Last Updated: October 1, 2026

1. About This Privacy Policy

Seva Intelligence Inc. (the “Company”, “we”, “us” or “our”) provides an AI-powered care coordination platform designed to help individuals, families, caregivers and, where applicable, clinicians and other care organizations organize, understand and coordinate information relating to autism, ADHD and related care (the “Platform”).

The Platform is an information and care-coordination tool. The Company does not provide medical or other health care services through the Platform and does not independently diagnose conditions, conduct clinical assessments, recommend treatment or therapy, or make clinical decisions on behalf of users or healthcare providers.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use our mobile application and related services (collectively, the “Services”). It also explains how we use artificial intelligence (“AI”) in providing the Services, including when information may be processed by third-party large language model (“LLM”) providers.

We are committed to protecting personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and, where applicable, provincial health privacy legislation.

This Privacy Policy describes our privacy practices and the choices available to you. Where consent is required, we will obtain consent in a manner appropriate to the sensitivity of the information and the circumstances.

When we provide the Services directly to individuals, we are responsible for the personal information we collect and control in connection with those Services. Where we process personal health information on behalf of a healthcare provider or organization, our role is described in Section 7 below.

2. Personal Information We Collect

The information we collect depends on how you use the Services. Because the Platform is designed to support care coordination, some of the information we collect may be sensitive health and care information.

We may collect the following categories of personal information:

Account and Profile Information

When you create or use an account, we may collect information such as your name, email address, telephone number, account credentials, preferences and settings.

When you create an account, we may also collect your postal code and your confirmations concerning your age, Ontario residence and authority to create an account or profile for another individual. We retain a record of the wording accepted and the date and time of acceptance.

For family members and caregivers, we may also collect information about your relationship to the individual whose care you are helping to manage.

For clinicians and other care providers, we may collect professional information such as your role, professional designation, clinic or organization and contact information.

Health and Care Information

Depending on how you use the Platform, we may collect information relating to an individual’s health and care, including:

• diagnoses, symptoms and health conditions, including information relating to autism or ADHD;

• medications, allergies and treatment information;

• care plans, goals and recommendations;

• assessments, clinical or therapy notes and progress information;

• appointments and care-team information;

• educational, behavioural or school-related information, including information contained in an IEP or similar plan;

• documents, reports and other records uploaded to the Platform; and

• other health or care information that you, an authorized caregiver or an authorized clinician choose to provide, including information relating to sleep, mood, behaviour, food, medication adherence or menstrual cycles.

Health and care information available through the Platform may include information provided directly by you, a caregiver, clinician or other authorized user, or contained in documents or records uploaded to the Platform. The fact that clinical information is stored, displayed, summarized or referenced through the Platform does not mean that the Company generated or independently verified that information.

Information About Children

A profile for a child under the age of 18 must be created and managed by an adult who is the child’s parent or legal guardian, or another caregiver authorized by the child’s parent or legal guardian to create and manage the profile and provide the child’s information. By providing personal information about a child, the account holder confirms that they have the required authority and have obtained any consent required by applicable law. Children cannot create accounts or access the Platform independently.

Account holders may invite caregivers, clinicians and other authorized members of a care team to participate through the Platform. Those individuals may provide or access information about the child only where authorized or permitted by law and subject to the permissions granted through the Platform.

Information From Clinicians and Other Authorized Users

Where permitted by the Platform and applicable law, clinicians and other authorized users may enter or upload information such as assessments, recommendations, treatment plans, progress information, medication information and other care-related records.

Information From Connected Sources

At your direction, the Platform may allow you to connect third-party services, such as Google Drive, Gmail and supported calendar services. Depending on the permissions you grant, we may access information such as selected files, email content and metadata, and calendar information to provide the functionality you request. Third-party connections are optional and may be disconnected at any time. Disconnecting a service removes the applicable authentication credentials and prevents the Platform from accessing additional information from that service. It does not automatically delete information previously retrieved from the service that has been incorporated into your chat history or used by other Platform features.

Where applicable, we will identify the information to be accessed and obtain any authorization required to establish the connection.

AI Interactions

When you use an AI-enabled feature, we may collect the prompts, questions, instructions, documents or other information you submit to that feature, together with the AI-generated response.

Depending on the feature, relevant information already available through the Platform may also be used as context to generate the requested response.

User prompts and AI-generated responses are stored as part of the user’s chat history. They may also be logged through monitoring and diagnostic tools used to trace and evaluate AI interactions. Authorized Company personnel and service providers may access prompts and responses where reasonably necessary to operate the Services, provide support, investigate security or technical issues, troubleshoot performance, and monitor the reliability and safety of AI-enabled features. Access is restricted through role- and permission-based controls.

