage used by external pages, including CanLII, are separate from your notes. An absence of advertising does not mean an absence of cookies or usage data, particularly in TestFlight.
The primary region of the Supabase project used for the portal is Canada Central. The website and portal’s Vercel deployments identify the Washington, D.C., United States region; Vercel also uses a global delivery network. These indications do not guarantee that all processing, support access, logs and backups remain in those regions. Information may therefore be processed outside Québec or Canada and be subject to the laws of the relevant jurisdiction. You may ask us for details about the providers and processing that concern you.
We may also disclose information where the law requires or permits it in the applicable circumstances. This possibility is not a general authorization to use your notes or information for other purposes.
7 Retention and deletion
We have adopted a retention schedule with a default maximum of 90 days and a starting point specific to each category. The schedule calls for earlier deletion once the purpose has been fulfilled and no need or statutory period justifies retention. Any exception must have a specific reason and limited scope.
The adopted reference periods are 90 days from the event for ordinary technical logs, and 90 days after resolution for support requests and beta feedback under our control. Information needed for an account and its licence remains useful during the active relationship. After closure, the 90-day reference applies only to information still needed to complete the closure, subject to the exceptions below. A deletion request is not automatically postponed until the end of those 90 days.
Contracts, accounting or tax records, information needed for litigation and minimum evidence of consent or objection may be retained longer if a documented need or applicable obligation requires it. An exception does not justify retaining all account data. Pilot contact details are used for the stated purpose; their reuse for promotional purposes is not automatic.
Automatic deletion under this schedule is not yet in place. Verification of its implementation and providers’ backup cycles is ongoing. We therefore cannot confirm systematic erasure of every copy at the end of 90 days. Local notes remain under your control and subject to your device’s backup settings. Data retained by Apple for TestFlight follows Apple’s own rules; its deletion is not guaranteed by our internal schedule.
To request deletion of your account, write to Francis Boucher at admin@iuris.ca. This is the request method currently identified by the Company; this policy does not advertise an automated in-app deletion process. We may verify your identity proportionately and explain the information involved, the steps required and any records whose continued retention remains legally justified.
Deleting an account, releasing a device, erasing local content and cancelling a subscription are separate operations. Deleting an account does not cancel a subscription billed by Apple. The effects on device data and backups depend on the process used and your settings; check them before deleting or uninstalling.
8 Security and rights
We use measures appropriate to the sensitivity of the information and the risks. The application’s personal database is encrypted, and exchanges with our services use secure connections. These measures are not an absolute guarantee against loss or unauthorized access. Protect your device, sign-in methods and backup copies. In the event of a confidentiality incident, we take the measures and give the notices required by law.
You may request access to your information, its correction and, where the legal conditions are met, a portable copy, cessation of its dissemination or its de-indexing. You may withdraw consent, subject to the applicable consequences and limits. Withdrawal may prevent a function that requires the information in question; we will explain this to you.
Requests addressed to the Company concern the information we hold. For content stored only on your device, we do not hold a server copy that we can provide to you or erase remotely. Use the available local controls; support can guide you.
Address your request to Francis Boucher at admin@iuris.ca. We may verify your identity proportionately, without requesting more information than necessary. We respond to access and correction requests within the applicable statutory period, normally 30 days in Québec. This response period does not mean that all backup copies are erased within 30 days. You may also contact the Commission d’accès à l’information du Québec or the competent authority.
9 Complaints
To make a complaint about your personal information, write to Francis Boucher at admin@iuris.ca. Describe the problem and the outcome you seek without sending unnecessary confidential information. He reviews the complaint, requests any necessary clarification and communicates the response and any measures adopted to you. Applicable statutory time limits continue to be respected. You retain the right to bring the matter before the competent authority.
10 Changes
The number at the top identifies the applicable version. We make changes to this policy available and notify you of material changes in a manner appropriate to the service. A new version does not replace separate consent required for a new use of your information.