Privacy Policy

PrecipiceCare Inc. ("PrecipiceCare", "we", "us") operates the AIDA AI scheduling assistant on behalf of Demo (mock) (the "Clinic"). PrecipiceCare acts as a data processor; the Clinic is the data controller responsible for your health information under applicable law.

We are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Where Demo (mock) operates in Ontario, Ontario's Personal Health Information Protection Act (PHIPA) also applies — and takes precedence over PIPEDA for personal health information.

We have designated a Privacy Officer accountable for our compliance with PIPEDA and PHIPA. For any privacy inquiry, contact:

AIDA collects only the minimum information required to help you book or manage appointments at Demo (mock):

We do not collect clinical data, diagnoses, medications, insurance numbers, payment information, or any information beyond what is needed to complete a scheduling task.

AIDA uses real-time voice AI to understand your spoken requests. Your voice is transmitted to OpenAI, LLC (United States) for speech processing via the OpenAI Realtime API. Phone-based voice calls are routed through Twilio Inc. (United States). By using AIDA's voice interface, you consent to these cross-border transfers under PIPEDA Principle 3.

OpenAI, LLC — Speech AI

Twilio Inc. — Voice Call Routing

If you prefer not to use the voice interface, you may type your request instead — no audio is transmitted in text mode.

Before any session begins, you are presented with a clear consent notice explaining that AIDA will access your appointment records at Demo (mock) and that voice input is processed by OpenAI in the United States. Clicking "I Agree — Continue" constitutes your express consent under PIPEDA Principle 3, including consent to the cross-border transfer described in Section 2a.

You may withdraw consent at any time by ending the session. If you click "No thanks", no information is collected and no EMR lookup is performed.

We collect only what is necessary for the scheduling purpose you have initiated. AIDA does not ask for, record, or store any health information beyond your name, date of birth, and appointment details.

Your information is used solely to:

• Search for your existing patient record in the Clinic's EMR
• Display available appointment slots and confirm bookings
• Confirm, reschedule, or cancel an existing appointment

We do not:

• Store your name, date of birth, or appointment details in our systems after your session ends
• Share your information with third parties for marketing or analytics
• Use your information to train AI models
• Transfer your data outside Canada without your explicit consent

Your health records remain exclusively within the Clinic's EMR system (OscarPro, operated by Well Health Technologies). PrecipiceCare accesses them transiently during your session and does not retain a copy.

Retention: Session audit logs (containing only resource identifiers — not your name or clinical data) are retained for 24 months for PIPEDA/PHIPA compliance purposes, then automatically and securely deleted via a scheduled maintenance job on the first of each month.

AIDA retrieves your information directly from Demo (mock)'s EMR in real time. If you believe your records are inaccurate, please contact the Clinic directly — they are the authoritative data custodian.

PrecipiceCare implements the following technical and organizational safeguards:

This Privacy Policy is publicly accessible at /privacy on every AIDA-powered clinic subdomain. We will notify affected users of any material changes by updating the effective date and, where required, through direct communication.

You have the right to request access to personal information PrecipiceCare holds about you. Since we do not retain copies of your health records, requests relating to your health information should be directed to Demo (mock) directly.

For requests relating to session audit logs (which contain only non-identifying resource IDs), contact us at privacy@precipicecare.com. We will respond within 30 days.

If you have a concern about our privacy practices, please contact our Privacy Officer at privacy@precipicecare.com. We will investigate and respond within 30 days.

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca or with your provincial privacy commissioner if applicable.

In addition to PIPEDA, the following provincial legislation may apply depending on the province in which Demo (mock) operates: