1. Introduction

Welcome to Triajj (“we,” “our,” or “us”). Triajj is an online marketplace that connects patients with healthcare practitioners for the purpose of booking medical appointments. We are committed to protecting your personal and health information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Ontario's Personal Health Information Protection Act (PHIPA) and Quebec's Law 25.

By using Triajj, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

2. Information We Collect

a) Personal Information (Patients)

• Full name, email address, phone number, and date of birth
• Location data (city, province, postal code) used for proximity-based search
• Language preference (English or French)
• Account information when signing in via Google or Apple OAuth

b) Health Information

• Reason for appointment or symptoms (if voluntarily provided)
• Medical specialty sought
• Appointment history on the platform
• Reviews and ratings submitted about healthcare practitioners

c) Healthcare Practitioner Information

• Professional credentials, license numbers, and specialties
• Clinic name, address, and availability
• Profile photos and clinic images uploaded to the platform
• Google Calendar data (if the practitioner enables calendar integration)
• Banking and payment details (for practitioners who receive payouts through the platform)

d) Technical Information

• IP address, browser type, and device information
• Geolocation data via the Google Maps API (for proximity-based search)
• Cookies and usage data (pages visited, clicks, session duration)

3. How We Use Your Information

We use your information to:

• Facilitate the booking of medical appointments between patients and healthcare practitioners
• Verify healthcare practitioner credentials
• Send appointment confirmations, reminders, and follow-up communications
• Power location-based search using the Google Maps API
• Synchronize availability with Google Calendar (for practitioners)
• Improve and personalize the Triajj platform
• Comply with legal and regulatory obligations
• Detect and prevent fraud or misuse of the platform

4. Sharing of Information

We do not sell your personal information. We may share it with:

• Healthcare practitioners you book appointments with
• Third-party service providers who help us operate the platform (e.g., hosting, analytics), bound by confidentiality agreements
• Google, in connection with OAuth authentication and Google Calendar and Maps integrations
• Regulatory or legal authorities when required by law

5. Health Information

We treat health-related information with the highest level of care. Health information is only shared with the healthcare practitioner you select and is never used for advertising or sold to third parties.

6. Cookies

We use cookies and similar technologies to improve your experience. You may disable cookies through your browser settings, though some features of the platform may not function properly as a result.

7. Data Retention

We retain your personal information for as long as your account is active or as required by law. You may request deletion of your account and associated data at any time, subject to legal retention requirements.

8. Your Rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate information
• Withdraw consent (where applicable)
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, contact us at: privacy@triajj.ca

9. Security

We implement industry-standard security measures including encryption, secure servers, and access controls to protect your information. However, no method of transmission over the internet is 100% secure.

10. Google API Disclosure

Triajj's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google Calendar Integration

When a healthcare practitioner optionally connects their Google Calendar, Triajj requests access to the following Google API scopes:

• calendar.events: Used to write confirmed appointment events directly to the practitioner's Google Calendar, and to update or remove them when bookings change.
• calendar.freebusy: Used exclusively to check whether a practitioner is available during a requested time slot, preventing double-booking.

What we access and what we do not

• We check free/busy time ranges only. We do not read, process, or store the titles, descriptions, or attendee details of the practitioner's personal calendar events.
• We store only OAuth access and refresh tokens, encrypted at rest, on behalf of the practitioner. No Google Calendar event content is stored on our servers.

Limited Use

Information obtained through Google Calendar APIs is used only to provide the appointment scheduling service described in this policy. This data is not used for advertising, is not transferred to third parties for other purposes, and is not combined with data from other sources for uses unrelated to booking facilitation.

Revoking Access

Practitioners may disconnect their Google Calendar at any time through the Triajj platform settings. Access may also be revoked directly from Google's security settings. Upon disconnection, calendar tokens are deleted from our servers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the platform.

12. Contact Us

Triajj Inc.
Canada
Email: privacy@triajj.ca