Privacy Policy — Canada
iSALUS Technologies Inc., Montréal, Québec, Canada operates iSALUS, a platform that connects clients with independent cleaners and cleaning companies. This policy sets out in detail what personal information we collect, why we collect it, who we share it with, how long we keep it, and how you can exercise your rights — including a dedicated section on data received through Sign in with Google. Contact: info@isalus.ca. Effective and last updated: 2026-09-15.
1. Who we are and what iSALUS does
iSALUS is operated by iSALUS Technologies Inc., Montréal, Québec, Canada. Website: https://isalus.ca. Privacy contact: info@isalus.ca. iSALUS is a technology platform and marketplace. We connect clients who want cleaning services with independent cleaners and cleaning companies. iSALUS does not itself perform the cleaning: the cleaning service is provided by the independent cleaner or cleaning company you are matched with. We provide the app, the booking and matching system, in-app communication, payment collection through Stripe, and payouts through Stripe Connect. This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and the choices you have.
2. Google Sign-In and Google user data
You can create or access your iSALUS account with "Sign in with Google". This is optional — email and password, and Sign in with Apple, are also available. What we request from Google. iSALUS requests only Google's basic sign-in (OpenID Connect) scopes: openid, email and profile. Through those scopes we may receive: • your Google account identifier (a stable ID that lets us recognise your account); • your email address and whether Google has verified it; • your name; • your Google profile picture, if your Google account has one. What we do NOT request. iSALUS does not request, and does not receive, access to Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, your files, your messages, your Google search history, or any other Google service or Google API data. We never receive your Google password. Why we use it. We use information received through Google Sign-In to authenticate you, to create or connect your iSALUS account, to identify your account and pre-fill your name, email and profile photo, to maintain your signed-in session, to contact you about your account and bookings, and to help protect the security and integrity of the platform (for example detecting duplicate or fraudulent sign-ups). Storage. Google-derived information is stored in your iSALUS account record on our backend infrastructure (Supabase) so that you can sign in again and so your profile shows your name and photo. Sign-in tokens issued during authentication are handled by our authentication provider and by your device/browser to keep you signed in; we do not use them to reach any other Google service, and we do not store your Google credentials. Limits we commit to. iSALUS does not sell Google user data. Google user data is not used for advertising of any kind, is not shared with data brokers, is not used to assess creditworthiness or for lending purposes, and is not used to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models. Google user data is shared only with the service providers that operate, host, authenticate and secure iSALUS on our behalf, or where required by law (see section 7). Google API Services User Data Policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google-derived data is used only to provide and improve user-facing iSALUS features that you have asked for, and for security, fraud prevention and legal compliance. Managing Google access. You can review or revoke iSALUS's access at any time in your Google Account under Security → Third-party apps and services. Revoking access stops future Google sign-ins but does not by itself delete information already held in your iSALUS account — to delete that, use in-app account deletion or email info@isalus.ca (see section 9).
3. Sign in with Apple and email/password sign-in
Sign in with Apple: when you use it we receive the Apple account identifier and, on your first authorization, the name and email address you choose to share (Apple may supply a private relay email address). We use those to create and identify your account so you are not asked to retype them. Email and password: we store your email address and a securely hashed password through our authentication provider. iSALUS staff cannot read your password.
