Legal & Trust
Privacy Policy
This Privacy Policy explains how Vansh Care Inc. (“Vansh,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information when you access or use the Vansh Care website, mobile application, beta products, AI-enabled features, careflows, communications, and related services (together, the “Service”).
Vansh Care is designed to support family caregivers, including members of the sandwich generation, by helping organize care-related information, tasks, and careflows. Because caregiving often involves sensitive family, health, and personal information, we take privacy seriously.
By using the Service, you consent to the collection, use, disclosure, and processing of personal information as described in this Privacy Policy. If you do not agree, do not use the Service.
1. Privacy at a glance
This summary is provided for convenience. The full Privacy Policy below governs.
What we collect: We may collect account information, contact details, careflow information, AI prompts and outputs, caregiver notes, information about Care Recipients, device and usage data, communications, support requests, beta feedback, and other information you choose to provide.
Sensitive care information: The Service may process sensitive personal information, including health-related, caregiving, family, living arrangement, medication, symptom, diagnosis, appointment, mobility, cognitive, behavioural, and safety-related information.
Care Recipient information: If you submit information about another person, such as an aging parent, child, family member, or loved one, you are responsible for having the legal authority and consent required to do so.
AI processing: Vansh Care uses AI systems. Your prompts, uploads, careflows, notes, and outputs may be processed by Vansh, its AI systems, and service providers to provide, secure, troubleshoot, support, evaluate, and improve the Service, as described below.
Beta product: Vansh Care is currently in beta. We may collect additional technical, diagnostic, product, interaction, and feedback data to test, improve, and secure the Service.
No sale of sensitive care data: We do not sell your sensitive care information for money. We do not use sensitive care information for third-party targeted advertising.
Service providers: We use service providers for hosting, cloud infrastructure, AI processing, analytics, support, communications, security, and other operational needs.
Cross-border processing: Your personal information may be processed in Canada, the United States, or other jurisdictions where we or our service providers operate, and may be subject to the laws of those jurisdictions.
Your rights: You may request access, correction, deletion, withdrawal of consent, and other rights available under applicable law, subject to legal limits and identity/authority verification.
2. Scope of this Privacy Policy
This Privacy Policy applies to personal information we collect through the Service, including our website, app, beta features, waitlists, onboarding flows, AI assistant features, support channels, and related communications.
This Privacy Policy does not apply to third-party websites, apps, services, healthcare providers, professionals, emergency services, app stores, or integrations that we do not control. Their privacy practices are governed by their own policies.
The Service is currently intended for users located in Canada unless we expressly state otherwise.
3. Key definitions
“Personal information” means information about an identifiable individual, including information that can reasonably be linked to an individual.
“Sensitive care information” means personal information that is sensitive because of its nature or context, including health-related information, caregiving information, family information, information about cognitive or physical condition, medications, symptoms, diagnoses, appointments, care plans, living arrangements, safety needs, mobility, disability, financial stress, or other intimate personal circumstances.
“Care Recipient” means a person for whom you use Vansh Care to organize, understand, or coordinate care, such as a parent, elder, child, family member, or loved one.
“User Content” means information, notes, messages, prompts, files, careflows, observations, documents, images, feedback, and other content you submit to or generate through the Service.
4. Information we collect
We collect personal information directly from you, automatically through the Service, from service providers, and from third parties where permitted by law.
4.1 Account and profile information
We may collect your name, email address, phone number, password or authentication credentials, province/territory or location, preferred language, account settings, consent records, notification preferences, and other information you provide during signup or onboarding.
4.2 Caregiver and careflow information
We may collect information you provide about your caregiving role, relationship to a Care Recipient, caregiving tasks, family coordination, routines, reminders, questions, care goals, caregiver stress, and careflows.
4.3 Care Recipient information
You may choose to provide information about a Care Recipient, including name, age, relationship, health-related observations, symptoms, diagnoses, medications, appointments, providers, routines, care preferences, safety needs, mobility, cognitive or behavioural changes, living arrangements, and other care-related information.
You must not provide Care Recipient information unless you have the authority and consent required by applicable law.
4.4 AI prompts, outputs, and interaction data
When you use AI-enabled features, we may collect your prompts, messages, uploads, instructions, careflow inputs, generated outputs, summaries, follow-up questions, edits, ratings, and related interaction data.
This may include sensitive care information if you choose to include it.
4.5 Files, images, documents, and recordings
If the Service allows uploads, transcription, image analysis, document review, or similar features, we may collect files, images, documents, audio, transcripts, metadata, and extracted information you submit.
