Privacy Policy

Last updated: July 26, 2026 · AidFone Inc. · Montréal, Québec, Canada

1. Who we are

AidFone Inc. ("AidFone," "we," "us") is a Canadian corporation based in Montréal, Québec.

• Federal corporation no.: 1780633-7
• Business number: 727637233 RC0001

Person in charge of personal information protection (Privacy Officer):
Normand Lapointe — [email protected]

This policy explains what personal information we collect, why, how we protect it, and the rights you have under Québec's Act respecting the protection of personal information in the private sector (modernized by Law 25) and Canada's PIPEDA.

2. Two people in every AidFone account

AidFone is unusual: one person sets it up for another.

• The caregiver is the account holder — they subscribe, pay, and manage the configuration.
• The senior is the person who uses the phone. Their personal information is collected through the device.

Both are protected by this policy. Because the senior's information is involved, how we obtain consent for the senior is central to this policy — see Section 5.

3. What we collect

From the caregiver (account holder):

• Name, email address, phone number
• Billing information, processed by our payment provider (we do not store full card numbers)
• Account and configuration choices
• Messages you send to our support team
• Content of your interactions with the in-app AI Assistant, which may include information you choose to share about your relative (see Section 6)

From the senior (through the device):

• Device and configuration data needed to run the simplified interface
• Call-activity counts — the total number of outgoing calls in a morning and an evening window. We do not collect phone numbers, contact names, call durations, or the exact time of any call. (See Section 7.)
• Last-known location — a single most-recent point, only if the caregiver turns this on; it is off by default
• Battery status
• Voicemail-waiting indicator — a yes/no flag only, and only if the caregiver turns this on; it is off by default. We never access, store, or transcribe voicemail content.
• SMS alerts are sent through our text-messaging (SMS) provider

The senior's own voice feature on the phone is not AI: it matches a small set of spoken commands on the device. It does not record or analyze the senior's voice, and it does not identify the senior by voiceprint.

4. Why we collect it

To provide and run the simplified phone; to send the alerts the caregiver enables; to process payment and manage the subscription; to provide support; to power the in-app AI Assistant; and to detect and notify the caregiver of a meaningful change in call activity (Section 7). We do not sell personal information. We do not use it for advertising.

5. Consent

Privacy settings are set to the highest level by default. Activity features are off until deliberately turned on.

For the senior's information, consent works as follows:

• The senior consents (default). Québec law presumes every adult capable of consenting to the use of their own personal information. At setup, the senior gives their own consent on the device. This is the normal path.
• Where the senior cannot consent (exception). Only a person with court-recognized authority may consent on their behalf. Before any activity-sharing feature is enabled, the caregiver must attest that they are the court-appointed tutor of the senior, that they hold a protection mandate homologated by a court, or that they are authorized by a court to act as the senior's temporary representative for this purpose. A caregiver who is simply a family member, without one of these, does not by that fact alone have authority to consent for the senior. The attestation is recorded with a date and time in a tamper-evident log. We may ask to see the relevant court document if a question or dispute about the authority ever arises.

Withdrawing consent. The senior may withdraw consent at any time, including by speaking a revoke phrase to the phone, which stops collection within seconds. The caregiver may also disable any feature or close the account at any time. A withdrawal by the senior is honoured immediately and cannot be silently overridden by the caregiver.

5.1 Re-enabling a feature after the senior withdraws

Once the senior has withdrawn consent, a withdrawn feature is not turned back on by a dashboard toggle. Re-enabling requires fresh valid consent:

• If the senior is capable, the senior gives fresh consent on the device, which re-enables the feature.
• If the senior cannot consent, the account holder re-submits the attestation above, and AidFone re-enables the feature manually.

When a feature is re-enabled, the senior is notified on the device, and may withdraw again at any time.

6. The AI Assistant

The in-app AI Assistant helps the caregiver use AidFone. It uses technology provided by Anthropic (the "Claude" service). When you use it, the content of your interaction — including anything you choose to share about your relative — is processed by Anthropic to generate a response. This is disclosed in the assistant interface. Anthropic processes this information in the United States (see Section 9). This is separate from the senior's on-device voice feature, which is not AI (Section 3).

7. AidFone Activity Sentinel™ (call-activity monitoring)

AidFone Activity Sentinel notifies you when the senior's daily calling pattern changes. It is built to reveal as little as possible:

• It records only two numbers per day — a count of outgoing calls in a morning window and an evening window.
• It stores no phone numbers, no names, no call durations, and no exact call times.
• The caregiver only ever sees these counts and a change alert — never a list of calls.
• It is off by default and runs only with valid consent (Section 5).
• The senior can stop it at any time.

Because AidFone Activity Sentinel observes a behavioural pattern, it is a feature that analyzes the senior's activity. We tell you it exists, what it does, and how to turn it off — and it stays off until you turn it on.

8. Automated processing

AidFone Activity Sentinel compares recent call counts to a short historical average and, if activity drops meaningfully, sends the caregiver an informational SMS. Although this alert is not an automated decision within the meaning of the law, we choose to be transparent: you may ask how it works and request a review by a person.

9. Where your information is stored, and transfers outside Québec

• Core database (accounts, configuration, activity counts, location point): hosted in the AWS Canada (Central) region, in Montréal, Québec — your core data stays in Québec.

Some service providers necessarily process certain information outside Québec:

Before relying on a provider outside Québec, we assess whether the information will receive protection adequate to Québec standards and put a written agreement in place.

10. How long we keep it

Consent records are kept as a permanent, tamper-evident log for accountability. Any court document we receive (only if requested in a dispute) is kept encrypted and access-restricted only while we rely on that authority, then destroyed; the log keeps a record that it was received and destroyed.

11. Your rights

Under Québec law you may:

• Access your personal information and obtain a copy
• Rectify information that is inaccurate, incomplete, or ambiguous
• Withdraw consent to its use
• Receive your information in a structured, commonly used technological format (portability)
• Request that we stop disseminating information, or de-index a link, where the legal criteria are met (right to be forgotten)
• Be informed about automated processing and location features and request human review where applicable

To exercise any right, contact the Privacy Officer at [email protected]. We respond within 30 days (the legal maximum) and aim to respond sooner. If we refuse, we will tell you why and how to seek review.

You may also file a complaint with the Commission d'accès à l'information du Québec (CAI) — cai.gouv.qc.ca.

12. Security

We protect personal information with measures appropriate to its sensitivity, including encryption in transit and at rest, restricted access on a need-to-know basis, and a tamper-evident (write-once) consent log. If a confidentiality incident creates a risk of serious harm, we will notify the CAI and affected individuals as required by law.

13. Children

AidFone is not directed at, or intended for, children. We do not knowingly collect personal information from anyone under 14.

14. Changes

We may update this policy. Material changes will be communicated to account holders. The "last updated" date reflects the current version.

15. Contact

Normand Lapointe, Privacy Officer
AidFone Inc., Montréal, Québec, Canada
[email protected]