4. Information we collect
A. Account and profile information — name, email address, phone number, profile photo, account type (client, cleaner, cleaning company, or administrator), preferred language, and the authentication identifiers described above. B. Booking and service information — the service requested, date and time, service address and any access or cleaning instructions you provide, property details you enter, booking status and history, invoices, ratings, reviews, cancellations and disputes. C. Location information — the service address for each booking; a cleaner's device location while they are on an active job, used for arrival confirmation, ETA and live tracking shown to that job's client; and arrival/departure geofence events for the job address. Cleaner location is collected only with the permission you grant on your device, and only in connection with active jobs — not continuously and not when you are offline. Approximate country and city derived from your connection are recorded with analytics (see F). D. Cleaner, company and verification information — professional profile, services offered, hourly rate, availability and service areas, job history and earnings history; and documents you upload for verification, which may include identity documents, right-to-work documents, insurance certificates, certifications and background-check status. Before/after job photos you upload are stored and shown to the client for that job and to iSALUS administrators reviewing quality or disputes. E. Payment and payout information — payments are processed by Stripe and cleaner payout onboarding is handled by Stripe Connect. Card numbers, bank account numbers, transit/institution/routing numbers and the identity documents Stripe requires for payout verification are collected by Stripe on Stripe's own secure pages and are never entered into or stored by iSALUS. iSALUS stores only non-sensitive references and results: a Stripe customer or connected-account identifier, payment and payout status, amounts, currency, commission and tips, invoice records, and whether Stripe has confirmed that payouts are enabled. F. Technical and usage information — platform (web, iOS, Android), device model, operating system, browser, app version, pages and screens visited, referring page and campaign parameters, sign-in events, approximate country and city, and error and crash reports. iSALUS's product analytics do not store your IP address. Error monitoring (Sentry) may process technical request details in order to diagnose faults. G. Communications and content you provide — support requests, in-app messages between clients and cleaners, notification preferences, push notification device tokens, ratings and reviews, community posts and comments, reports you submit about other users, and files or photos you attach. We do not knowingly collect more than this, and we do not collect data from third-party sources to build advertising profiles about you.
5. How we use information
We use personal information to: • create, secure and manage your account, and authenticate you at sign-in; • connect clients with cleaners and cleaning companies, and dispatch and match jobs; • process and manage bookings, rescheduling and cancellations; • show live arrival, ETA and tracking to the client of an active job; • process payments through Stripe and facilitate cleaner payouts through Stripe Connect, including commission, tips and refunds; • verify cleaner and company eligibility, identity, right to work and insurance; • send transactional and service messages (booking confirmations, reminders, job updates, payout and account notices) by email, push notification or in-app message; • provide customer support, including AI-assisted drafting of support replies that our team reviews; • detect, investigate and prevent fraud, abuse, unsafe conduct and security incidents; • troubleshoot technical problems and improve the reliability and usefulness of the app; • comply with legal, tax and accounting obligations, and enforce our Terms of Service. We do not use your information for third-party advertising, and we do not use it to train generalized or non-personalized AI models.
6. Legal basis and consent
Where the law requires a legal basis, we rely on: performance of our contract with you (providing the platform and your bookings); your consent (device location, push notifications, camera and photo access, optional marketing messages — each of which you can withdraw in your device or app settings); our legitimate interests in security, fraud prevention and improving the service; and compliance with legal obligations.
7. How information is shared
We share personal information only as follows: • With the cleaner or cleaning company assigned to your booking — your first name, service address, access and cleaning instructions, and the phone number or in-app messaging needed to complete the job. • With the client of a booking — the assigned cleaner's or company's name, profile photo, rating, verification badges, and live location and ETA while the job is active. • Stripe, Inc. — payment processing, and Stripe Connect for cleaner payout onboarding and payouts. • Supabase — database, authentication and backend infrastructure that hosts your account and app data. • Google — Sign in with Google (authentication) and Google Maps services for address autocomplete, geocoding and map display. • Apple — Sign in with Apple, and push notification delivery for iOS. • Sentry — application error and crash monitoring. • Lovable — the platform hosting and serving the iSALUS application, including the AI service used to draft support replies. • Government authorities, regulators, courts or law enforcement — where we are legally required to disclose, or where disclosure is necessary to protect someone's safety or our legal rights. • Professional advisers (such as lawyers, accountants and auditors) under confidentiality obligations. • A successor entity, in connection with a genuine merger, acquisition or reorganization, subject to applicable law and to this policy. Our service providers may process information only on our instructions and for the purposes above. iSALUS does not sell your personal information, and does not share it for advertising or cross-context behavioural advertising.
8. Data storage, security and international transfers
We use reasonable administrative, technical and organizational safeguards appropriate to the information we process, including encrypted transmission over HTTPS/TLS, encryption at rest on our managed database, authentication handled by a dedicated provider, row-level database access rules and role-based access control that separate clients, cleaners, companies and administrators, restricted administrative access with audit logging, and secure payment and payout handling delegated to Stripe. No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security. If a breach affects your information and the law requires notification, we will notify you and the relevant authority. International transfers: our service providers (including Supabase, Stripe, Google, Apple, Sentry and our hosting platform) may store or process information on servers outside your province, state or country, including in the United States and the European Union. Information processed in another jurisdiction may be accessible under that jurisdiction's laws. We do not claim that all data remains exclusively within Canada.