You should not upload medical records, legal documents, financial documents, images, or recordings unless you have the right and authority to do so.
4.6 Device, usage, and technical information
We may collect IP address, device identifiers, browser type, operating system, app version, pages or screens viewed, time stamps, log data, crash reports, performance data, diagnostic data, referral URLs, feature usage, session activity, and security events.
4.7 Location information
We may infer general location from your IP address or collect location information if you enable location-based features. We do not collect precise location unless the Service asks for it and you permit it.
4.8 Communications and support information
We may collect information when you contact us, respond to surveys, join a waitlist, provide feedback, participate in beta testing, communicate with support, or interact with us through email, SMS, in-app messages, social media, or other channels.
4.9 Payment information
If Vansh Care introduces paid features, we or our payment processors may collect billing information, subscription status, transaction records, and limited payment details. Full payment card information is generally processed by payment processors, not stored by Vansh.
4.10 Cookies and similar technologies
We may use cookies, SDKs, pixels, local storage, analytics tools, and similar technologies to operate the Service, remember preferences, improve performance, understand usage, secure the Service, and support marketing where permitted by law.
5. How we use personal information
We use personal information for the purposes described below.
5.1 To provide the Service
We use personal information to create and manage accounts, operate the website and app, generate careflows, provide AI-enabled responses, organize caregiver notes, support reminders and notifications, personalize the experience, and make the Service function.
5.2 To support caregivers and careflows
We use information you provide to help organize care-related tasks, context, questions, notes, family coordination, and caregiver workflows. Vansh Care is intended to help caregivers preserve care fuel by reducing administrative and informational burden.
5.3 To provide AI-enabled features
We use personal information, prompts, uploads, and careflow context to generate AI outputs, summaries, checklists, suggested questions, organizational assistance, and related Service features.
AI outputs may be inaccurate or incomplete. Vansh Care is not a healthcare provider and does not provide medical advice, diagnosis, treatment, emergency response, or professional caregiving services.
5.4 To operate and improve the beta Service
Because Vansh Care is in beta, we may use information to test features, debug issues, evaluate performance, improve accuracy, enhance safety, detect errors, understand usage, develop new careflows, and improve the overall product experience.
Where required by law, we will obtain consent before using sensitive care information for non-essential product improvement, AI training, model fine-tuning, research, or analytics that are not necessary to provide the Service.
5.5 Human review
Authorized Vansh personnel, contractors, or service providers may review personal information, including AI prompts and outputs, where necessary to provide support, troubleshoot issues, investigate safety or security concerns, improve Service quality, evaluate beta performance, enforce our Terms, or comply with law.
We limit human access based on role, need, and sensitivity.
5.6 Safety, security, and abuse prevention
We use personal information to protect the Service, detect fraud or misuse, investigate suspicious activity, prevent unauthorized access, enforce our Terms of Service, maintain audit logs, and protect Vansh, users, Care Recipients, and third parties.
5.7 Communications
We use contact information to send service-related messages, account notices, beta updates, security alerts, support responses, legal notices, product updates, and administrative communications.
With consent where required, we may send marketing or promotional communications. You can unsubscribe from marketing messages, but you may still receive service-related communications.
5.8 Legal, compliance, and business purposes
We may use personal information to comply with legal obligations, respond to lawful requests, enforce agreements, manage corporate records, exercise or defend legal rights, conduct audits, complete business transactions, and protect against legal, privacy, security, operational, or reputational risk.
5.9 De-identified, anonymized, and aggregated information
We may de-identify, anonymize, or aggregate information and use it for analytics, product development, AI evaluation, safety testing, research, reporting, business planning, and other lawful purposes. We will not attempt to re-identify information that has been legally anonymized except where permitted for testing, security, or compliance purposes.
6. Consent
We collect, use, and disclose personal information with consent or as otherwise permitted or required by law.
Because the Service may involve sensitive care information, we may request express consent for certain activities, including processing health-related or caregiving information, using AI-enabled features, connecting third-party integrations, using optional analytics, or using sensitive information for non-essential improvement or research.
You may withdraw consent, subject to legal or contractual restrictions. If you withdraw consent needed to provide the Service, some or all features may no longer be available.
For Care Recipient information, you confirm that you have obtained all consents and authorizations required to provide that information to Vansh and allow Vansh to process it as described in this Privacy Policy.
7. AI systems and model improvement
Vansh Care uses AI systems to help power careflows and caregiving support.
We may process your inputs and outputs through Vansh systems and third-party AI service providers to provide and maintain the Service. These providers may process information on our behalf under contractual restrictions.
