Data protection notice

Orpyx® Medical Technologies Inc. and affiliates ("Orpyx," "we," "us," or "our") must collect and process your personal information to provide you with our services.

This notice outlines the basics of how we collect, use, share, and protect your personal information when you use an Orpyx application program ("App"). For more detailed information, please refer to our Privacy Policy at orpyx.com/privacy-policy. We encourage you to read this Data Protection Notice, the Privacy Policy, and the Terms of Use.

Applicable Laws

This App is developed and operated by Orpyx Medical Technologies Inc., based in Alberta, Canada. The collection, use, and sharing of your personal data are governed by Alberta's Personal Information Protection Act (“PIPA”) and the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”). For U.S. residents, health-related data transmitted via the App may be protected under the Health Insurance Portability and Accountability Act (“HIPAA”).

The Device, the App, and the Cloud

The App works in conjunction with the Orpyx sensory insole ("Device") to monitor areas of excessive foot pressure or temperature variances, aimed at reducing the risk of foot injury for those at risk of foot wounds. The Device captures pressure, foot temperature, mobility data, and other relevant patient data ("Patient Data") and transmits this information to the App. The App collects and may store this data, and sends the encrypted Patient Data to a secure, cloud-based health management system ("Cloud") for remote monitoring purposes. Patient Data is encrypted when it is sent from the App to the Cloud, and when it is stored in the Cloud.

Using the Orpyx App

To use the Device and the App, it is necessary to create an Orpyx Cloud account, which requires the collection of personal information, such as:

  • Name
  • Birthdate
  • Email address
  • Username and password
  • Phone number
  • Insurance details
  • Physician and healthcare facility information
  • Any other personal information that you include in a user profile or in other submissions to us

By creating a Cloud Account and by accepting this Data Protection Notice, you consent to the collection and processing of your personal and health-related information as described in this notice.

Collection of Data

We may collect personal information when you contact us for customer support or for any other reason (e.g. by phoning us; by completing forms; as part of an order for products or services; where you have enquiries or requests; when your healthcare provider sends us prescription details or other relevant health information associated to your care plan and medical history; or when you report a problem with the App and similar situations where you choose to provide us with your personal information). This data may include rehabilitation progress, health conditions, indications of risk of wound development, health history, medications, diet/exercise regime, information regarding healthcare providers, hospital attendance dates, healthcare practitioner reports, gait or balance assessments. This data helps us improve our services. We retain your personal information as needed for the purposes listed in this notice and as permitted by law.

Information About Your Mobile Device

When using the App, we may collect technical data about your mobile device, such as:

  • Mobile device type, operating system, software version number, IP address
  • A unique device identifier (such as your device IMEI number, MAC address of the device's wireless network interface, or the mobile phone number used by the device)
  • Usage data (e.g., meter errors, log files)
  • Device serial number
  • Location data, country, language code and time zone settings
  • Analytic data (e.g., App usage statistics, data on links clicked, websites visited before or after you visit the App)
  • Technical information about related software, hardware and peripherals that are internet or wireless-based to provide you with and improve App functionality

This information helps us evaluate the App's performance and improve our services.

Reasons for Processing Your Personal Information

We process your personal and health-related information to:

  • Provide Device, App, and Cloud services and functionalities
  • Maintain your Cloud account
  • Assist in your treatment, provide insights to healthcare providers
  • Support and improve remote patient monitoring
  • Develop, test, and improve the Device, App or Cloud
  • Ensure the App's safety and security
  • Enforce our Terms of Us, Data Protection Policy, or the Privacy Policy
  • Conduct research and statistical analysis
  • Provide customer support
  • Send notifications and updates about the Device, App, or your Cloud account
  • Determine and improve the effectiveness of disease management techniques, therapies, treatments and costs

We may also use statistical, aggregated, or anonymized data for product development, research purposes (including case studies, white papers, journal publications, etc.).

Marketing

We may contact you with marketing communications if you've given consent. You can opt out at any time by contacting us at info@orpyx.com or using the unsubscribe link in our marketing communications. We will continue to send you non-marketing information, such as updates or safety notifications to our technology via App notifications. You can manage push notifications in your mobile device settings.

Sharing Your Personal Information

Orpyx may share your information with:

  • Your healthcare provider directly or via the Orpyx Dashboard
  • Service providers for onboarding, testing, development, support, and maintenance of the App
  • Distributors and selected partners (with your consent)

We ensure that our partners and service providers comply with data protection laws. Personal Health Information (PHI) shared with third parties will only be shared with entities compliant with HIPAA, as confirmed through a Business Associate Agreement. We may disclose your personal information where required to respond to authorized requests from government authorities or where required by law.

Storing Your Personal Information

Personal information is stored on secure servers in the U.S. or Canada. While stored outside your jurisdiction, your data may be subject to applicable foreign laws. Orpyx has implemented safeguards to protect your data when it is transferred internationally.

Keeping Your Information Secure

Orpyx uses organizational, administrative, technical, and physical safeguards to protect your personal information from unauthorized access or loss. You are responsible for maintaining the confidentiality of your Orpyx Cloud account password and securing your device. Contact us immediately if you suspect unauthorized access to your account.

Exercising Your Rights

You have the right to request access to, rectify, or delete your personal information, as well as object to or restrict its processing. To exercise these rights, contact us at support@orpyx.com. We will process your request in compliance with applicable laws.

Changes to This Data Protection Notice

Any updates to this notice will be posted on this page. We may also notify you via email or App notifications.

Contact Us

For questions or concerns about this Data Protection Notice, email us at info@orpyx.com.

Effective Date: October 16, 2019
Last Updated: October 24, 2024