Privacy Policy

Effective Oct 1, 2026

The short version

We collect what we need to run the Services: account details, care information, device readings and messages.
Your provider, your care team and the people you invite can see your information, according to the permissions set in the Software.
We never sell personal information or use health information for marketing.
All Software data is stored in the United States and protected with encryption and SOC 2-audited controls.
To access, correct, export or delete your information, contact your provider (Part A) or support@clariscompanion.com (Part B).

1. About this policy

Claris Healthcare Inc. (“Claris”, “we”, “us”) is a British Columbia company located at 201-1099 West 8th Avenue, Vancouver, BC V6H 1C3. This Privacy Policy explains how we collect, use and disclose personal information through our Website, the Claris Companion, Claris for Caregivers and Claris Console applications (the “Software”), our Certified Devices, and related services (together, the “Services”).

How this policy applies depends on how you use the Services:

Part A applies when you use the Services through an organization, such as a medical practice or home care agency, that has a signed agreement with Claris.
Part B applies when you subscribe to the Services yourself, for example to support a family member.
Sections 1 to 14 apply in both cases and to all Website visitors.

Key terms

Customer means an organization, such as a medical practice, home care agency or other provider, that has a signed agreement with Claris (a “Customer Agreement”).
End User means an individual who receives services through the Software, such as a patient, client or family member being supported.
Licensed User means a clinician, employee, contractor or agent a Customer authorizes to use the Software.
Account Holder means an individual who subscribes to the Services directly.
Caregiver means a family member, friend or other person an Account Holder or End User invites to the Software.
User means any Licensed User, Account Holder or Caregiver.
Certified Devices means the tablets, sensors and health monitoring devices supplied by Claris.
Service Providers means the licensed or certified personnel Claris employs or contracts to deliver monitoring and care management services.
Website means clarishealthcare.com.

2. Information we collect

Account and contact information: name, email address, phone number, mailing address, role and login credentials.
Information about End Users: name, date of birth, contact details, care team and Caregiver contacts, care plans, tasks, reminders, messages, notes, and survey and assessment responses.
Health readings from Certified Devices: such as blood pressure, pulse oximetry, weight and glucose readings, with time stamps, device identifiers, battery and connectivity status.
Communications: text messages, in-app messages, video calls and phone calls with Claris Service Providers, records of those communications, and recordings and transcripts of video calls where your provider enables them.
Usage and technical information: IP address, browser and device type, operating system, app version, features used, log data and crash reports.
Website information: what you submit through Website forms, such as demo requests, and information collected by cookies and similar technologies (Section 7).
Payment information: for Account Holders, payment details are collected and stored by our payment processor. We do not store full card numbers.

We treat IP addresses, device identifiers and similar data as personal information whenever they can be linked to an individual.

3. How we use personal information

To provide, operate and support the Services, including delivering readings, messages, reminders and alerts to the people authorized to receive them.
Where a Customer has engaged Claris monitoring or care management services, to let our Service Providers deliver those services on the Customer’s behalf.
To communicate with Users about their accounts, the Services, security and changes to our terms.
To bill for the Services and process payments.
To secure the Services, prevent fraud, troubleshoot problems and keep audit logs.
To improve and benchmark the Services using de-identified and aggregated information.
To send business contacts and Website visitors information about Claris products, which you can opt out of at any time.
To comply with law.

We never use End User health information for marketing.

4. How we share personal information

We do not sell personal information, and we do not share it with third parties for their own marketing. We share personal information only:

With people you or the Customer authorize, such as the care team, Licensed Users and Caregivers, according to the permissions set in the Software.
With the Customer through which you receive the Services (Part A).
With our service providers for hosting, cellular connectivity, message delivery, video calls, payment processing, AI features and customer support. They must keep the information confidential and secure and use it only to provide services to us. Service providers that handle protected health information sign business associate agreements.
When required by law, such as a subpoena or court order, or when necessary to protect someone’s health or safety in an emergency. Where the law permits, we will tell the affected Customer or Account Holder.
In a business transfer, such as a merger or sale of assets, to a successor bound to protect the information as this policy and applicable law require.
As de-identified or aggregated data that cannot reasonably be used to identify an individual.

5. AI features

Some Services include AI features, such as documentation, summarization and care task suggestions. When you use an AI feature, we send only the minimum information needed to the AI service provider to produce the result. Our AI providers are contractually prohibited from using your information to train their models and from keeping it longer than needed to provide the feature. Where the information is protected health information, the provider has signed a business associate agreement. We keep logs of AI requests and results for a limited period for security, audit and quality purposes. AI output is a suggestion and is designed to be reviewed by a person before it is relied on.

6. Mobile information and text messaging

If you or your Caregiver or provider gives us your mobile number and you agree to receive text messages, we use that number and your consent only to operate our text messaging program. The program carries two-way messages with your care team and Caregivers, and service reminders and notifications.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except the service providers that deliver our messages.

Message and data rates may apply. Reply STOP to opt out or HELP for help. See the Text Messaging Program section of our Terms of Service.

7. Cookies and Website analytics

The Software uses essential cookies to keep you signed in and to secure your session. It also uses internal analytics tools to troubleshoot problems and improve the user experience. We do not use third-party advertising trackers in the Software, on its sign-in pages, or on any page where health information is entered.

The Website uses analytics and advertising tools, including Google Tag Manager, the Meta Pixel and the LinkedIn Insight Tag, to measure visits and the performance of our advertising.