9. Your privacy rights and data deletion
Under Quebec's Law 25 and Canada's PIPEDA you may: request access to the personal information we hold about you; request correction of inaccurate or incomplete information; request deletion where legally available; withdraw consent where consent is the basis for processing (this may prevent us from providing parts of the service); request portability of the information you provided to us; and ask questions or complain about our privacy practices. You may also complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada. Requests: info@isalus.ca. We may ask you to verify your identity before acting on a request. Deleting your account. You can delete your iSALUS account at any time inside the app: Profile → Delete my account (cleaners: Dashboard → Account → Delete my account). On deletion we delete or anonymize your name, email, phone number, saved addresses, location records, uploaded documents (identity, right-to-work, insurance), job photos, payment and payout references, preferences, in-app messages and community content. You can also request deletion by emailing info@isalus.ca. Google Sign-In users: the information we received from Google (account identifier, name, email, profile photo) is part of your iSALUS account record and is deleted or anonymized in the same way, subject to the retention requirements below. Limits on deletion. Deletion is blocked while you have an active booking, a pending payout or an open dispute. Booking, invoice, payment, payout and tax records are retained in anonymized form where we must keep them for legal, tax, accounting, fraud-prevention, dispute or security reasons.
10. Data retention
We keep personal information only as long as reasonably necessary to: provide the service and maintain your account; complete and support bookings, payments and payouts; resolve disputes and complaints; prevent fraud and protect platform security; and meet legal, tax and accounting obligations, including the retention of transaction and tax records for the period required by applicable law (generally seven years in Canada). Retention periods vary by type of information and by legal requirement. When information is no longer needed we delete it or keep it in anonymized form.
11. Cookies, local storage and analytics
iSALUS uses cookies and browser local storage for: keeping you signed in and maintaining your session; security and fraud prevention; and remembering preferences such as language, region and currency. We also collect first-party product analytics (screens visited, platform, device type, operating system, browser, app version, referring page and campaign parameters, approximate country and city) to understand how the app is used and to improve it. Our analytics do not store your IP address. Sentry collects error and crash diagnostics. iSALUS does not use advertising cookies, ad networks, ad pixels or cross-site tracking for advertising.
12. Third-party services
The services below actually process iSALUS user data, in the roles described: • Google — Sign in with Google (authentication); Google Maps (address autocomplete, geocoding, maps). • Apple — Sign in with Apple; iOS push notifications. • Supabase — authentication, database and backend infrastructure. • Stripe — payment processing; Stripe Connect — cleaner and company payout onboarding and payouts. • Sentry — error and crash monitoring. • Lovable — application hosting and the AI service used to draft support replies for human review. Each provider has its own privacy policy governing its handling of information. We do not list, and do not use, advertising networks or data brokers.
13. Children's privacy
iSALUS is intended for adults. As stated in our Terms of Service, you must be at least 18 years old and able to enter a binding contract to use iSALUS. We do not knowingly collect personal information from children. If you believe a minor has created an account or provided information, contact info@isalus.ca and we will delete it.
14. Automated decisions and AI
We use automated systems to match and dispatch jobs to available cleaners based on location, availability, service type and eligibility, and to help draft replies to support messages, which our team reviews before sending. These systems do not make decisions with legal consequences for you without human involvement, and your data is not used to train generalized or non-personalized AI models. You can contact info@isalus.ca to ask about a decision that affects you.
15. Changes to this policy
We may update this policy as the service changes or as the law requires. The effective date and last-updated date are shown at the top of this page. Material changes will be communicated in the app or by email. Continuing to use iSALUS after an update means you accept the updated policy. Effective date: 2026-09-15. Last updated: 2026-09-15.
16. Contact us
Privacy inquiries, access, correction and deletion requests: info@isalus.ca Website: https://isalus.ca Operator: iSALUS Technologies Inc., Montréal, Québec, Canada We respond to privacy requests within the period required by applicable law (30 days in Canada unless an extension applies).