Privacy Policy

1. Who We Are

Launchit Health is a virtual women's health platform operating in Ontario, Canada. We are a Health Information Custodian (HIC) as defined under PHIPA. Our Privacy Officer can be reached at privacy@launchit.health.

2. What Personal Health Information We Collect

• Name, date of birth, email address, and province
• Hormonal lab results and vital signs uploaded by your care provider
• Menstrual cycle logs, flow intensity, physical symptoms, and mood entries
• Prescription and supplement records
• Wearable device data (steps, heart rate, sleep) when you connect a device
• Appointment bookings and clinical notes
• Messages exchanged with your care team
• Health audit responses and triage results

3. Why We Collect It

We collect personal health information solely for the purpose of providing you with coordinated clinical care, including: booking appointments, sharing lab results with your providers, generating health summaries, and enabling your care team to communicate with you securely. We do not sell, rent, or use your health information for advertising.

4. Consent

We obtain your express informed consent before collecting personal health information. You may withdraw consent at any time by contacting privacy@launchit.health. Withdrawal of consent may limit our ability to provide care services.

5. Where Your Data Is Stored

All personal health information is stored exclusively in Canada (Montreal, Québec) on Google Cloud Firestore in the northamerica-northeast1 region. Data never leaves Canadian borders.

6. Third Parties

We use Google Cloud (covered by a Data Processing Agreement with PHIPA-compatible terms) for infrastructure. We use Fitbit's API only to retrieve your wearable data when you explicitly authorize this connection — we never share your identity with Fitbit. Any AI-generated health summaries (where available) are processed without including your name or date of birth.

7. Your Rights Under PHIPA

• Access: Request a copy of all personal health information we hold about you
• Correction: Request that inaccurate information be corrected
• Withdrawal: Withdraw consent for collection or use
• Complaint: File a complaint with Ontario's Information and Privacy Commissioner at ipc.on.ca

8. Retention

We retain your personal health information for a minimum of 10 years from the date of last service, as required under Ontario regulation. You may request deletion of your account; however, some records may be retained to comply with legal obligations.

9. Breach Notification

In the event of a privacy breach that creates a real risk of significant harm, we will notify affected individuals and the Ontario Information and Privacy Commissioner as required by PHIPA.

10. Contact

Privacy Officer, Launchit Health
privacy@launchit.health