Privacy Policy
Privacy Policy
Your privacy is of vital importance to us. Shoshin uses your data in the following ways:
- 1 We do not collect government-issued identifiers such as health card numbers (MSP), Social Insurance Numbers (SIN), or official legal names.
- 2 We do not link nicknames to individual assessments in any way that could identify you.
- 3 Age (birth year and month) and gender are used solely to improve medical assessment accuracy.
- 4 Medical history, current medications, and allergy information are collected to refine follow-up questions and provide consistent triage assessments.
- 5 Your home province is used to apply the correct regional medical guidelines.
- 6 Your current location (when travelling) helps provide triage actions appropriate for local healthcare services.
- 7 Health data submitted for assessments and report insights is processed by Google's Gemini Enterprise Agent Platform under an enterprise agreement. Because the Gemini model we rely on is not yet offered from Google's Canadian regions, this processing may take place on Google servers outside Canada, including the United States. Under our enterprise agreement, your data is not used to train Google's models and is not retained for training.
- 8 Your email address is collected at sign-up and is used only for authentication and to respond to feedback you submit. It is never included in public-facing communications.
- 9 Assessment and report insight records are retained for up to two years from creation, then automatically deleted. You may delete your records or your entire account at any time from Settings.
- 10 De-identified assessment and report data may be analyzed to improve the accuracy and safety of the product. This sanitized data has all identifying details removed so it cannot be traced back to you.
- 11 Your account, profiles, assessments, and report insight records are stored in Google Firestore databases hosted in Canada (Toronto region).
- 12 We share personal information with service providers only as needed to run Shoshin: Google (AI processing and hosting), PayPal (payment processing, which receives your name, billing address, and country to complete a subscription), and OpenStreetMap (optional location lookup). If you submit feedback, its contents are forwarded to our private issue tracker on GitHub. Some of these providers process data outside Canada. We never sell your personal information.
Privacy inquiries:
Privacy inquiries:
Regulated by the Office of the Information and Privacy Commissioner for BC (OIPC BC) under the Personal Information Protection Act (PIPA).
Challenges & Complaints
If you have concerns about how Shoshin handles your personal information, you may contact our Privacy Officer. We will respond within 30 business days.
To submit a privacy complaint: (1) Email privacy@shoshin.health with "Privacy Complaint" in the subject line. (2) Describe your concern and the information involved. (3) We will acknowledge receipt within 5 business days and resolve the matter within 30 business days.
If you are not satisfied with our response, you may file a complaint with the Office of the Information and Privacy Commissioner for BC (OIPC BC) at oipc.bc.ca.
Last updated: June 2026