Obdurare Inc. · Effective October 26, 2026
Obdurare
Compagnion
Upcoming products
Obdurare Inc., a Canadian company headquartered in Montreal (Quebec), is responsible for the processing of personal information across all its activities.
The President and Chief Executive Officer of Obdurare Inc. is the person in charge of the protection of personal information. To reach them, or for any question about your information: support@obdurare.net.
This policy applies to all of Obdurare's activities: the obdurare.net website, our products (the Compagnion app and, once available, the device, modules, patch and AI cloud), our partnerships, investment in the company, our international development, recruitment, the Ambassador program and our press relations.
It applies worldwide, at our headquarters and at each of our future regional offices and subsidiaries. The "Country and territory provisions" section sets out the additional rights you hold depending on where you live.
Depending on your relationship with Obdurare, we process the following information:
The website collects no audience measurement data. It only keeps, on your device, your language choice and, where applicable, the draft of a job application. Like any website, it receives technical connection data (IP address, browser), used only to display and protect it.
The information processed depends on the product. Compagnion's is described in the second part of this policy; that of our upcoming products will be described before their launch.
The contact form and our email addresses send us your name, email address, subject and message. This is used only to reply to you.
The Partnerships application collects the organization's identification (legal name, business number, head office), its profile (sector, headcount, geographic presence), the subject of the request and its details, the timeline, milestones and the contact person (name, title, contact details, language). This information is used to review the request and, where applicable, to manage the relationship.
People and organizations wishing to invest in Obdurare Inc. send us, through the same application, information about the proposed transaction and their investment policy. It is used only to review the transaction; due diligence takes place under a confidentiality agreement.
The International form collects your contact details, your profile, your organization where applicable, the proposed country and city, what you offer (including, for financing, the amount and currency), the timeline, the project description and, if you attach one, a presentation. This information is used only to review the proposal.
The Careers form collects the position or program you apply for, your contact details, your background, your documents and your answers. This information is used only to review your application and get back to you. Until you send an application, your answers stay only on your device.
Journalists who write to us send us their name, outlet, contact details and request. The documents on the Press page can be viewed and downloaded without providing any information.
We process the business contact details of our contacts, as well as our contracts and invoices, for the duration of the relationship and then the period required by law.
Every Obdurare regional office and subsidiary applies this policy. Personal information only flows between Obdurare Inc. and its local entities for the purposes described here, under written commitments.
Local teams are bound by the same confidentiality obligations and also comply with the laws of the country where they are located. Our employees' information is processed under local employment law and used only to manage their employment.
Before any exchange of sensitive documents, a confidentiality agreement may be signed with a partner, an investor or an organization proposing a new location.
Documents received are used only to review the request and are shared only with the people who need them.
We process personal information for the following purposes, on the basis indicated where the law requires it (including the GDPR, the UK GDPR, the Swiss FADP or Brazil's LGPD):
Withdrawing your consent does not affect processing already carried out.
We rely on established providers that process your data solely on our behalf, following our instructions, under strict confidentiality and security commitments. They are involved in:
Beyond these providers, we only share your data when the law requires it (a valid request from an authority, a legal obligation) or as part of a corporate reorganization (merger, acquisition): this policy would then continue to apply, and you would be informed.
We never share your data for commercial, advertising, insurance or employment purposes. We do not "sell" or "share" your personal information as defined by US privacy laws.
Your information may be processed in Canada, the United States, the European Union, the countries of our future regional offices and the other countries where our providers operate. Each transfer is covered by recognized safeguards: adequacy decisions, the European Commission's standard contractual clauses, the UK addendum or equivalent mechanisms under your law.
Your data is encrypted in transit and at rest. Passwords are hashed, each sign-in can be confirmed by a code sent by email, access is limited to the people who need it and repeated attempts are blocked. Details are on our Security page.