We may use personal information to improve Vansh Care where permitted by law and consistent with your consent choices. For sensitive care information, we will take a more protective approach. We may use sensitive care information for Service improvement, AI evaluation, model tuning, or research only where it is necessary to provide the Service, where we have obtained appropriate consent, or where the information has been de-identified, anonymized, or aggregated as required by law.
We do not intend to use sensitive care information to create third-party advertising profiles.
Canadian privacy regulators have made clear that generative AI does not sit outside existing privacy laws, and that organizations using generative AI should be transparent about what personal information is used, why, and whether prompts or personal information are used for secondary purposes such as model training.
8. When we disclose personal information
We may disclose personal information in the circumstances below.
8.1 Service providers
We may disclose personal information to service providers that help us operate the Service, including cloud hosting providers, AI infrastructure providers, analytics providers, communications vendors, customer support tools, authentication providers, security vendors, payment processors, and professional advisers.
Service providers may access personal information only as needed to provide services to Vansh, subject to contractual, technical, and organizational safeguards.
8.2 AI providers and technology vendors
We may disclose prompts, outputs, technical data, and other Service information to AI model providers, infrastructure providers, and technology vendors that help power Vansh Care. We use contractual and technical controls intended to limit their use of this information to providing services to Vansh, unless otherwise disclosed to you or permitted by law.
8.3 People you choose to involve
If you invite family members, caregivers, or other people to a care circle, careflow, shared workspace, or similar feature, we may disclose information to those people according to your settings and the functionality you choose.
You are responsible for deciding what to share and confirming that invitees are authorized to access the information.
8.4 Third-party integrations
If you connect the Service with third-party apps, calendars, communications tools, healthcare resources, or other integrations, we may disclose information as needed to enable the integration. Third-party use of information is governed by their own terms and privacy policies.
8.5 Legal, safety, and enforcement purposes
We may disclose personal information where we believe it is reasonably necessary to comply with law, legal process, regulatory requests, court orders, law enforcement requests, or government requests; enforce our Terms; investigate misuse; protect the rights, safety, property, or security of Vansh, users, Care Recipients, or others; or respond to urgent safety concerns.
Vansh is not an emergency service and does not monitor for emergencies.
8.6 Business transactions
We may disclose or transfer personal information in connection with a financing, investment, merger, acquisition, reorganization, sale of assets, bankruptcy, due diligence process, or similar business transaction, subject to safeguards required by law.
8.7 With consent
We may disclose personal information with your consent or at your direction.
9. We do not sell sensitive care information
We do not sell sensitive care information for money.
We do not use sensitive care information for third-party targeted advertising.
If our practices materially change, we will update this Privacy Policy and obtain consent where required by law.
10. Cross-border processing
Vansh is based in Canada, but we may process personal information in Canada, the United States, and other countries where Vansh or its service providers operate.
Personal information processed outside your province, territory, or country may be subject to the laws of that jurisdiction, including lawful access by courts, law enforcement, regulators, or government authorities.
PIPEDA applies to Canadian businesses handling personal information in commercial activity and continues to apply to information that crosses provincial or national borders in the course of commercial activities.
11. Retention
We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy or as required or permitted by law.
Retention periods may vary depending on the nature of the information, sensitivity, account status, legal obligations, security needs, beta testing needs, dispute-resolution needs, and operational requirements.
In general:
- (a) account information is retained while your account is active and for a reasonable period afterward;
- (b) careflows, prompts, outputs, notes, and Care Recipient information are retained while your account is active unless deleted earlier by you or by Vansh;
- (c) support and communications records may be retained to manage the relationship and resolve issues;
- (d) technical, security, and diagnostic logs may be retained for security, debugging, fraud prevention, and product operation;
- (e) backup copies may persist for a limited period after deletion; and
- (f) information may be retained longer where required for legal, regulatory, tax, accounting, security, safety, or dispute-resolution purposes.
When information is no longer required, we will delete, de-identify, anonymize, or aggregate it in accordance with applicable law and our internal practices.
Québec guidance emphasizes that businesses remain responsible for personal information from collection to destruction, and must securely destroy information when the purposes for which it was collected and used have been achieved, unless a legal retention period applies.
12. Security
We use administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, loss, theft, alteration, and destruction.
These safeguards may include access controls, encryption, logging, authentication, monitoring, staff training, confidentiality obligations, vendor controls, and security reviews.
No system is perfectly secure. We cannot guarantee that personal information will never be accessed, used, disclosed, altered, lost, or destroyed without authorization.
13. Privacy incidents and breach notification
If we become aware of a privacy incident involving personal information under our control, we will assess the incident and take steps required by applicable law.
