Privacy policy

1. Our commitment to your privacy

CAP santé mentale attaches great importance to protecting the personal information of the people who use the "Je suis vigie" platform. This policy explains, transparently and in plain language, how that information is collected, used, protected and disclosed within the platform.

This policy applies in addition to the platform's legal notice. CAP santé mentale undertakes to comply with Quebec's Act respecting the protection of personal information in the private sector (Law 25) as well as, where applicable, the Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Who does this policy apply to?

This policy applies to anyone who uses "Je suis vigie", including:

young people who use the platform to take part in the learning activities;
parents or holders of parental authority of a young user;
teachers who accompany a group on the platform;
support workers, where applicable;
anyone else who visits or uses "Je suis vigie".

3. How does Je suis vigie work?

"Je suis vigie" allows a person to create an account, take part in learning activities and track their progress over time. Teacher access makes it possible, for the groups concerned, to follow the young participants' educational progress. The platform also offers support resources and may produce usage statistics.

This section is intended to help readers understand why certain information, described in the following section, is necessary for the platform to work properly.

4. What personal information do we collect?

We collect the following categories of information:

Account information: email address and, depending on the sign-in method chosen, the name provided by the identity provider (sign-in by email link, Google or Facebook).
Information needed to track progress: modules completed, advancement through the learning activities, answers to educational or statistical questions.
Information provided by the teacher: student number, when a teacher registers the members of their group.
Information provided when communicating with us: name and email address provided when making a support or information request.
Technical information: technical logs generated by our hosting provider (including the IP address), device and browser type, used for security purposes and to ensure the platform works properly. The IP address is not kept in our databases.
Cookies: placing audience measurement cookies requires your explicit consent; refusal is the default state until you have made a choice. You can change your choice at any time through the "My cookie preferences" link at the bottom of the page.

5. Why do we collect this information?

We use your personal information to:

create and manage your account;
allow the use and proper functioning of the platform;
track your progress so that you can pick up where you left off;
allow teachers to follow their group's educational progress;
improve "Je suis vigie" (fixing problems, improving content);
produce aggregate statistics for analysis and improvement purposes;
ensure the security of the platform.

Your personal information may be disclosed to the following categories of recipients, and to them alone:

authorized members of CAP santé mentale who have a reasonable need to access it;
teachers, only where this is necessary to follow their group's educational progress;
certain technology providers that support the operation of the platform (see section 7);
public authorities, where required by law, in the context of legal proceedings, or to protect our rights.

CAP santé mentale never sells your personal information.

7. Service providers

Certain providers contribute to the operation of "Je suis vigie", in particular for:

authentication (e.g. signing in with a Google or Facebook account);
hosting the platform;
audience measurement, in order to understand how the platform is used and improve its design.

These providers may use your personal information only for the purposes agreed with CAP santé mentale, and in accordance with confidentiality commitments.

List of providers:

Hosting: Microsoft Azure, Canada East region (Quebec).
Transactional emails (sign-in links, invitations, confirmations): SendGrid.
Application logging: Axiom.
Authentication: Google and Facebook, depending on the sign-in method chosen.
Audience measurement: Google Analytics.
Course content: Umbraco.

Some of these providers are established outside Quebec; those providers are subject to a privacy impact assessment (PIA).

8. How long do we keep your information?

Your personal information is kept only for as long as necessary for the purposes for which it was collected. An account can be deleted at any time by the person who holds it, from the "My account" section.

9. How do we protect your information?

Exchanges between your device and the platform are protected by an encryption protocol (TLS). Access to your information is limited to authorized personnel bound by confidentiality commitments. Despite these measures, no transmission over the Internet can be guaranteed to be completely secure.

The good practices we have put in place:

data is hosted in Quebec;
the platform manages no passwords: signing in is done by email link, or with a Google or Facebook account;
access is partitioned by role, and a teacher sees only the groups they are responsible for;
data is encrypted in transit and at rest.

10. Your rights

You have the right to:

access your personal information;
request a correction or rectification of your information;
withdraw your consent where applicable (e.g. audience measurement cookies, which can be changed at any time through the "My cookie preferences" link at the bottom of the page);
request the deletion of certain information, or delete your account directly from "My account". For a teacher account, deletion is done on request to the person responsible for the protection of personal information;
file a complaint with the person responsible for the protection of personal information and, if you are not satisfied with how your complaint is handled, with the Commission d'accès à l'information du Québec (CAI);
contact the person responsible for the protection of personal information (see section 13).

Please note that when an account is deleted, the data kept for statistical purposes is detached from the account.

We undertake to respond to any request within 30 days.

11. Do you use Je suis vigie?

We collect only the information we need for the platform to work properly and to record your progress in the learning activities. We never sell your personal information.

If you have a question about your personal information, you can write to us or ask a parent, a teacher or a trusted adult for help.

12. If you are a parent or holder of parental authority

Certain information is necessary to create an account, to allow your child to track their progress in the learning activities, and to allow their teacher to follow their educational progress where that applies. This information is never sold and is used only for the purposes described in this policy.

For young people under 14, consent is obtained beforehand by the teacher responsible for registering the group. This consent is given on a voluntary basis and may be withdrawn at any time.

As a parent or holder of parental authority, you may exercise the rights described in section 10 on behalf of your child (access, correction, withdrawal of consent, deletion). For any question, or to exercise these rights, you may contact the person responsible for the protection of personal information (see section 13).

13. Contact us

For any question about this policy or your personal information, you may contact:

René Cloutier, Executive Director — responsible for the protection of personal information

1990, rue Cyrille-Duquet, bureau 219, Québec (Québec) G1N 4K8

rcloutier@capsantementale.ca, 418 687-0474

14. Changes to this policy

This policy may be updated from time to time. In the event of a significant change, a visible notice will be posted on the platform. The date of the last update is shown below.

Last updated: July 28, 2026