Communications

If you contact us or communicate through the Services, we may collect the information contained in your communications, including customer-support requests and feedback.

Device and Usage Information

When you use the Services, we may automatically collect certain technical information, such as your IP address, approximate location inferred from your IP address, device type, operating system, browser or application version, language, time zone, log information, feature usage, diagnostic information, crash reports and security events.

Analytics and Usage Information

We use analytics technologies to understand how users interact with the Platform, including information such as device information, screen views and interactions with Platform features. We use this information to understand usage, maintain and improve the Platform, and identify technical issues.

We do not currently use third-party advertising or advertising-attribution technologies in the Platform or use personal information collected through the Platform for targeted advertising.

Payment Information

Purchases and subscriptions are processed through the applicable app store or payment platform. The Company does not directly collect or store payment card or other payment credentials. We may receive transaction identifiers, purchase confirmations and subscription information necessary to verify purchases and administer subscriptions.

Voice Notes

If you use the voice transcription feature, we process the audio you submit to generate a text transcription. The audio is processed for this purpose and is not retained after transcription. The resulting transcription may be stored as part of the information in your account.

3. How We Use Personal Information

We may use personal information to:

• provide, operate and maintain the Services;

• create and administer accounts;

• organize and display health and care information;

• bring together information from sources that you choose to connect to the Platform;

• facilitate care coordination and authorized information sharing;

• provide AI-enabled features, including summaries, organizational tools, reminders, drafting assistance, pattern and trend identification, and informational estimates based on information you provide;

• personalize and improve the functionality and user experience of the Services;

• communicate with you about your account and the Services;

• provide customer support;

• maintain, troubleshoot and improve the reliability, safety and performance of the Services;

• detect, investigate and prevent fraud, security incidents, misuse and other unauthorized activity;

• comply with applicable legal and regulatory requirements;

• enforce our agreements and protect our legal rights; 

• verify eligibility to participate in the Ontario pilot;

• confirm and document age, residence, authority and consent representations made during onboarding; 

• identify and investigate information or account activity that may be inconsistent with the Platform’s eligibility requirements; and

• carry out other purposes that we identify to you and for which we obtain any required consent. 

We limit our collection, use and disclosure of personal information to purposes that a reasonable person would consider appropriate in the circumstances.

4. How We Use AI

Certain features of the Platform use AI, including technology provided by third-party LLM providers.

When you choose to use an AI-enabled feature, information you submit to that feature and, where necessary, relevant information available through the Platform may be processed by an LLM provider to generate the requested output.

AI-enabled features may use information you provide to summarize, restate or organize health and care information; help locate information contained in records or documents; assist with preparing questions, agenda items, care briefs or other materials; identify patterns in information you have recorded; facilitate communication; and provide general informational or care-coordination support.

Where an AI-generated response refers to clinical information concerning you or another individual, that information may be derived from information previously provided through the Platform or contained in documents or records made available to the Platform. The AI does not independently generate or establish a diagnosis, clinical assessment, treatment plan or therapy recommendation.

Certain features may provide personalized, data-driven insights based on information you voluntarily enter or upload, including patterns or trends in sleep, mood, behaviour, food, medication adherence or menstrual cycles and informational estimates based on that information. These features are intended to help users organize and understand their recorded information and identify patterns over time. They do not constitute medical advice, diagnosis, clinical assessment, treatment recommendation, therapy or clinical monitoring.

When a user enters a medication, the Platform may automatically use an external search provider to identify and display sourced information concerning potential interactions or contraindications involving other medications recorded in the child’s profile. To provide this functionality, we may submit search queries containing medication names and, where relevant, a diagnosis or health condition. The Platform provides links or citations to the relevant sources. This information does not establish that an interaction or contraindication applies to the child and is not a recommendation to start, stop or change a medication.

AI-generated information and information obtained through external search results may be incomplete or inaccurate. The Platform may fail to identify a potential medication interaction or contraindication or may identify one that does not apply. The Platform is intended to support information management and care coordination and is not a substitute for professional medical advice, diagnosis or treatment. Users should confirm medication information with a qualified healthcare professional or pharmacist before making a healthcare or medication-related decision. Where appropriate, the Platform may suggest that you consult a qualified healthcare professional. Healthcare professionals using the Platform remain responsible for exercising their own professional judgment and making clinical decisions.

5. AI Training and Product Improvement

We distinguish between using information to provide an AI-enabled feature that you request and using information for secondary purposes such as training or improving AI models.

The Company does not currently use personal information submitted through the Platform to train, fine-tune or otherwise improve its own AI models. Our third-party AI/LLM providers are not permitted to use information submitted through the Platform to train or improve their own AI models.

