Privacy Policy

Last updated: June 24, 2026

iSBERGDATA Inc. (“iSBERGDATA”, “we”, “us”, or “our”) operates the Health Passport mobile application and website. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy law.

Information We Collect

We collect information you provide directly, such as your name, email address, and health documents you upload. We also collect device identifiers, usage analytics, and crash reports to improve the app. We do not collect any health data beyond what you explicitly upload or enter.

How We Use Your Information

We use your information to provide and improve the Health Passport service, authenticate your account, process payments, send transactional emails (such as share notifications and receipts), and respond to support requests. We do not use your health documents for advertising or sell them to any third party.

Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share information with trusted service providers (cloud infrastructure, payment processors) who are contractually bound to protect it. We may disclose information if required by law or to protect the rights and safety of our users.

Security

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Health Passport supports biometric authentication and active session management. Despite these measures, no system is 100% secure — we encourage you to use a strong password and enable app lock.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may delete your account at any time from the app settings, which permanently removes your data within 30 days. Backups are purged within 90 days.

Your Rights

Under PIPEDA and provincial privacy laws, you have the right to access, correct, and request deletion of your personal information. You may also withdraw consent to certain processing. To exercise these rights, contact us at privacy@isbergdata.ca.

Cookies & Analytics

Our website uses essential cookies for authentication and session management. We may use privacy-respecting analytics to understand aggregate usage patterns. We do not use cross-site tracking cookies or share data with advertising networks.

Contact Us

For privacy questions or to exercise your rights, contact our Privacy Officer at privacy@isbergdata.ca or write to: iSBERGDATA Inc., Privacy Officer, Winnipeg, Manitoba, Canada.