Privacy notice
Tri-Health Wellness Centre (Vaughan (Woodbridge), Ontario) operates Tri-Health Lab Insights as a clinic tool for reviewing patient-uploaded laboratory documents. This notice is written with PIPEDA in mind. It is not legal advice.
What we collect
Account email and name, optional symptom notes, lab files you upload, AI draft outputs, clinician edits, auto-release and withdraw actions, shareable proposal links (`/p/…`), in-app notifications, and an audit log of access and emails. Treat a proposal link as personal health information — anyone with the URL can read the draft. Raw lab files are never on that public page.
Why we collect it
To help licensed clinicians review labs you chose to share, draft educational next-step language mapped to clinic offerings, and keep a record of who viewed or released a plan. We do not sell this information.
How files are stored
In development, files live under a local uploads/ directory that is not publicly listed. In production you can point storage at an S3-compatible bucket with server-side encryption and optional application-level AES-256-GCM. Files are served only through an authenticated route — there are no public file links. When an xAI key is configured, file contents (or rasterized pages) are sent to xAI to draft the clinician note.
Retention
Clinic policy should set FILE_RETENTION_DAYS (default documented as 2555 days ≈ 7 years). A clinic-authenticated retention job can dry-run or delete expired files. Nothing is auto-deleted unless that job is invoked with confirmation.
Your choices
You may request access or deletion through the clinic. Withdrawing consent for future uploads does not automatically erase a file the care team already reviewed; ask the clinic. Do not upload another person’s labs without authority.
Emergencies
This product is not monitored in real time. Call 911 or go to an emergency department.