Start the 3 minute money quiz

Privacy Policy

Last updated: November 21, 2025

Thank you for your interest in how we handle your data.

This Privacy Policy applies to the website www.xitplan.ca (the “Site”) operated by XitPlan Inc. (“XitPlan”, “we”, “us”, “our”), with Ala as the primary contact and data controller for this Site. It also applies to third party services we use to operate and manage the Site.

This Privacy Policy does not apply to specific products or apps such as FreedomOS or other XitPlan tools. Those will have their own privacy policies inside each product.

1. Background

This Privacy Policy is written in plain language to help you understand what data we collect, how we process it, and your rights.

a) What is Personal Data?

“Personal Data” is any information related to an identified or identifiable individual. This includes, for example:

  • Names
  • Email addresses
  • IP addresses
  • Any data that can be linked to you
b) What is Processing?

“Processing” refers to any action taken with Personal Data, including collection, storage, use, sharing, or deletion.

c) What laws apply?

We follow the data protection laws applicable in Canada, including PIPEDA (Personal Information Protection and Electronic Documents Act), and we apply best practices when serving a global audience.

2. General Principles

a) Purpose and legal basis for processing

We process your data to:

  • Provide and improve our website, services, and content (for example videos, newsletters, downloads)
  • Respond to inquiries or messages
  • Send emails and updates you have opted into
  • Analyze traffic and content performance
  • Ensure the security of the website
  • Process purchases of digital products or services

The legal basis for processing includes:

  • Your consent
  • Our legitimate interests (such as improving content and securing the Site)
  • The need to fulfill services or orders you request
b) Security

Our website uses SSL encryption and secure hosting. While no method is 100 percent secure, we take reasonable steps to protect your data.

If a data breach occurs that creates a real risk of significant harm, we will notify affected individuals and, if required, the appropriate authorities as quickly as reasonably possible.

c) Retention

We retain Personal Data only as long as necessary to fulfill the purposes outlined above or to meet legal, tax, and accounting obligations. When data is no longer needed, we delete it or anonymize it.

d) Minors

This Site is not intended for children under 16. We do not knowingly collect data from minors. If you believe a child has provided us with Personal Data, please contact us so we can delete it.

e) Automated decision making

We do not use automated decision making or profiling that would significantly affect you.

f) No data sales

We do not sell your Personal Data to third parties.

g) Sensitive data

We do not intentionally collect special category data such as health, biometric, or religious data unless explicitly required, lawful, and consented to.

h) International transfers

Some services we use may process data outside Canada (for example email tools or analytics providers). We only work with companies that commit to appropriate data protection safeguards, including EU Standard Contractual Clauses where applicable.

i) Sharing and disclosure

We only share data with:

  • Services needed to operate our website and offerings (for example email tools, analytics, course or checkout platforms, hosting)
  • Legal authorities when required by law
  • Partners when you have given clear consent

We do not allow service providers to use your data for their own unrelated marketing.

j) Marketing

With your consent, we may send newsletters, updates, and promotional materials. You can unsubscribe at any time using the link in the email or by contacting us.

k) Analytics and research

We use aggregated and anonymized data to better understand how our website is used, improve content, and plan future offerings. No personal identities are disclosed in this analysis.

3. Data Collection and Processing

a) Automatically collected data

When you visit our Site, certain data is automatically collected for security and analytics, including:

  • IP address
  • Browser type and version
  • Device and operating system
  • Referring URL
  • Pages visited and time spent

We use this data for website performance, analytics, and threat prevention. Where possible, we use this information in aggregated or anonymized form.

b) Cookies

Cookies are small text files used to:

  • Remember your preferences
  • Improve user experience
  • Analyze traffic and performance

You can manage or reject cookies in your browser settings. Some features may not function properly if cookies are disabled.

For full details, refer to our Cookie Policy.

c) Embedded content

Our website may embed YouTube videos or similar content. When you play a video:

  • YouTube (Google LLC) or the relevant provider may collect data including your IP address, device details, and viewing behavior.
  • That processing is governed by their own privacy policy.

Playback is optional and may constitute your consent to that third party processing.

d) Contacting us

If you reach out via a form or email, we collect your name, email address, and message content to respond to your inquiry. We retain this data only as long as needed for follow up, quality, or legal reasons.

e) Social media

We may engage with you via platforms like YouTube, Instagram, TikTok, or X (Twitter). Your interactions on those platforms are governed by their own terms and privacy policies. We do not control how they handle your data.

f) Downloads and resources

When you download a free resource, we may log your IP address and email (if provided) for delivery, security, and tracking purposes. We may also send related follow up emails if you have given consent.

g) Email and newsletter

If you subscribe to our newsletter, we store:

  • Your email address
  • Optional information such as your name or preferences
  • Engagement data such as opens, clicks, and unsubscribes

We use this to send the content you requested and to improve our communication. You can unsubscribe at any time via a link in the email or by contacting us.

h) Digital products and services

If you purchase a digital product or service through our website, we may collect:

  • Your name
  • Your email address
  • Billing related information (such as country or postal code)

Payments are securely handled by third party providers such as Stripe or PayPal. We do not store full payment card details.

We use this data to fulfill your order, provide support, and meet legal or financial obligations.

i) Affiliate products and links

Some pages may contain affiliate links. This means we may earn a small commission (at no additional cost to you) if you click and make a purchase.

These links may use cookies or tracking to ensure the referral is attributed properly. We only promote products or services we believe can provide value.

4. Your Rights

Depending on your location, you may have the right to:

  • Request access to your Personal Data
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data, subject to legal and practical limits
  • Withdraw consent where processing is based on consent
  • Object to or restrict certain types of processing in specific situations
  • Lodge a complaint with a regulatory body (for example the Office of the Privacy Commissioner of Canada)

To exercise these rights, contact us at contact@xitplan.ca. We may need to verify your identity before responding.

Region specific rights

If you are located in a region with specific legal rights, such as:

  • The European Union or United Kingdom (GDPR and UK GDPR), or
  • California or other United States jurisdictions with privacy laws

you may have additional rights such as:

  • The right to know what categories of Personal Data are collected, used, or shared
  • The right to request deletion or correction of Personal Data, subject to exceptions
  • The right to object to certain processing
  • The right to opt out of the sale or sharing of Personal Data

We do not sell Personal Data as that term is generally defined under the California Consumer Privacy Act (CCPA).

If you wish to exercise any region specific rights, contact us at contact@xitplan.ca and tell us where you are located. We will handle your request in line with applicable law.

5. Updates

This Privacy Policy may be updated periodically. Changes will be posted on this page with the updated date shown at the top.

Your continued use of the Site after changes are posted means you accept the updated Privacy Policy.

6. Contact

If you have questions about this Privacy Policy or how we handle your data, you can contact us at:

Email: contact@xitplan.ca

Website: https://www.xitplan.ca