Sky Health Technologies Inc. ("Sky Health", "we", "our", or "us") operates Sky Chamber EHR, Sky Claims, and Sky Payroll (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect personal information, including personal health information (PHI), in connection with our Services.
By using our Services, you agree to the collection and use of information in accordance with this policy.
We collect information you provide directly to us, including:
We also collect usage data automatically, including log files, device information, IP addresses, and feature usage analytics to improve the Services.
We do not sell personal information or patient health information to third parties. We do not use patient data for advertising purposes.
Sky Chamber EHR processes personal health information (PHI) as a technology service provider on behalf of regulated healthcare practitioners. Practitioners remain the custodians of their patients' health records under applicable provincial health information legislation (including PHIPA in Ontario, HIA in Alberta, and equivalent legislation in other provinces).
PHI is stored exclusively on Canadian servers and is never transferred outside Canada. We implement physical, administrative, and technical safeguards appropriate to the sensitivity of the data.
We offer Google Sign-In as an authentication option. When you sign in with Google, we receive your Google account email address and profile name. We do not access your Google Drive, Gmail, contacts, or any other Google services. The information received is used solely to create and authenticate your Sky Health account.
We share personal information only in the following circumstances:
We retain account information for the duration of your subscription plus a reasonable period thereafter. Patient health records are retained in accordance with provincial health records retention requirements (typically 10 years from the last patient encounter, or 10 years after a minor reaches age 18). You may request deletion of your account data at any time, subject to legal retention obligations.
We use industry-standard encryption (TLS in transit, AES-256 at rest), role-based access controls, audit logging, and regular security assessments. We are working toward SOC 2 Type II certification. In the event of a data breach affecting personal health information, we will notify affected individuals and regulators as required by applicable law.
Under PIPEDA and applicable provincial legislation, you have the right to:
Our marketing website uses cookies for analytics and to remember your preferences. You may disable cookies in your browser settings. The application itself uses session cookies necessary for authentication; these cannot be disabled without impairing functionality.
The Services are not directed to individuals under 18. Accounts may only be created by regulated healthcare practitioners or their authorized administrative staff. Patient records for minor patients are handled in accordance with applicable provincial health information law.
We may update this Privacy Policy from time to time. We will notify subscribers by email and post the updated policy on this page with a revised effective date. Continued use of the Services after the effective date constitutes acceptance of the updated policy.
Sky Health Technologies Inc.
Email: privacy@skyhealthtech.ca
You may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.