Where required, we will notify affected individuals, regulators, and other parties. Under PIPEDA, organizations must report breaches of security safeguards involving personal information that pose a real risk of significant harm, notify affected individuals, and keep records of breaches. Québec also requires organizations to respond to confidentiality incidents and, in certain cases, notify the Commission d’accès à l’information and affected individuals.
14. Your choices and rights
Subject to applicable law, you may have the right to:
- (a) access personal information we hold about you;
- (b) request correction of inaccurate or incomplete personal information;
- (c) request deletion of personal information;
- (d) withdraw consent;
- (e) request information about our privacy practices;
- (f) challenge our compliance with applicable privacy laws;
- (g) request information about disclosures to third parties;
- (h) request data portability where required by law; and
- (i) file a complaint with a privacy regulator.
To make a request, contact us at privacy@vansh.care.
We may verify your identity before responding. If your request relates to a Care Recipient or another person, we may require proof of authority before disclosing, correcting, deleting, or providing access to information.
Some requests may be limited by law, safety, security, other individuals’ privacy rights, legal privilege, business records, dispute-resolution needs, or technical limitations.
15. Care Recipient rights and disputes
Because Vansh Care may contain information about Care Recipients, family members, and other people, privacy requests may involve competing rights and responsibilities.
If a Care Recipient, family member, substitute decision-maker, guardian, power of attorney, parent, or other person contacts us about information in your account, we may take steps to verify identity and authority. We may also restrict, delete, preserve, or decline to disclose information where appropriate or required by law.
Vansh is not responsible for resolving family disputes, substitute-decision-making disputes, guardianship disputes, custody disputes, or disagreements about caregiving authority.
16. Children and minors
The Service is intended for adult users who have reached the age of majority in their jurisdiction.
You may submit information about a minor only if you are the minor’s parent, guardian, or otherwise legally authorized to do so, and only where permitted by applicable law.
For Québec, specific rules apply to personal information concerning minors, including consent requirements for minors under 14. Québec guidance states that consent regarding a minor under 14 must generally be provided by a parent or holder of parental authority, subject to limited exceptions.
17. Cookies, analytics, and tracking
We may use cookies and similar technologies for:
- (a) necessary Service functionality;
- (b) authentication and account security;
- (c) remembering preferences;
- (d) analytics and performance measurement;
- (e) debugging and beta testing;
- (f) fraud and abuse prevention; and
- (g) marketing, where permitted and where consent is obtained if required.
You may be able to control cookies through your browser or device settings. Blocking some cookies may affect Service functionality.
Where required, we will provide a cookie banner, consent tool, or preference centre.
18. Communications and marketing
We may send you service-related communications that are necessary or useful for your account, beta participation, security, product changes, legal notices, and Service administration.
Where required by Canada’s Anti-Spam Legislation, we will obtain consent before sending commercial electronic messages, provide identification information, and include a working unsubscribe mechanism. CASL guidance identifies consent, sender identification, and unsubscribe as the main requirements for commercial electronic messages.
You can unsubscribe from marketing communications at any time. You may still receive non-marketing service communications.
19. Third-party links and services
The Service may contain links to third-party websites, resources, apps, healthcare resources, community resources, or services. We are not responsible for the privacy practices of third parties.
Before using third-party services, review their privacy policies and terms.
20. Automated processing and profiling
Vansh Care may use AI and automated processing to generate summaries, suggestions, careflows, outputs, classifications, or other Service features.
We do not use Vansh Care to make medical, legal, financial, employment, housing, insurance, credit, or other legally significant decisions about you or a Care Recipient.
If we introduce automated processing that makes or materially assists a decision with significant effects, we will provide notice and rights required by applicable law.
21. Québec privacy matters
For Québec users, Vansh will make this Privacy Policy available in French where required by applicable law.
Québec’s Law 25 framework requires businesses collecting personal information through technological means to publish a confidentiality policy in simple and clear terms, notify individuals of changes, disclose information about purposes, means of collection, rights of access and rectification, consent withdrawal, third-party disclosures, and possible communication outside Québec.
Vansh will also publish the title and contact information of the person responsible for personal information where required.
22. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, which may include posting the updated policy, sending an email, providing an in-app notice, or requesting renewed consent.
The updated Privacy Policy will apply as of the effective date stated in the updated version.
23. Contact us
For privacy questions, requests, or complaints, contact:
Vansh Care Inc.
Attention: Privacy Officer
Email: privacy@vansh.care
Website: vansh.care
You may also contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator where applicable.