Privacy Policy
How Three Apples collects, uses, shares, protects, and retains information across our website, products, and services.
Privacy Policy
1. About Three Apples
Three Apples Inc. is a technology company offering digital products and services, including but not limited to:
Depending on the service or product, Three Apples may act either as:
- • Nexium - student information system solutions
- • Elara - education-related digital solutions
- • UnityPlus - community engagement application
- • website design and development
- • digital marketing services
- • mobile app development
- • custom and bespoke software solutions
- • a data controller for information collected directly by us for our own business purposes; or
- • a data processor / service provider where we process information on behalf of a school, client, organization, or other customer.
2. Information We Collect
We may collect personal information directly from you, automatically through your use of our website or platforms, or from clients and organizations who authorize your access.
2.1 Information You Provide Directly
This may include:
- • full name
- • email address
- • phone number
- • company, school, or organization name
- • job title
- • billing and payment information
- • messages, inquiries, or support requests
- • project requirements and business information
- • account registration information
- • information submitted through forms, demos, bookings, or sales inquiries
2.2 Information Collected Through Products and Platforms
Depending on the product or service, we may process information such as:
- • user account details
- • login credentials and authentication data
- • profile information
- • attendance, academic, or enrollment information
- • parent, guardian, student, or staff information
- • communication records
- • community participation information
- • uploaded files, forms, submissions, or records
- • support and usage history
2.3 Automatically Collected Information
When you use our website or digital products, we may automatically collect:
- • IP address
- • browser type
- • device information
- • operating system
- • pages viewed
- • referral source
- • session activity
- • date and time of access
- • cookies and similar technologies
- • diagnostic, analytics, and performance information
3. How We Collect Information
We may collect personal information through:
Where we receive personal information from a client, school, or organization, that party is responsible for ensuring it has the lawful right to provide such information to us.
- • website forms and contact forms
- • email, phone, and meeting interactions
- • demo requests and sales inquiries
- • account registration and onboarding
- • client project intake and service delivery
- • cookies, analytics tools, and technical logs
- • customer support interactions
- • direct uploads by clients, schools, or authorized users
4. How We Use Information
We may use personal information for the following purposes:
We do not sell personal information.
- • to provide, operate, maintain, and improve our website, products, and services;
- • to create and manage user accounts;
- • to communicate with users, clients, schools, and organizations;
- • to provide customer support, onboarding, and technical assistance;
- • to process payments and manage billing;
- • to deliver website development, software, digital marketing, and custom solution services;
- • to monitor platform usage, performance, and security;
- • to detect, prevent, and investigate fraud, misuse, or unauthorized access;
- • to comply with legal, contractual, and regulatory obligations;
- • to send relevant business communications, proposals, service updates, or marketing communications where permitted by law.
5. Legal Basis / Permitted Grounds for Processing
Depending on the context, we may collect, use, or process personal information on one or more of the following grounds:
- • your consent;
- • performance of a contract or steps taken before entering into a contract;
- • compliance with legal obligations;
- • our legitimate business interests, including providing services, improving performance, securing systems, and communicating with clients and prospective clients;
- • instructions provided by a client, school, or organization for whom we act as a processor or service provider.
6. When We Act on Behalf of Clients or Schools
For certain services and products, especially Nexium, Elara, UnityPlus, and bespoke software platforms, Three Apples may process personal information on behalf of a client, school, nonprofit, community organization, or other institution.
In such cases:
If your information is controlled by a school, employer, or organization using our platform, privacy requests such as access, correction, or deletion should usually be directed to that organization first.
- • the client or institution generally acts as the data controller;
- • Three Apples acts as the data processor or service provider;
- • we process personal information only to provide the agreed product or service and under the client's lawful instructions.
7. Cookies and Tracking Technologies
We may use cookies, pixels, analytics tools, and similar technologies to:
You may be able to control certain cookies through your browser settings. Disabling cookies may affect website functionality.
- • remember user preferences;
- • improve website functionality;
- • understand site traffic and usage patterns;
- • measure campaign effectiveness;
- • enhance security and performance.
8. How We Share Information
We may share personal information only where reasonably necessary, including with:
We do not sell or rent personal information to third parties.