If we propose to use personal information for AI model training or another materially different purpose in the future, we will provide appropriate notice and obtain consent where required by applicable law.

6. How We Share Personal Information

We do not sell personal information.

We may disclose personal information in the following circumstances.

With People You Authorize

The Platform allows you to invite family members, caregivers, clinicians or other individuals to participate in a Care Circle. You control the permissions granted to each invited person, including the categories of information that person may access and the actions they may take. You may modify or revoke those permissions at any time.

You may also generate or download reports or other materials that you independently choose to share.

With Service Providers

We use third-party service providers to help operate the Services. Depending on the Services you use, these providers may include:

• cloud hosting and storage providers;

• AI and LLM providers;

• search and information-retrieval providers; 

• security and authentication providers;

• analytics and performance-monitoring providers;

• AI monitoring, tracing and diagnostic providers;

• communications and customer-support providers; and

• payment processors.

These providers may process personal information only for the purposes for which we engage them and are subject to contractual and other safeguards appropriate to the nature of the information and services provided.

With LLM Providers

When you use an AI-enabled feature, we may provide the applicable LLM provider with the information reasonably necessary to generate the requested output.

We require our LLM providers to protect personal information in accordance with our contractual requirements, including restrictions relating to permitted use, confidentiality and security.

With Search Providers

Certain Platform features use third-party search providers to identify publicly available information concerning potential medication interactions and contraindications. To provide this functionality, we may submit search queries containing medication names and, where relevant, a diagnosis or health condition. We require our search providers to protect this information in accordance with our contractual requirements and not to retain or use the search queries for purposes other than providing the requested search results.

Legal and Regulatory Disclosures

We may disclose personal information where required or permitted by applicable law, including in response to a court order, warrant or other lawful request, or where reasonably necessary to investigate unlawful activity, protect our rights or protect the safety or security of individuals or the Services.

Business Transactions

Personal information may be disclosed in connection with a proposed or completed business transaction, such as a financing, merger, acquisition, reorganization or sale of all or part of our business, as permitted by applicable law and subject to appropriate safeguards.

With Your Consent

We may disclose personal information for another purpose where you direct us to do so or provide the required consent.

7. Healthcare Providers and Organizations

If the Platform is made available to healthcare providers, clinics or other organizations, the following provisions will apply to personal health information processed through those arrangements.

Where a healthcare provider or organization is a health information custodian under applicable health privacy legislation and uses the Platform in connection with personal health information under its custody or control, the provider or organization determines the purposes for which that information is collected, used and disclosed and retains control of the applicable patient or client record. The Company processes that information on behalf of and in accordance with the instructions of the provider or organization, our agreement with that organization and applicable law.

In these circumstances, the Company acts as a service provider and, where applicable under health privacy legislation, as an agent of the healthcare provider or organization. The Company does not use personal health information received from a healthcare provider or organization for its own independent purposes except as permitted by the applicable agreement and law.

The healthcare provider or organization is responsible for determining applicable requirements concerning the collection, use, disclosure, retention and deletion of information forming part of its patient or client records. Requests concerning access to or correction of those records may therefore need to be directed to the applicable provider or organization.

8. Processing and Storage Outside Canada

The Company’s core application infrastructure, databases and primary AI/LLM processing are hosted in Canada. However, we use certain service providers whose systems or operations may involve processing personal information outside Canada. Information accessed through third-party services that you choose to connect may also be stored or processed through those third parties’ infrastructure.

When personal information is processed outside Canada, it may be subject to the laws of the jurisdiction in which it is processed and may be accessible to courts, law enforcement or governmental authorities in accordance with those laws.

We use contractual, organizational and technical measures designed to protect personal information processed by service providers.

You may contact our Privacy Officer using the information below if you would like additional information about our use of service providers outside Canada.

Certain medication-information search queries are submitted to a global service endpoint and may be processed outside Canada. We limit those queries to the information reasonably necessary to perform the requested search. As described above, a query may include medication names and, where relevant, a diagnosis or health condition.

9. Consent and Your Choices

We seek meaningful consent for the collection, use and disclosure of personal information where consent is required.

Because health and care information is sensitive, we take the sensitivity of the information into account when determining the appropriate form of consent.

Depending on the Services and features available to you, you may be able to make choices concerning matters such as:

• connecting or disconnecting third-party information sources;

• sharing information with clinicians, caregivers or other authorized users;

• choosing whether to use certain AI-enabled features, where those features are optional; and

• receiving marketing communications.

