I suppose that any company is capable of such a thing but the last i saw, and as best as I understand, Koodo does not track what you do on the internet beyond how much data you use.

The flowing link may be of interest to you RE privacy terms

https://cilp.law.utoronto.ca/archives/3-plus-3-working-group/33-project-telus

Not actively, but with a warrant, koodo/Telus may have no choice but to hand over browsing info. 

Usually this is targeted and not mass blanket surveillance, but I wouldn't be surprised if mass surveillance is happening. 

Basically with anything online, you shouldn't have any expectation of privacy. Be it from telecom providers, websites, or malware

https://www.androidauthority.com/watch-edward-snowden-phones-spying-1045817/

https://www.washingtonpost.com/investigations/interactive/2021/nso-spyware-pegasus-cellphones/

If you are worried about your privacy, you can check out their official link about it here https://www.koodomobile.com/privacy

You could also find the phone number and email for the issue there.