Privacy

If you don't sign in

Everything you enter stays in your own browser (local storage) on that device. Nothing is sent to a server. Clearing your browser's site data removes it.

If you sign in

Your data is also saved to your account in Google Firebase (Cloud Firestore), so you can open it on other devices. Security rules let only you read or change it. We save:

• Account: your email address. Your password is handled by Firebase Authentication and kept only as a salted hash. PR Path never sees it.
• Profile: the answers in "Your profile", such as your name, age, education, test scores, work history and work permit date.
• Work hours: the dates and hours from your pay slips and rows.
• After your invitation: your invitation date and which checklist items you've ticked.
• Draw alerts: whether you want emails, which draws, your current CRS score and the draw types you may qualify for.

Pay slips

PDF and scanned pay slips are read inside your browser. The files are never uploaded or stored; only the dates and hours you add are saved.

If you add your own Anthropic API key, photos of pay slips (and PDFs the browser can't read) are sent to Anthropic to be read, using your key. Your key stays in your browser and is never saved to your account.

Emails

If you turn on draw alerts or reminders, a scheduled job on GitHub reads your alert settings and sends emails through Resend to the verified email address on your account. Every email explains how to turn alerts off.

Download or delete your data

On the Profile tab, under "Your data", you can download everything saved for you as a file, or delete your account. Deleting your account permanently removes your profile, hours, letters, checklist, alert settings and login.

What we don't do

PR Path doesn't sell your data, show ads or use tracking cookies. It isn't connected to IRCC: your profile here doesn't change your official Express Entry profile.