You may withdraw consent to future collection, use or disclosure of personal information, subject to legal and contractual restrictions and reasonable notice. We will explain the consequences of withdrawing consent where doing so may affect our ability to provide a Service or feature.

10. Children

When the Services are provided directly to individuals, accounts may be created only by individuals aged 18 or older for the purpose of managing and organizing care for a child under the age of 18. An account holder must be the child’s parent or legal guardian or another caregiver authorized by the child’s parent or legal guardian to create and manage the child’s profile and provide the child’s information. The Platform does not currently permit an adult to create an account for themselves as the person receiving care.

Individuals under the age of 18 are not permitted to create their own accounts or access the Platform independently.

During onboarding for the current Ontario pilot, account holders are required to confirm that they are at least 18 years old and that Ontario is their primary place of residence. An account holder creating a child’s profile must confirm that they are the child’s parent or legal guardian or are otherwise authorized to create and manage the profile, provide the child’s information and consent to its collection, use and disclosure as described in this Privacy Policy.

We obtain separate consent to the collection, use and disclosure of personal information as described in this Privacy Policy.

11. Retention and Deletion

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet applicable legal and regulatory requirements, resolve disputes, maintain security and enforce our agreements.

When personal information is no longer required, we will securely delete, destroy or anonymize it in accordance with our retention practices and applicable law.

Where we process personal health information on behalf of a healthcare provider or organization, retention and deletion of that information will be governed by the instructions of that provider or organization, our agreement with them and applicable law. At the end of the applicable engagement, information will be returned or deleted in accordance with those requirements.

Users may delete their account through the Platform. When an account is deleted, the user’s account records and chat history are permanently deleted from the Platform’s primary active systems and the account cannot be recovered. Certain information may remain temporarily in routine application logs, AI-monitoring systems and encrypted routine backups. Information maintained in those systems is automatically deleted or overwritten within 30 days and is not used for ordinary business purposes. 

We may retain a limited, non-identifying record of the deletion where reasonably necessary to document and verify the deletion, maintain security, comply with applicable legal or regulatory requirements, or respond to an active complaint, investigation or dispute. The deletion record does not contain health information and cannot reasonably be linked to the deleted user.

If a backup is restored, applicable deletion requests will be reapplied.

12. De-identified and Anonymized Information

We may de-identify or anonymize information where permitted by applicable law.

Where information has been de-identified or anonymized in accordance with applicable legal requirements, we may use that information for purposes such as analytics, research, evaluating trends and improving the Services, subject to applicable law.

We do not attempt to re-identify information that has been anonymized.

13. How We Protect Personal Information

We use administrative, technical and physical safeguards appropriate to the sensitivity of the personal information we handle.

These safeguards include encryption of information in transit and at rest, role- and permission-based access controls, restricted access to identifiable health information, pseudonymization, and security monitoring and logging.

No electronic system or method of transmission is completely secure. Although we take steps designed to protect personal information, we cannot guarantee absolute security.

14. Accuracy, Access and Correction

We take reasonable steps to ensure that personal information under our control is accurate, complete and up to date as necessary for the purposes for which it is used.

You may request access to personal information we hold about you and ask us to correct information that you believe is inaccurate or incomplete, subject to exceptions permitted by law.

We may need to verify your identity before responding to a request.

Where information is maintained by a clinician or healthcare organization rather than by us independently, we may direct you to that organization to exercise your access or correction rights.

15. Privacy Incidents

We maintain procedures for responding to suspected or confirmed privacy and security incidents involving personal information.

Where required by applicable law, we will notify affected individuals and report a breach to the appropriate privacy regulator.

If you believe personal information associated with your account or the Services may have been accessed, used or disclosed without authorization, please contact us promptly using the information below.

16. Marketing Communications

Where required, we will obtain your consent before sending electronic marketing communications. You may unsubscribe at any time using the unsubscribe mechanism provided in the communication or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending you service-related or transactional communications.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, privacy practices or legal requirements.

When we make changes, we will update the “Last Updated” date above. If we make a material change, we will provide additional notice where appropriate and obtain consent where required for any new collection, use or disclosure of personal information.

18. Questions, Requests and Complaints

We have designated a Privacy Officer who is responsible for overseeing our privacy practices.

If you have a question or concern about this Privacy Policy or our handling of personal information, or if you wish to request access to or correction of your personal information or withdraw consent, please contact:

Privacy Officer
SEVA INTELLIGENCE INC.
15 Wellesley Street West, Suite 201

Toronto, ON, M4Y 0G7 Canada

Email: zain@myseva.ai

We will investigate and respond to privacy questions and complaints in accordance with applicable law.

If you are not satisfied with our response, you may also contact the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca