Privacy policy

Who is responsible

Canoë, in Montréal, Québec. The person responsible for the protection of personal information is Théo Bouchet.

For any question about this page, to ask what we hold about you, or to have it corrected or erased: write to theo@canoe-app.com or call (438) 813-3386. We answer ourselves. There is no department to get through.

What we collect

When you book online: your name, your phone number, your email if you give one, your neighbourhood or postal code, the subject of the lesson, its length, and the note you write if there is one.

We never ask for your exact address in the form. You give it out loud, on the confirmation call, and it serves to come to your home.

During and after the lesson: the topics covered, the note your teacher leaves you, and your own feedback if you choose to fill it in.

When you pay: the amount, the date and the method. Card numbers never pass through us. The terminal belongs to Square, and we only see the confirmation.

When you leave a message on our line: the recording and its written transcription, so that we can call you back.

What we never ask for: your passwords, your card numbers, your social insurance number, your date of birth, your gender.

What it is for

To teach the lesson: prepare the session, come to the right address, pick up where we left off last time.

To keep you informed: confirm the appointment, remind you a few days before, reach you if something changes.

To take payment and keep our books.

Nothing else. We do not sell, rent or trade any information, and we do not use it to target you elsewhere.

Text messages

We send three text messages at most: the confirmation of your appointment, a reminder a few days before, and the link to your own space if you want one. We name ourselves in the first three words, because a message from an unknown number deserves suspicion.

Reply STOP to any of them and everything stops, immediately and for good. You remain a client, you simply stop receiving texts.

Who else sees it

Suppliers, each for a single task, and only with what that task needs: Cloudflare hosts the site and the database, Twilio carries the text messages and the phone line, Resend sends the emails, Square takes the payments, Google carries the business listing and the advertising.

The transcription of your voice message is done by Cloudflare's artificial intelligence service, on the same hosting as the rest.

Nobody else. No data broker, no advertising network we would hand a customer list to.

Our internal tool and Google data

Canoë uses an internal tool, open to nobody but us, to manage its own accounts at Google: the advertising account and the Search Console property for this site. That tool signs in through a service account, meaning a technical identity that belongs to us. It never opens a session on behalf of a visitor or a client, and it has no users outside the Canoë team.

Which data the tool accesses: only the data in our own Google accounts. The reports of our advertising account (what the advertising cost, how many people clicked, which words were typed to find us), our own site's Search Console data, and our own Google documents, where we publish our lesson sheets. No data belonging to a third-party Google user is accessed: no name, no email address, no contacts, no calendar, no files, no photos.

How that data is used: only to run our own advertising campaigns and to follow the site's visibility. Never to target a particular person, never to train an artificial intelligence model, never to assess anyone's creditworthiness.

Who it is shared with: nobody. It is not sold, not transferred, and not handed to a data broker, an advertising network or any other third party.

How it is protected: the service account key is kept in an encrypted secret store, never in the code and never in a code repository, and is readable only by the Canoë team. Exchanges with Google go over HTTPS. The tool runs only on our own machines, when we run it.

How long it is kept, and how to have it deleted: reports are read when we need them and are not copied into our database, so there is no lasting retention. Since no Google user data is collected, there is nothing to delete; if you nevertheless believe we hold something about you, write to us and we will erase it.

There is nothing for you to authorise: no Google consent screen is ever shown for this tool, because a service account does not display one. If a window ever asked you to let Canoë into your Google account, it would not be us.

Canoë's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and audience measurement

We measure traffic to the site with Umami, which we host ourselves. It sets no cookie and keeps no identifier that would follow you from one visit to the next. That is why there is nothing to accept or refuse for this measurement.

Advertising is another matter. Google's cookies tell us which ads bring people to us, and count visits in Google Analytics. They are only set if you press “Accept” in the banner. Until you have chosen, or if you refuse, no Google cookie is set. Refusing is exactly as easy as accepting: same button, same size, same place.

Your choice is kept in your browser's own memory, not in a cookie. Clear the site data and the banner comes back.

If you have a student space, its address contains a personal key. Treat that link like a password: whoever holds it sees your progress.

How long we keep it

Your contact details and the history of your lessons stay as long as you are a client, because that is what lets your teacher pick up where you left off.

After that, we keep them for as long as our accounting obligations require, then we erase them.

Voice message recordings are erased once the message has been dealt with.

You can ask for erasure sooner: see the next section.

Your rights

You can ask to see what we hold about you, to have it corrected if it is wrong, to have it erased, and to withdraw your consent where you have given it.

A call or an email is enough. There is no form. We answer within thirty days.

If our answer does not satisfy you, you can complain to the Commission d'accès à l'information du Québec.

If this page changes

We update it when what we do changes, and the date at the top follows. A change that concerns you directly is told to you, not slipped into a paragraph.