PART A — ENGLISH
1. Who we are
DailyCheck ("DailyCheck", "we", "us") is a daily check-in service for seniors in Canada. It is operated by DailyCheck Technology, based in Toronto, Ontario, Canada. Our website is dailycheck.work.
This policy explains what personal information we collect, why, who we share it with, how long we keep it, and what your rights are. We aim to follow the Personal Information Protection and Electronic Documents Act (PIPEDA) and its fair information principles.
Privacy contact (person accountable for privacy): Privacy Officer, DailyCheck Technology — privacy@dailycheck.work
General support: support@dailycheck.work
There is no mailing address. Requests go to support@dailycheck.work.
2. What DailyCheck is, and what it is not
- A family member (the "family registrant") signs up a senior. The senior receives SMS messages with a link. The link opens a chat with an AI companion in a mobile web browser. The senior answers mostly by tapping answer buttons.
- If a check-in is missed or an answer raises a concern, DailyCheck can send an alert to family contacts.
- DailyCheck is not medical care. It is not an emergency service or an emergency response service. We do not monitor seniors continuously, and we do not send anyone to help. In an emergency, call 911 or your local emergency number.
3. Who this policy covers
- Family registrants: the person who creates the account.
- Seniors: the person who receives the check-ins.
- Family contacts: other people who are named to receive alerts. At launch, only the registering family member gets alerts, and their name, phone and relationship are kept.
4. What personal information we collect
About the family registrant
- Name, email address, phone number.
About the senior
- Name, phone number, preferred language.
Chat answers and the senior's profile
- The senior's answers in the check-in chat (taps and any typed text).
- This includes any health or medical information the senior chooses to share, such as how they feel, symptoms, sleep, meals, medicines they mention, or appointments.
- We record these answers in full into one profile for the senior. The profile includes scores (for example, a wellbeing or concern score worked out from the answers), topics the senior has talked about, and habits (for example, usual routines or check-in patterns).
Check-ins and alerts
- When check-ins are sent, opened and answered (check-in times).
- Alerts: when an alert was triggered, why, who it was sent to, and whether it was delivered.
Consent records
- Which version of our Terms and this Privacy Policy you accepted, when, and in which language, and whether you gave or refused the optional research consent (section 9).
Technical data. We keep the IP address, device and browser, and server and security logs, for 90 days.
We try to collect only what we need to run the service. Please do not share passwords, one-time codes, full payment card numbers, or other highly sensitive information that the service does not need in the chat.
5. Why we use personal information
We use personal information only for these purposes:
- Running check-ins: sending SMS links, showing the chat, recording answers, and tracking whether a check-in was completed.
- Family alerts: telling family contacts when a check-in is missed or an answer may need attention.
- Personalising questions: using the senior's profile (past answers, topics, habits, scores and language) so questions are relevant and not repeated.
- Small general self-care tips: short, general wellbeing suggestions (for example drinking water, gentle movement, or rest). These are not a diagnosis and not advice about medicines or treatment.
We also use personal information when needed to keep the service secure, to answer support requests and complaints, to keep consent records, and to meet our legal obligations.
We will ask for your consent again before we use personal information for a new purpose that is not described here.
6. Consent
- Health information is sensitive. When you register and accept this policy, you give express consent to the collection and use of the senior's chat answers, including health information, for the purposes in section 5.
- The family registrant confirms that they have the senior's consent, or the legal authority to consent for the senior (see section 13).
- You can withdraw consent at any time by writing to privacy@dailycheck.work (see section 11). If you withdraw consent for processing the service needs, such as recording chat answers or sending SMS, we may not be able to keep providing the service. We will tell you what the effect will be.
7. Who we share personal information with
DailyCheck never sells personal information. We do not sell or rent your personal information, chat answers or usage records to anyone.
We share personal information only:
- With family contacts, to deliver alerts. Family contacts see only the alert reason and check-in status, never chat content. Being named as a contact does not by itself give access to every conversation.
- With service providers who process data on our behalf to run the service (section 8). They may use it only to provide their services to us.
- When required or permitted by law, for example to respond to a valid legal order, or where the law allows disclosure to protect someone's life, health or security.
- In a business transfer (for example if the service is transferred to another operator), only as allowed by law and subject to protections at least as strong as this policy.
