Privacy Policy

Your privacy is of vital importance to us. Shoshin uses your data in the following ways:

1. 1 We do not collect government-issued identifiers such as health card numbers (MSP), Social Insurance Numbers (SIN), or official legal names.
2. 2 We do not link nicknames to individual assessments in any way that could identify you.
3. 3 Age (birth year and month) and gender are used solely to improve medical assessment accuracy.
4. 4 Medical history, current medications, and allergy information are collected to refine follow-up questions and provide consistent triage assessments.
5. 5 Your home province is used to apply the correct regional medical guidelines.
6. 6 Your current location (when travelling) helps provide triage actions appropriate for local healthcare services.
7. 7 Health data submitted for assessments and report insights is processed by Google's Gemini Enterprise Agent Platform under an enterprise agreement. Because the Gemini model we rely on is not yet offered from Google's Canadian regions, this processing may take place on Google servers outside Canada, including the United States. Under our enterprise agreement, your data is not used to train Google's models and is not retained for training.
8. 8 Your email address is collected at sign-up and is used only for authentication and to respond to feedback you submit. It is never included in public-facing communications.
9. 9 Assessment, report insight, physiotherapy plan and nutrition plan records are retained for up to two years from creation, then automatically deleted. Personal health record entries are kept for the life of your account and can be deleted one at a time. You may delete your records or your entire account at any time from Settings.
10. 10 De-identified assessment and report data may be analyzed to improve the accuracy and safety of the product. Since September 2026 this can include the names of medications, tests and findings, and eye prescription values, from your personal health record as an assessment saw them. It never includes your nickname, your email, your precise location or the text of a document, and it carries no account identifier: the details that identify you are removed before anything is kept.
11. 11 Your account is held in Firebase Authentication. Your profiles, assessments, report insights, plans, feedback and personal health record (encrypted with a key held for your account) are stored in Google Firestore databases hosted in Canada (Toronto region).
12. 12 We share personal information with service providers only as needed to run Shoshin: Google (AI processing, hosting, fonts, and Google Analytics and Google Ads for page views and conversion measurement, which never receive health information), PayPal (payment processing, which receives your name, billing address, and country to complete a subscription), and OpenStreetMap (optional location lookup). If you submit feedback, its contents are forwarded to our private issue tracker on GitHub. Some of these providers process data outside Canada. We never sell your personal information.
13. 13 When you use Fill in the form on a personal health record entry, what you typed is sent to the same AI service that reads your uploaded documents, which fills in the entry's fields. What you typed is not stored; only the entry you save is kept.
14. 14 When you start a symptom assessment, a physiotherapy plan, a nutrition plan or a report insight for a profile, the medications, lab results, imaging reports and eye prescriptions you have confirmed for that profile are included as context for that run: the names, the prescriber or clinic named on them, the month of care, whether a medication entry was a prescription, a pharmacy dispensing or a medication list, the result or findings text as printed on your document, and for an eye prescription the lens type and each eye's values as printed. Doses, directions and reference ranges are never included. You can leave your personal health record out of any run with the checkbox on that form. On a paid account, the text read from a report you analyse is also kept, encrypted, as an unconfirmed personal health record entry that you confirm or delete.