Draft — this document accurately describes how the service works today but has not yet been reviewed by a lawyer. Items in square brackets are still to be completed.

Privacy Policy

Last updated: October 2, 2026

Compagnie is a conversational companion powered by artificial intelligence. This policy explains what personal information we collect, why, who it is shared with and what your rights are, in accordance with Québec's Act respecting the protection of personal information in the private sector (Law 25) and, where applicable, the General Data Protection Regulation (GDPR).

Who is responsible

The service is operated by [company name, address]. The person in charge of the protection of personal information is [name, title], who can be reached atbonjour@compagnie.com.

What we collect

Account: email address and password (stored only in irreversibly encrypted form), and your first name or nickname if you provide one.
Phone number, only if you link it for texts and calls.
Your companions: the name, personality, appearance, voice and avatar image you choose.
Your conversations: messages written in the app, text messages exchanged with your companion and written transcripts of your calls.
The memories your companion automatically extracts from your conversations (your tastes, your plans, important moments), so it can remember them later.
Technical usage data: call length, processing volume, costs and safety indicators.

We do not keep audio. Your voice messages are transcribed and then deleted; your calls are not recorded — only their written transcript is kept in your conversation thread.

The one exception: seniors' story postcards. When the companion invites a senior to tell a memory, it first asks them, out loud, whether they agree to have their voice recorded for their family. Only if they say yes is their voice — and only theirs — recorded while they tell the story, then attached to the postcard, if they also agree to share it. The recording is kept as long as the postcard exists and deleted with it, with the account, or on request.

Why we use it

To run your companion: generating its replies, voice messages, texts and calls.
To let it remember you and help your relationship grow.
To ensure safety: we automatically analyze messages to detect situations of distress or prohibited content, and to suggest support resources. Nobody reads your conversations; the only exception is when this analysis flags a message: a small number of people on our team may then view that message and the 3 before it, within 30 days, solely to decide what to do about it. Every such view is logged.
To limit abuse and control costs (usage limits, for example 30 minutes of calls per day).
Family plan — family circle: the person in charge can invite other relatives to follow the senior's news, read-only (activity, weekly note, postcards). They never see the senior's conversations, and only receive the weekly note, alerts and postcards if the senior agreed to share them with their family.
To send you notifications, only if you turn them on in the app (on each device): a reply that arrived while the app was closed, family plan alerts, and, if you choose, a message from your companion checking in on you (at most once a day). They go through your browser's notification service (Google, Apple or Mozilla), encrypted, and never show the content of your conversations — only who is writing. You can turn them off at any time.
Family plan — alerts by text message: if you linked your phone number (verified with a code), an alert about the aîné (fall, pain, distress, confusion, possible scam) also reaches you by text, without saying what it is about: the message asks you to open the app. You can turn these texts off in “My account”.
To send you a few helpful emails when you start (welcome, a reminder if you haven't talked to your companion or added your parent yet): each at most once, with a one-click unsubscribe link. Service emails (password, family plan alerts) aren't affected.

Your data is never sold or used for advertising.

Who it is shared with

We use service providers that process your data on our behalf, solely to provide the service:

DigitalOcean (hosting and storage, in Toronto, Canada): database, files and servers.
OpenAI (United States): generating replies, transcription, voice synthesis and voice conversation, safety analysis. Under its business terms, OpenAI does not use this data to train its models.
Twilio (United States): routing text messages and phone calls.
Cloudflare Turnstile (United States): anti-bot check on the signup and invitation forms.
Google Analytics (United States): audience measurement for the website and the sign-in page, only if you accept it (see "Cookies" below).

Some data is therefore communicated outside Québec, notably to the United States. We have assessed this and framed it with these providers' contractual commitments. [To be completed: privacy impact assessment.]

The website assistant

The website assistant answers your questions about Compagnie from this site's content. Your questions are sent to OpenAI (United States) to generate the answer, after an anti-bot check (Cloudflare Turnstile) and a safety check.We keep neither your questions nor the answers: only anonymous counters (the question's topic, the language, the page, the cost), with no link to your identity. Please don't enter personal information.

Cookies and audience measurement

The www.compagnie.com website and the app's sign-in page use Google Analytics to measure visits (pages viewed, where visits come from, invitation requests), so we can improve them. These cookies are off by default: they are only set if you click "Accept" in the banner. Without your consent, Google only receives anonymous technical signals, with no cookie or identifier. Advertising signals are always off, and page addresses are sent without their parameters (an invitation link, for example).

Your choice is kept on your device for 13 months. You can change it at any time with theCookies link, also at the bottom of every page of the website. The app's signed-in screens (conversations, settings, etc.) contain no audience measurement.

How long we keep it

Your data is kept for as long as your account exists. When you delete your account, your companions, conversations, memories and phone number are deleted [timeframe to be specified, e.g. 30 days for backups].

Security

Communications with the service are encrypted (HTTPS/TLS), the database can only be accessed from our servers, and images are stored privately. Since no system is perfectly secure, we will notify you, as well as the Commission d'accès à l'information, of any confidentiality incident that presents a risk of serious injury.

Your rights

Right in the app: each companion's “Memories” screen lets you view, correct or erase what it remembers; “My account” lets you export all your data (JSON file) and permanently delete your account along with everything attached to it. For any other request (access, correction, withdrawal of consent), write to bonjour@compagnie.com: we respond within 30 days. You can also file a complaint with the Commission d'accès à l'information du Québec.

Texts and calls

Texts and calls are only enabled if you link your number yourself, confirmed with a code. Reply STOP to stop receiving texts. Your carrier's charges may apply.

Family plan waitlist

If you sign up on the “For your parents” page, we collect your first name, your email, your relationship to the person concerned and your message, if any, solely to let you know when we launch. This data is hosted byNetlify (United States), the website's host, and deleted upon request.

Minimum age

The service is reserved for people 18 years of age and older.