Privacy

Linden is provided by Immaculate Heart Care and Cleaning Services Inc., 87 Burcher Road, Ajax, ON L1S 2R3, Canada. Privacy contact: chima.umego@gmail.com.

Each care agency using Linden is the health information custodian for its clients. Linden acts as that agency's agent and electronic service provider. This notice is written for Ontario's Personal Health Information Protection Act (PHIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

Linden stores personal health information the agency chooses to record: care plans, notes, medications, schedules, and family messages, together with the name and contact details needed to run the account.

Only authorized users in that agency can see it. Staff and the agency owner see the agency's records. Family users see only their own household. One agency cannot open another agency's records.

Where it is hosted: database: Neon Postgres (not named in this repository (read it from the Neon hostname in DATABASE_URL)). storage: None configured (static files in public/, served by the app host) (no object-storage region is set). functions: Vercel (Nitro preset vercel) (not set in vercel.json — the Vercel project default applies). A Canadian region is not available for this database. Neon Postgres has no Canada Central or Montreal region, and this repo does not configure file storage in Canada. Nothing was moved. Data may be stored outside Canada until the owner moves the database.

Security: connections use HTTPS (encryption in transit). The database provider encrypts data at rest. Access is limited to invited accounts, and views and changes are written to an audit log the agency owner can read.

The agency decides how long to keep a client's record. When an agency leaves Linden, Immaculate Heart Care returns or deletes that agency's data on the agency's written request, after any copy the agency asks to export. Account and audit records needed to show who accessed the information may be kept for as long as PHIPA requires.

To see or correct a client's information, ask the care agency that recorded it. The agency is the custodian. You may also write to the privacy contact above and we will pass the request to that agency.

If we learn of a breach of personal health information, we notify the agency promptly so the agency can notify the individuals affected and the Information and Privacy Commissioner of Ontario, as PHIPA requires.

Policy version 2026-10-26.