← Back to Between
Between

Privacy Policy

Last updated: September 4, 2026
Template — not legal advice. Between handles health-related information, so this policy should still be reviewed and finalized by a lawyer, and checked against applicable Canadian privacy laws — including the federal PIPEDA and Quebec's Law 25 — and any other laws that apply to you, particularly the section on where data is stored.

This Privacy Policy explains how Between ("we", "us"), operated by Jack Hazan, collects, uses, and protects your information.

Between is offered to clinicians and individuals across Canada. This policy is designed to respect applicable Canadian privacy laws, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial laws such as Quebec's Law 25, British Columbia's and Alberta's Personal Information Protection Acts, and comparable legislation in other provinces. Where a provincial law gives you stronger rights, that law applies to you.

1. Information we collect

2. How we use it

To provide the service (deliver check-ins to the right clinician, generate opt-in summaries and trends), to process subscriptions, to keep the service secure, and to comply with legal obligations. We do not sell your personal information.

3. AI processing and consent

AI analysis is off by default. It runs only after a patient gives explicit, opt-in consent, which can be withdrawn at any time. Patients can view what has been inferred about them and request corrections or deletion. Check-ins can be sent without AI analysis.

When AI analysis is on, the check-in content is sent to a third-party AI provider that processes it to generate the summary and theme tags and then returns them to us. Under our agreement with that provider, this content is not used to train their models. AI summaries are a neutral read for the clinician, never a diagnosis, and should not be relied on as one.

4. Who can see your data

5. Where data is stored

Between runs on third-party cloud infrastructure and processors, and your information — including check-in content — may be stored and processed in the United States and other countries where these providers operate. Our application and database are currently hosted on Render, and payments are handled by Stripe; where configured, email delivery and voice transcription are handled by additional providers. Because this can involve transferring personal information outside your province and outside Canada, we take applicable cross-border requirements into account under Canadian privacy law, including the federal PIPEDA and Quebec's Law 25. The specific processors we use, what each does, and where they process data are listed on our Subprocessors & data location page. If you would like details about where your data is stored, contact us at jojo11haz@gmail.com.

6. Your rights

Depending on where you live in Canada (under the federal PIPEDA and provincial laws such as Quebec's Law 25), you may have the right to access, correct, or delete your personal information, to withdraw consent, and to be informed about automated processing. In the app you can view what's on file, flag an AI summary as inaccurate, and request deletion of your history. To exercise other rights, contact us at jojo11haz@gmail.com.

7. Retention and deletion

We keep personal information only as long as needed to provide the service or as required by law. Patients can delete their check-in history from the app; deleting your account removes associated personal data, subject to any legal retention obligations.

8. Security

We use measures such as hashed passwords, session tokens, and restricted per-account data access. No system is perfectly secure, but we work to protect your information.

9. Minors

Between is intended for adults. A minor may be invited by a professional (for example, a school guidance counsellor or a clinician) only where the appropriate consent has been obtained. Consent requirements for minors vary by province: for a minor under 14 in Quebec, the consent of a parent or guardian is required, and elsewhere in Canada, consent appropriate to the minor's age and the applicable provincial rules must be obtained. The professional who invites a minor is responsible for obtaining and documenting that consent before enabling check-ins. If you believe a minor has provided personal information without the required consent, contact us and we will address it.

10. Changes

We may update this policy; material changes will be posted here with a new "last updated" date.

11. Contact

Privacy questions or requests: jojo11haz@gmail.com. If you are in Quebec, you may also contact the person responsible for the protection of personal information, Jack Hazan, at jojo11haz@gmail.com.