CalmshellCalmshell
PHIPA (Ontario)
Designed with reference to Ontario Health Virtual Visits Standard v3.0

Virtual Care Privacy Notice

Please review this notice before your first video visit or secure message. You will be asked to acknowledge it during the session pre-check.

What virtual care means here
Calmshell delivers scheduled video visits and secure in-app messaging with regulated Ontario practitioners. Video visits are not recorded. Any recording is personal health information and would only ever be made with your explicit consent. Text messages (SMS) are never used for clinical communication.
How your information is protected
All personal health information is encrypted in transit (TLS 1.2 or higher) and at rest. Access is limited by role to your care team, and every access to clinical records is logged with who, when and what was accessed. Inactive sessions are signed out automatically.
Where your data is stored and processed
Calmshell uses Base44-managed infrastructure and configured service providers. Canadian-only storage and processing of personal health information has not yet been independently verified for every production service and subprocessor. Some processing may occur outside Canada. Before relying on a particular residency requirement, review the current vendor register or contact Calmshell's Privacy Officer. Calmshell is validating production data flows and vendor locations as part of its Ontario Health Virtual Visits verification work.
How long we keep it
Clinical records are retained according to the retention schedule of your health service provider and Ontario college requirements, then securely deleted. You can request a copy, a correction, or deletion review of your records at any time from Medical Records.
Secure messaging expectations
Secure messages are answered within two business days. Messaging is not monitored around the clock and is not for emergencies. If you are in immediate danger call 9-1-1; for suicide or crisis support call or text 9-8-8.
Privacy contact

Questions, access requests, correction requests, consent-withdrawal requests or privacy complaints go to Calmshell's Privacy Officer through the in-app contact form (select "Privacy") or from Medical Records → Data rights. Requests are handled according to the applicable privacy and health-record requirements.

If you are not satisfied with our response you may contact the Information and Privacy Commissioner of Ontario at ipc.on.ca or 1-800-387-0073.

Calmshell is not a 24/7 crisis service. In Canada, call or text 9-8-8 for suicide crisis support or call 9-1-1 for immediate danger.