- • employees, contractors, and service providers working on our behalf;
- • hosting providers, cloud infrastructure providers, and technical vendors;
- • payment processors and invoicing tools;
- • analytics, communication, and customer support platforms;
- • implementation, maintenance, and security partners;
- • legal, regulatory, or government authorities where required by law;
- • a client, school, or organization that controls the relevant data.
9. International and Cross-Border Processing
Personal information may be stored, hosted, processed, or accessed in Canada or in other jurisdictions where our service providers or infrastructure partners operate.
Where information is transferred across borders, we will take commercially reasonable steps to ensure appropriate safeguards are in place, consistent with applicable legal requirements.
By using our website, products, or services, you understand that your information may be transferred to and processed in jurisdictions outside your own.
10. Data Retention
We retain personal information only for as long as necessary for the purposes for which it was collected, including:
Where we process information on behalf of a client or school, retention periods are generally determined by that organization and the applicable agreement.
When personal information is no longer required, we may securely delete, anonymize, or archive it in accordance with legal and business requirements.
- • to provide products and services;
- • to meet contractual obligations;
- • to resolve disputes;
- • to enforce our agreements; and
- • to comply with legal, accounting, regulatory, and operational requirements.
11. Data Security
Three Apples implements commercially reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, loss, misuse, alteration, or destruction.
These safeguards may include:
However, no system, platform, or method of transmission can guarantee absolute security.
- • encryption in transit;
- • secure hosting infrastructure;
- • role-based access controls;
- • authentication measures;
- • activity logging and monitoring;
- • routine backups;
- • security reviews and operational safeguards.
12. Shared Responsibility
Where our products are used by schools, businesses, or organizations, data protection is a shared responsibility between:
Clients and organizations are responsible for:
Authorized users are responsible for protecting their credentials, securing their devices, and using our systems only as authorized.
- • Three Apples;
- • the client, school, or organization controlling the data; and
- • authorized users of the product or platform.
- • lawful collection and upload of data;
- • obtaining any required notices, permissions, and consents;
- • managing user roles and permissions;
- • training their staff and users;
- • securing their internal systems, networks, and devices; and
- • protecting exported or downloaded data.
13. Children's Privacy
Some Three Apples products, including educational platforms, may involve information relating to children or minors.
Where our products are used by schools or institutions for educational purposes:
We do not knowingly collect children's personal information directly from children for independent commercial purposes unless lawfully authorized.
- • the relevant school or institution is generally responsible for authorizing use of the platform and obtaining any necessary parental or guardian consent where required by law;
- • Three Apples processes such information only for the purpose of delivering the agreed service.
14. Your Rights and Choices
Depending on the applicable law and the context in which we process your information, you may have the right to:
If Three Apples is processing your information on behalf of a client, school, or organization, we may direct your request to that organization.
To exercise privacy-related rights, please contact us using the details below.
- • request access to your personal information;
- • request correction of inaccurate information;
- • request deletion of personal information where legally permitted;
- • withdraw consent, where processing is based on consent;
- • object to certain uses of your information;
- • request information about how your data is processed.
15. Marketing Communications
We may send business updates, newsletters, service announcements, promotional material, or follow-up communications where permitted by law or where you have consented.
You may opt out of non-essential marketing communications at any time by using the unsubscribe option or contacting us directly.
Even if you opt out of marketing communications, we may still send important service, transactional, legal, or account-related messages.
16. Third-Party Links and Services
Our website or platforms may contain links to third-party websites, integrations, or services. We are not responsible for the privacy practices, content, or security of those third parties.
Your use of third-party platforms may be governed by their own terms and privacy policies.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, technology, legal requirements, or service offerings.
If material changes are made, we may provide notice through our website, platforms, or direct communication where appropriate.
Your continued use of our website, products, or services after the updated policy takes effect constitutes acknowledgment of the revised Privacy Policy.
18. Contact Us
If you have questions, requests, or concerns regarding this Privacy Policy or our privacy practices, please contact:
Three Apples Systems Inc.
Calgary, Alberta, Canada
Email: info@threeapples.ca
Phone: +1 587-707-4816
Website: www.threeapples.ca