Investigation finds Tim Hortons app violated privacy laws, says Canadian regulator