No system is infallible. If an incident compromised your data, we would contain it immediately, notify the competent authorities within the legal deadlines (for example 72 hours under the GDPR), and inform you when the incident presents a risk to you. We do not display any certification we do not hold.
Wherever you live, you can exercise the following rights free of charge, at any time:
To exercise a right, write to us at support@obdurare.net. Compagnion users can also do so from the app (Profile, then Account); full deletion is described on the Delete my account and data page. We respond within the legal deadlines and never penalize you for exercising a right.
The obdurare.net website uses no advertising cookies and no audience measurement tool. It only keeps, on your device, your language choice and the draft of a job application in progress.
The app uses your device's local storage and strictly necessary cookies: to keep you signed in, remember your language and preferences, and work offline. You can clear them at any time from your browser or phone.
Our services are not intended for children under 13, or the higher minimum age set by the law of your country (for example 16 in some European Union countries). If you believe a child has provided us with data, write to us and we will delete it.
Depending on where you live, the following provisions supplement this policy and prevail in case of conflict.
We comply with Quebec's Act respecting the protection of personal information in the private sector, as modernized by Law 25, and with federal PIPEDA: explicit consent for sensitive information, a person in charge of the protection of personal information (the President and Chief Executive Officer, reachable at support@obdurare.net), transparency, incident notification and portability. You may file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
The GDPR applies to your data. The legal bases are described in the "Purposes and legal bases" section, and the health data processed by Compagnion falls under Article 9, processed only with your explicit consent. You have the rights of access, rectification, erasure, restriction, objection and portability, the right to withdraw your consent and to lodge a complaint with your supervisory authority. Transfers outside the EEA are governed by the European Commission's standard contractual clauses.
The same safeguards apply under the UK GDPR and the Data Protection Act 2018. You may lodge a complaint with the Information Commissioner's Office (ICO).
The Federal Act on Data Protection applies. The health data processed by Compagnion is sensitive personal data, processed only with your express consent. You may contact the Federal Data Protection and Information Commissioner (FDPIC).
In California and in states with a privacy law (Virginia, Colorado, Connecticut, Utah, Texas, among others), you have in particular the rights to know, access, correct, delete and receive your data, and not to be discriminated against for exercising them. We do not "sell" or "share" your personal information as defined by these laws. You may exercise your rights directly or through an authorized agent, at support@obdurare.net.
The health data processed by Compagnion is sensitive data (Article 11), processed with your specific consent. You have the rights set out in Article 18 and may contact the National Data Protection Authority (ANPD).
We handle your data in accordance with the Australian Privacy Principles. The health information processed by Compagnion is sensitive information, collected only with your consent. You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
The health data processed by Compagnion is special care-required personal information, processed only with your prior consent. International transfers comply with the requirements of the Personal Information Protection Commission (PPC).
Everywhere else, including under South Korea's PIPA, India's DPDP Act, South Africa's POPIA, Nigeria's NDPA or Côte d'Ivoire's personal data protection law, we apply this policy in full, together with the mandatory rights of your country. If a local law grants you a more protective right, that right applies.
We may update this policy to reflect changes in our products or in the law. In the event of a significant change, we will inform you in the app or by email before it takes effect. The effective date appears at the top of this page.
For any question about your data or this policy, or to exercise your rights wherever you are: support@obdurare.net. Obdurare Inc., Montreal (Quebec), Canada.
Compagnion only processes what is necessary, depending on the features you choose to use:
Your health data belongs to the most protected categories under laws worldwide: special categories under the GDPR, sensitive information under Quebec's Law 25 and the CPRA, sensitive data under the LGPD. It is processed only with your explicit consent, for the features you use, and is never public.
Compagnion is not a medical device. It makes no diagnosis and does not replace the advice of a healthcare professional. In an emergency, call your local emergency services.
Some features, such as the coach, reading a document or analyzing a meal photo, send the necessary information to an artificial intelligence provider. It acts solely on our behalf and does not reuse these exchanges to train its models.
