Care AZ — Website Privacy Notice
Last updated: October 6, 2026
Who we are and what this notice covers
Care AZ is operated by VM TECH, based in British Columbia, Canada. This notice explains how personal information is handled when you visit careaz.ca or contact us about this public website. Contact our privacy lead at [email protected].
The website introduces a product in development. Care AZ accounts are open to a small pilot of providers and families; what we do with information inside those accounts is explained in the section Using the Care AZ service below. Care AZ does not submit anything to the government on your behalf, and the children's communication boards hold only what a family chooses to put on them.
Information involved in visiting the website
When your browser requests a page, hosting and security services process technical information such as your IP address, requested address, browser information, request time and security signals. Some information may be recorded in operational or security logs. We use this information to deliver the website, diagnose problems and protect it from misuse.
If you contact us, we receive the contact details and information you choose to provide. We use them to respond and manage your request. Please do not send children's records, diagnoses, funding documents or other sensitive client information through ordinary email or this public website.
Cookies and similar technology
The site uses Cloudflare performance analytics to understand page loading and website usage. Cloudflare describes its Web Analytics as not using cookies or local storage to collect usage metrics. This is separate from technical cookies that application, hosting or security services may use to operate and protect the site. You can manage cookies in your browser; blocking them may affect some site functions.
Service providers and disclosures
The website uses DigitalOcean for hosting and Cloudflare for delivery and security. These providers process information needed to supply their services. Our origin server is in Toronto; that does not mean all processing by our providers takes place in Canada. Information processed outside Canada may be subject to the laws of the relevant jurisdiction.
We may disclose information when required by law or where legally permitted to protect the website and people affected by misuse.
Retention and protection
We limit access to people who need information to operate the website or answer requests, and use safeguards appropriate to the information involved. No internet service can guarantee complete security. We keep information only for the operational, legal and request-handling purposes described here, then delete or anonymize it when no longer required.
Your choices and requests
You may ask our privacy lead about our practices, request access to or correction of your personal information, and withdraw consent where consent is the basis for processing, subject to applicable legal and contractual restrictions. We will explain any limits and any reasonably necessary identity checks. Please do not send identity documents unless we have arranged a suitable method. If a concern is not resolved, you may contact the Office of the Information and Privacy Commissioner for British Columbia at oipc.bc.ca, or the Office of the Privacy Commissioner of Canada at priv.gc.ca, as applicable.
Government ID and future payments
This public website does not collect government-ID documents or payment card details. Our planned payment design is to use Stripe-hosted card entry so full card numbers and card security codes are not received or stored by Care AZ. Payments are not available on this website yet. Before payment services launch, this notice will describe the payment references, billing details and transaction records Care AZ actually receives and retains.
Children and future services
This public website is intended to inform adult providers and caregivers. It does not invite children to create accounts or submit personal information. If you believe a child has provided personal information to us, contact our privacy lead so we can assess and address it. Future child-facing features will require their own assessment, notices and consent arrangements before launch.
Using the Care AZ service (pilot)
This part applies when you have a Care AZ account — as a provider, a family member, or both. It is written in plain language on purpose. It is a pilot-stage notice: a qualified privacy adviser will review it before Care AZ opens to the public, and we will tell account holders when it changes.
What a provider account holds. Your practice's name and contact details; the names and roles of the people in your practice; for each child you serve, the legal name, the funding order details (order number, program, amounts, dates) and, only where a billing rule needs it, the date of birth; the sessions your team logs (date, length, service type, billing notes); the invoices you create and their payment status. Care AZ does not ask for diagnoses, assessments or clinical notes, and we ask you not to put them in billing notes.
What a family account holds. Your name, email, chosen language and, if you add one, a mobile number. If a provider links a child to you, you see that child's sessions, invoices and funding figures from that provider only. The documents you upload and the receipts you enter in the spend ledger are yours; providers do not see them.
Seniors Care. A family sets up a grandparent's phone from the portal. We hold what the family enters: the senior's first name, language, contacts and their phone numbers, reminders, medicines, allergies and short health notes for emergencies, special dates. From the phone we receive check-ins, reminders done or missed, battery level, when the phone was last on, and — only when the senior shares it, or during the emergency flow — the phone's location. Family members the account owner adds can see all of this. The phone itself keeps a copy so it works without internet.
Who can see what. Each practice is isolated from every other practice. A family sees only its own children and seniors. Care AZ staff do not browse records; support access, when a problem needs it, is recorded and limited to that problem. Every time a record is opened or exported, the event is logged, and families can see that history under "Who opened records".
Payments. Provider subscriptions are taken by Stripe. Card details are entered on Stripe's pages and never reach Care AZ; we keep only Stripe's reference numbers, the plan and its status. Family access is free and is never charged.
Where information lives, and the services we use. Care AZ runs on servers in Toronto, Canada (DigitalOcean), with Cloudflare in front of the website. Sign-in codes, reminders and alerts are sent by Resend (email) and Twilio (text message); those companies may process the message in order to deliver it, including outside Canada, which is why our messages carry only a code or a link and a short line — never a diagnosis, a record or a clinical note. Stripe processes payments. We do not sell personal information, do not use it to market other VM TECH products, and do not use it to train AI.
How long we keep it. Billing records are kept for as long as the provider's professional and tax rules require, which is normally several years, even if a family closes its account. A family can export everything about its own child at any time and ask us to close the account; records a provider must keep stay with that provider. Seniors Care check-ins and alerts are deleted after 12 months. Sign-in codes expire in 15 minutes. Logs of who opened what are kept for at least 24 months.
Your choices. Change or correct your details at any time in the app. Switch reminders, texts and the Sunday summary on or off under Reminders. Withdraw a consent you gave a provider by telling the provider or us. Ask our privacy lead at [email protected] for access, correction, an export or deletion, and we will answer within 30 days. If we ever have a breach that could harm you, we will tell you and the affected provider promptly.
Not a medical or emergency service. Care AZ Seniors is a helper, not a medical alert service and not a replacement for professional care. Its emergency flow can call family and, when the family has turned test mode off, the number the family set (such as 9-1-1), but it depends on the phone being on, charged and connected. Please do not rely on it alone for a person at serious risk.
Changes
We will update this notice when our practices change and revise the date above. Where a new use requires consent or additional notice, we will address that before starting the new use.
About performance analytics: Cloudflare data collection documentation.