8. Service providers and processing outside Canada
We use these service providers:
| Provider | What it does for DailyCheck | Where data may be processed |
|---|---|---|
| DeepSeek | AI provider: generates the companion's chat messages and processes the senior's answers | Outside Canada |
| Twilio | Sends and receives SMS messages | The provider's own service locations |
| Amazon Web Services (AWS) | Hosts our servers and database | United States (Ohio region) |
| Cloudflare | DNS and content delivery network (CDN) for dailycheck.work | The provider's own service locations |
Processing outside Canada. Our servers are in the United States, and some providers, including our AI provider, may process personal information outside Canada. When information is outside Canada, it is subject to the laws of that country, and courts, law enforcement and government authorities there may be able to access it under those laws.
We stay responsible for personal information we send to service providers. We use contracts and other reasonable means to require them to protect it. Providers may not use the data to train their models.
9. Research and model training: separate, optional consent
- We will use personal information for research or for training or improving AI models only if you give separate, optional consent.
- That consent is a separate checkbox. It is unticked by default.
- Refusing it never blocks the service. You get the same check-ins and alerts either way.
- You can change your mind at any time by writing to privacy@dailycheck.work.
- Research reports will not identify any senior or family, or reveal an identifiable conversation.
10. Your content
You and the senior keep your rights to the content you provide, such as chat answers. Using DailyCheck does not transfer ownership of your personal information to us. You give DailyCheck a limited, non-exclusive licence to store, process, transmit and display that content only as needed to run the service as described in this policy and under the consents you have given. This licence does not allow us to sell your content, publish private conversations, or use them for research without the separate consent in section 9.
11. Your rights
You can ask us to:
- Access: tell you what personal information we hold about you and give you a copy.
- Correct: fix information that is wrong or incomplete.
- Delete: delete your personal information or close the account.
- Export: give you your information in a common, readable format.
- Withdraw consent: stop a use you consented to, including the optional research consent.
Email privacy@dailycheck.work. We may need to confirm your identity first. We will reply within 30 days, or tell you if we need more time and why, as the law allows. Some information may be kept after a deletion request if the law requires it, or for security, fraud prevention or an open complaint, only for as long as needed (see section 12).
Complaints. If you are unhappy with how we handle your information, please contact privacy@dailycheck.work first. You also have the right to complain to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) at any time. You do not need to finish our process first.
12. How long we keep information
We keep personal information only as long as needed for the purposes in section 5, or as required by law.
| Information | Retention |
|---|---|
| Family registrant and senior account details | While the account is open, then deleted within 30 days of closing |
| Chat answers and the senior's profile (including health information, scores, topics, habits) | A 24-month rolling limit, then deleted within 30 days of closing |
| Check-in times and alert records | 12 months |
| Consent records (terms, privacy and research choices) | Life of the account plus 2 years |
| Server, security and delivery logs | 90 days |
| Backups | Overwritten within 35 days |
| Records of privacy breaches | At least 24 months, as PIPEDA requires |
If information was used to make a decision about someone, we keep it long enough for them to ask to see it. Information that is truly anonymised and can no longer be linked to a person may be kept for statistics.
13. Age, and seniors who cannot consent
- Minimum age: family registrants must be at least 18. DailyCheck is not intended for minors. If a minor is found, the account is closed and its data is deleted.
- A senior who cannot consent: if a senior cannot give meaningful consent themselves (for example because of cognitive impairment), a family member may register for them only if that family member has legal authority to do so, for example under a power of attorney for personal care or as a substitute decision-maker. Being a relative is not, by itself, enough.
- The registrant confirms they have the parent's OK. The senior is told by SMS and can reply STOP at any time.
14. Security
We use reasonable safeguards suited to how sensitive the information is. Examples include encrypted connections, access controls, and limiting who can see data. The safeguards in place are encrypted connections, encryption at rest, and only the operator can see chat content.
No method of transmission or storage is completely secure, and we cannot guarantee security. If a breach of security safeguards creates a real risk of significant harm, we will notify affected people and the Office of the Privacy Commissioner of Canada as PIPEDA requires.
15. Changes to this policy
We will post any new version with a new version number and effective date. For significant changes, we will give notice by email or in the service. If a change needs new consent, we will ask for it. Continued use alone will not count as that consent.
16. Contact
- Privacy: privacy@dailycheck.work
- General support: support@dailycheck.work
- Operator: DailyCheck Technology, Toronto, Ontario, Canada