Privacy Policy

Effective date: 2026-08-05

PCKLT ("we", "our", or "us") builds tools for organizing gear and planning what to pack. This policy explains what we collect, why, how long we keep it, and the choices and rights you have. We are based in Canada.

Our Approach

PCKLT is local-first. The lists, gear, and trips you create in the app are stored on your device and work without an account and without a network connection. Creating an account is optional, and adds features rather than being required to use the app.

Where we do hold data, we hold it as a steward rather than an owner. Four commitments govern everything below:

• Ownership. You own what you create — your lists, gear, trips, and any catalogs you publish. We claim no ownership of it.
• Control. Sync, sharing, marketing email, and any contribution to aggregate insights are opt-in and reversible. Withdrawing does not degrade the core app.
• Access. You can export everything we hold about you, in an open format, at any time and without asking us.
• Possession. The app works standalone. Data you keep on your device stays there. Data we hold on your behalf is hosted in Canada where that option is available to us.

Information We Collect

If you join our waitlist or mailing list

• Your email address
• A record of your consent, including when and how you gave it

If you create an account

• Your email address, and a display name if you provide one
• If you sign in with Google, Microsoft, or Apple, an identifier from that provider. We do not receive your password. If you use Apple's Hide My Email, we only ever see the relay address.
• Content you choose to sync or share, such as lists or templates

Automatically

• Basic diagnostic and reliability information, such as crash reports

Data you keep only on your device is not collected by us.

How We Identify You Internally

Every account is given an internal identifier that is not derived from your email address. That internal identifier — not your email — is what is attached to content you share with other people. This has two practical consequences that matter to you:

• Changing your email address does not disturb anything you have already shared.
• If you ask us to delete your account, we can do so without breaking lists that other people have already received and edited. What remains with them is no longer linked to you.

How We Use Information

• To provide the app and, if you have an account, to sync your content and deliver catalogs
• To send you messages you asked for, such as testing invitations or product updates
• To improve reliability, performance, and the quality of our gear catalogs
• To respond to support requests
• To produce aggregate, de-identified insights, and to develop and improve our own internal models. This work uses data that is not linked to your identity, and is described in detail in the next section. We do not sell your personal data, and we do not share it with third parties except with the service providers described under "Data Sharing" below.

Derived Data and Internal Models

Some PCKLT features improve by learning from patterns across many users — suggesting which gear suits a given activity, flagging a missing essential, or warning about weight. Participation is opt-in. Contributions are aggregated and de-identified before use, and no pattern is surfaced unless it appears independently across enough separate users that it cannot be traced back to any one person.

This derived layer sits at the intersection of three sources: catalog content owned by third-party publishers, content owned by you, and the taxonomy, mappings, and models we build ourselves. The result is our intellectual property, but it is encumbered — it carries continuing obligations to both upstream sources. We do not treat aggregation as a licence for unrestricted secondary use, and we do not sell, license, or transfer derived data sets.

Benefit is returned to users; raw data is not. The value derived from collective use comes back to you as better recommendations, safety and completeness warnings, and efficiency — not by publishing the underlying data. Packing data is unusually revealing: an itemized list of what you own, combined with where you are going and when, describes both your possessions and your absence from home. Releasing that data, even in aggregate across a small group, would risk re-identifying people and exposing them to real-world harm. We consider withholding it a duty of care rather than a limitation.

Limits we are honest about. Deleting your account removes your records and ends any future contribution. It does not retroactively remove whatever statistical influence your past contributions may have had on our internal data models, because that influence is aggregate and not attributable to any individual. Where a publisher withdraws a catalog, we remove their content and stop distributing it; general patterns learned across many publishers are not attributable to any one of them and persist.

Community and Published Catalogs

PCKLT allows publishers — manufacturers, retailers, organizations, and individuals — to publish catalogs of gear and activities. Publishers retain ownership of what they publish and set the terms on which it may be used. Publishers may correct, restrict, or withdraw their catalogs, and we honour that in subsequent releases and syncs. We do not repurpose a publisher's content outside the terms they set.

Indigenous Knowledge and Community Data

The commitments in this section are different in kind from the rest of this policy. They are owed to rights-holders, and they are not conditional on our general terms.

Packing knowledge can carry cultural knowledge: land-based practice, harvesting, ceremony, travel, and gear specific to a place and a people. Where First Nations, Inuit, or Métis communities use PCKLT or publish through it, we recognize that this information belongs to the community, not to us and not to the platform.

• Community-identified content is excluded from aggregation and model training entirely, unless the community's own decision-making body consents.
• We will not publish or otherwise use community-identified content without free, prior, and informed consent from that body.
• Communities may set their own access protocols, including keeping content private to their members.
• Communities may obtain a full copy of their data, held anywhere by us, at any time, and may require its deletion or return.
• Where a community prefers to hold its own data, we will work toward that rather than against it.

These commitments are offered in the spirit of the First Nations Principles of OCAP®. They are not a substitute for a data-sharing agreement. If your Nation or organization needs one, contact us and we will negotiate on your terms.

Consent and Marketing Email

We only send commercial email to people who have expressly asked to receive it. Every message identifies us and includes a way to unsubscribe. Unsubscribing stops the messages; if you also want your information removed entirely, see "Your Rights" below and ask us to delete it.

Affiliate Links and Sponsored Content

Some product links in PCKLT are affiliate links, meaning we may earn a commission if you buy through them. Sponsored sources are visibly marked as such. Marking a source as sponsored does not move it up in our rankings, and we do not require an advertising relationship for a retailer or manufacturer to appear. We do not track your purchases.

Data Sharing

We do not sell personal data. We use Microsoft Azure to host our services, and data is stored in Canada where that option is available to us. We may share limited data with service providers who help us operate PCKLT, under contractual safeguards that prohibit them from using it for their own purposes, and only for that purpose. We may also disclose information where required by law.

Data Retention

We keep personal data only as long as needed for the purposes described here, or as required by law. De-identified aggregate data, which is no longer linked to you, may be kept longer.

Security

Data is encrypted in transit and at rest. Access to production data is restricted and authenticated. No system is perfectly secure, and we will notify you and the relevant authority if a breach presents a real risk of significant harm.

Your Rights

Subject to applicable law, you may ask us to:

• Provide a copy of the data we hold about you
• Correct information that is wrong
• Delete your account and the personal data associated with it
• Withdraw consent, including for marketing messages and for contribution to aggregate insights

You may also export your data from within the app at any time, without asking us. To make a request, contact us at the address below. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or your provincial privacy regulator.

Children's Privacy

PCKLT is not directed to children under 13, and we do not knowingly collect personal data from children under 13.

Contact

For privacy questions, data stewardship enquiries, or to make a request about your data, contact us at privacy@pcklt.com.

Policy Updates

We may update this policy from time to time. Updates will be posted on this page with a revised effective date. If a change materially affects how we use information you already gave us, we will tell you before it takes effect.

OCAP® is a registered trademark of the First Nations Information Governance Centre (FNIGC). PCKLT is not affiliated with, endorsed by, or certified by FNIGC. We reference the principles to describe the standard we hold ourselves to when handling data that belongs to others, and we apply them as a binding obligation only where actual First Nations, Inuit, or Métis rights-holders are involved. We do not claim that our general user base holds collective rights of the kind OCAP® was created to protect.

Approved for current operations as of 2026-08-06. Additional legal review is deferred, and any remaining policy risk is explicitly accepted for this release.