The app put out by Tim Hortons turned out to be constantly recording movements, illegally collecting "vast amounts of location data" without users' knowledge or consent.
"The app also used location data to infer where users lived, where they worked, and whether they were traveling," the Office of the Privacy Commissioner said. "It generated an 'event' every time users entered or left a Tim Hortons competitor, a major sports venue, or their home or workplace."