We do not use your health data to train artificial intelligence models. Our access key stays on our servers, never in your browser.
Without an account, your data stays on your device. With an account, it is also stored on our servers, so you can use it from one device to another.
Some processing never leaves your phone: face detection and skin measurements, with the photo deleted as soon as the analysis is done, and the filter that blocks explicit content from being sent. On first use, the app downloads its face detection model: this is a download only, and no image is sent.
What you publish (photos, videos, stories, texts, comments, public name and profile photo) is visible to other users, and sometimes through a share link. You can edit or delete your posts at any time.
Your health data, your record, your analyses and your conversations with the coach are never public.
Your messages, and the photos and videos you exchange, are stored on our servers so they can be delivered and remain available in your conversations.
Audio and video calls go directly from one device to the other whenever possible, otherwise through a relay server. They are never recorded. You choose who can message you, and you can block or report anyone.
An automatic filter on your device blocks explicit content from being sent. Anyone can report a post: after several reports, it is hidden and its author receives a warning. After three warnings, the account may be suspended.
We keep the minimum information needed for this moderation and for fraud prevention. You can contest a decision by writing to us.
Compagnion rewards activity with points, which can be exchanged for benefits or a cash payout. For a payout, you provide the payment destination the app offers for your country. This destination is passed on to the service that makes the payment.
This information is used only for the payout and for fraud prevention.
Connections with your family and friends are only created with the agreement of both people, and either can remove them.
You can send a summary or your record to your doctor with "Send to my doctor". Nothing is sent without your action, and every sending is logged. We also keep a record of consents given and withdrawn, so that we can demonstrate them.
Your emergency card generates a QR code containing the information you enter: anyone who scans it can read it. To create the code image, this information passes through our server without being stored.
If you subscribe your calendar to Compagnion, a private link lets your calendar app display your planned workouts.
The "For you" feed ranks posts by popularity, freshness and what you have already seen. It is simply a display order.
No decision producing legal effects or significantly affecting you is made in a fully automated way. Compagnion's indications, alerts and summaries are information: they make no diagnosis and take no action on your behalf.
Sign-in codes sent by email are valid for ten minutes, and a session lasts thirty days.
Compagnion is distributed notably on Apple's App Store and on Google Play. The privacy disclosures published on these stores reflect this policy. Apple and Google may process some data (downloads, updates, payments) under their own policies.
These products are under study. Once available, the signals they measure will be processed under this policy, to observe and alert you, never to diagnose.
Details of their processing will be published here before their launch.
Some of the music offered in Compagnion for stories and posts are tracks by Kevin MacLeod (incompetech.com), used under a Creative Commons Attribution 4.0 license. The track title and the artist's name appear on every story or post that uses it.
Tracks: Carefree, Wallpaper, Bossa Antigua, Easy Lemon, Airport Lounge, Off to Osaka, Dirt Rhodes, Daily Beetle, Volatile Reaction, Movement Proposition, Pamgaea, Galactic Rap, Funkorama, Run Amok, Electrodoodle, Hitman, Inspired, Fearless First, Clean Soul, Brightly Fancy, Impact Moderato, Heroic Age, Take a Chance, Rising Game, Meditation Impromptu 01, Meditation Impromptu 02, Healing, Floating Cities, Peaceful Desolation, Ether Vox, Dreamer, Calmant, Monkeys Spinning Monkeys, Sneaky Snitch, Fluffing a Duck, Hep Cats, Kool Kats, Happy Alley, Life of Riley, Pixel Peeker Polka - faster.
Articles in the Obdurare Journal are published for general information. They do not constitute medical advice and do not replace consultation with a healthcare professional. When an article draws on published research, its sources are listed at the end. Some articles describe products in development, whose features may change before launch.
This text is identical to the policy published at obdurare.net/confidentialite. For the rules of use, see the Terms of Use.