You can block or delete cookies in your browser settings, and manage ad preferences in your Google, Meta and LinkedIn accounts. Blocking essential cookies may stop the Software from working.

8. Security

We protect personal information with administrative, technical and physical safeguards, including encryption in transit and at rest, access controls and least-privilege access. Our controls are independently audited under SOC 2. No system is perfectly secure, so we cannot guarantee absolute security.

If a security incident affects your personal information, we will notify you, our Customers and regulators as the law requires. For protected health information, we notify the Customer, which notifies affected individuals as HIPAA or other applicable law requires.

9. Where information is stored

All Software data is stored in the United States. Information stored in the United States is subject to U.S. law and may be accessible to U.S. courts, law enforcement and national security authorities.

10. Retention

We keep personal information only as long as needed to provide the Services, to meet our obligations under a Customer Agreement, or as the law requires. Parts A and B describe what happens when an account or Customer Agreement ends.

11. Children

Users must be 18 or older to create an account. An End User under 18 may receive the Services only through a Customer or with the consent of a parent or legal guardian.

12. Your choices and rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, withdraw consent, or ask us to delete it. Parts A and B explain where to send requests. We respond within 30 days. If you are not satisfied with our response, you may contact the privacy regulator where you live.

13. Changes to this policy

We will post any changes on this page and update the effective date. For material changes, we will also email Account Holders and Customers at least 30 days before the change takes effect.

14. Contact us

Our Privacy Officer is responsible for our compliance with this policy.

Privacy Officer, Claris Healthcare Inc.
201-1099 West 8th Avenue, Vancouver, BC V6H 1C3
1-866-284-4939

Organizational Customers, End Users and Licensed Users: support@clarishealthcare.com
Individual Subscribers: support@clariscompanion.com

Part A: Organizational Customers

This Part applies when you use the Services through a Customer: as a patient or client (an End User), or as a member of the Customer’s staff (a Licensed User).

A1. Claris acts on behalf of your provider

When we provide Services to a Customer, the Customer decides what information about End Users is collected and why. We process that information on the Customer’s behalf and only as the Customer Agreement allows. The Customer’s own privacy notice also applies to you, and you should read it.

A2. Health information

Your provider’s privacy notice, and the health privacy laws where you receive care, apply to your health information.

In the United States, when the Customer is a HIPAA covered entity or business associate, Claris acts as its business associate and handles protected health information (“PHI”) under a Business Associate Agreement. That agreement controls if it conflicts with this policy. In Canada, and for home care, social care and Medicaid agencies, Claris acts as the Customer’s service provider under the Customer Agreement and applicable privacy, health information and confidentiality laws.

A3. Monitoring and care management by Claris staff

If your provider has engaged Claris to deliver monitoring or care management services, our Service Providers, including licensed nurses and trained support staff, will:

see your device readings, messages and care plan in the Software;
contact you by phone, text message and video;
record their work in your provider’s health record system, under your provider’s direction.

A4. Consent

Your provider is responsible for obtaining your consent to the Services, including consent to receive text messages. Where your provider asks Claris to enroll you by phone, we obtain and record your consent on your provider’s behalf, using wording your provider approves.

A5. Your requests

Please send requests to access, correct or delete your information to your provider. If you send a request to us, we will forward it to your provider within 15 business days, and your provider will decide how to respond. We will help your provider respond as our agreement requires.

A6. Licensed Users

We collect Licensed Users’ account information, sign-in records and activity logs to secure the Software and meet audit requirements. The Customer can see its Licensed Users’ activity in the Software.

A7. When a Customer Agreement ends

When a Customer Agreement ends, the Customer may request an export of its data. We then return or destroy End User information as the Customer Agreement and any Business Associate Agreement provide, except for copies the law requires us to keep. We may keep de-identified and aggregated data, as the Customer Agreement permits, to operate, improve and benchmark our Services.

Part B: Individual Subscribers

This Part applies when you subscribe to the Services directly as an Account Holder, or when an Account Holder invites you as a Caregiver or sets up the Services for you as an End User. For these accounts, Claris decides how personal information is used and is responsible for it.

B1. What’s on your account and who can see it

Account Holders: your name, email, phone number, mailing address and billing details (handled by our payment processor).
End Users: the information you or the Account Holder enters about the End User, plus messages, reminders, photos, readings and other content added to the End User’s account.
Caregivers: the name and email address or mobile number used to invite you. We use it to send the invitation and manage your access, and you can ask us to remove it at support@clariscompanion.com.

The End User, the Account Holder and the Caregivers they invite can see the End User’s information according to the permissions set in the Software. Caregivers can view, download and share that information and add their own content, so invite only people you trust and remove access when it is no longer needed.

If you set up the Services for someone else, you confirm that you have that person’s consent or the legal authority to act for them, such as a power of attorney or guardianship.

B2. Privacy laws

We protect your information as this policy describes and as the privacy laws that apply where you live require.

B3. Your requests

You can review and update most information in the Software. To access, export, correct or delete information, or to close an account, email support@clariscompanion.com. We respond within 30 days.

B4. Retention and deletion

We keep account information while the account is open. After an account is closed, we delete or de-identify its information within 60 days, except records the law requires us to keep, such as billing records. Copies in encrypted backups are deleted on our regular backup cycle.

B5. Marketing

We may email Account Holders about Claris products and services. You can unsubscribe at any time using the link in the email. We never use End User health information for marketing.