Sengira Health Technology
Privacy Policy

Sensitive information includes:

1. information or an opinion about your racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual orientation or practices or criminal record that is also personal information; or

2. health information about an individual, genetic information about an individual that is not otherwise health information, biometric information that is to be used for the purpose of providing the Services, automated biometric verification or biometric identification or a biometric template.

Collection & Usage

If we do collect any of your sensitive information, we will only collect it in accordance with Canadian Privacy Principles. This means that we will only collect this information with your consent and for reasons that are reasonably necessary or otherwise related to the provision of our Services.

Where you consent to our collection of sensitive information, we use it for the purposes explained in this policy. Sending care recipient information to a third-party AI service for the Enhanced Daily Digest requires a separate affirmative choice, as explained below.

Collected Information

1. information that you give us through your dealings with us.

2. information that we may collect from you including from any Sengira Health Technology device.

3. information that we may receive from you from other third-party sources.

Consent

This policy explains our collection, use and disclosure of personal and sensitive information. Agreeing to this policy alone does not give Sengira permission to send care recipient information to a third-party AI service; we ask for that permission separately.

Information that you give us

We may collect your personal information and sensitive information directly from our contact with you. This may include by you using the Services or our devices, completing forms or parts of our application, or by you contacting us via email, telephone, through social media and other similar functions either directly through our site or through third-party host sites, in person, through various marketing channels or competitions either directly through our site or through third-party host sites, and surveys.

You understand that any personal information that you provide to us must be accurate and up to date. We will assume this to be the case.

Where you provide us with other people’s personal information, for example where you provide us with the details of a nominated contact for the purposes of providing the Services, you acknowledge that you have obtained that person’s consent to the collection of their personal information.

If you choose to add a meal photo through the mobile app, we collect that image to provide the meal logging feature.

Information that we collect about you

In this Privacy Policy “Social Media” means social media networking sites of any kind or nature including but not limited to web or internet based or mobile telephonic devices or medium such as Meta, twitter, Instagram and LinkedIn which enable the creation and exchange of user generated content.

Our website, social media and/or mobile applications may automatically collect the following information about you each time you visit our website, social media and/or mobile applications:

1. Technical information including but not limited to the Internet Protocol Address used to connect your computer to the internet, the internet browser and version that you are using when accessing our website, social media and/or mobile applications, any additional plug-ins that you are using, and your computer’s operating system and platform.

2. Information about the time and date you accessed our site and social media, and what you accessed on our site and social media. This includes links that you clicked on, what content you accessed, how long you accessed that content for, whether you downloaded any content, whether supplied by us or downloaded from a third-party host, and how you navigated to and from our website, Social Media and/or mobile applications to other sites or other pages hosted by us.

This may include:

1. Using your personal information to provide you with information that you have requested from us.

2. Authenticating your credit or debit card account information.

3. Using your contact information for Sengira's own marketing, where permitted by law, such as news, events, offers, and updates about our services. You can opt out of these communications.

4. To notify you about any changes to our products, website and/or mobile applications, brand or services offered.

5. To seek your opinion and feedback on any of our services, including for the purposes of product improvement and customisation, website improvement and personalisation and other general services.

6. For customer support, including responding to service questions and troubleshooting reported problems.

7. For other general services such as website security, maintenance, identification of fraud or errors, internal accounting and administration, and for any other purpose that we are required or permitted to do by law; and

8. To manage our relationships with you and our other customers.

Sensitive Information Usage

We use sensitive information to provide the Services and disclose it to service providers only where needed for the purposes explained in this policy and permitted by applicable law. We require separate permission before sending it to a third-party AI service for the Enhanced Daily Digest.

This may include reviewing information needed to investigate service quality or support requests, subject to our access controls.

What Information Is Shared?

With separate permission from the care recipient, Sengira securely sends limited information without direct personal identifiers to Amazon Web Services (AWS), through Amazon Bedrock, using Anthropic’s Claude AI model. AWS receives and processes the request on Sengira’s behalf. According to AWS, model providers such as Anthropic cannot access customer prompts or responses processed through Amazon Bedrock.

This may include:

• Activity summaries: Relevant information about sleep and rest, bed and wake times, bathroom visits, movement around the home, and front-door openings.

• Supporting context: Comparisons with the person’s usual patterns, needed to explain the insights accurately.

• Safety summaries: Counts of safety check-ins and escalations to the care team.

• Basic context: The care recipient’s approximate age, if available, and the digest date.

Only information reasonably necessary for the intended AI-assisted insight is shared. Although direct identifiers are removed, this information may still be personal or sensitive.

What We Don't Share

We do not intentionally send your name, email address, phone number, home address, account credentials, or other direct personal identifiers to the AI service. Before a request leaves Sengira, the care recipient’s first name is replaced with a generic label; Sengira adds the name back to the digest in its own systems before showing it to authorized users.

How AI Is Used

AI works alongside the Sengira Fusion Engine to:

• Support the interpretation of wellbeing trends and unusual activity patterns.

• Help explain the factors contributing to wellbeing insights.

• Translate technical findings into clear, meaningful daily summaries and easy-to-understand explanations for users and caregivers.

The Sengira Fusion Engine remains the primary system for sensor processing, baseline management, wellbeing scoring, and safety event detection. AI provides supplementary language interpretation capabilities and does not independently calculate wellbeing scores, detect emergencies, or make medical or care decisions.

Your Permission

We ask for an affirmative choice in the app before sending this information to AWS Bedrock. If permission is not given or is withdrawn, future digests use a standard summary without this third-party AI processing. You can change this choice in the app’s Settings or contact support@sengira.com for help. Withdrawing permission stops future Enhanced Daily Digest requests; it does not automatically erase digests already generated. You can request deletion of your information as described under Your rights.

AWS processes this information under its applicable service terms and Data Processing Addendum. We require service providers processing this information on our behalf to give it protection equivalent to the safeguards described in this policy and required by applicable law. Sengira remains responsible for choosing the information sent to AWS and for protecting information in its own systems.

Disclosure Conditions

1. As required by law.

2. To any person where necessary or desirable in connection with our provision of Services; and

3. On a confidential basis to our external service providers and advisors.

Third Party Sharing

We may disclose personal information to business partners, suppliers, subcontractors, analytics providers and other service providers where needed for the purposes described in this policy and permitted by applicable law. Sending care recipient information to AWS Bedrock for the Enhanced Daily Digest is subject to the separate permission described above.

We do not share information collected through your use of the Services with online advertisers or advertising technology companies for targeted advertising or their own marketing.

Overseas Recipients

Your information may be processed outside Canada. We use contractual and security safeguards appropriate to the information and applicable privacy law when working with service providers in other countries.

You can contact us at support@sengira.com with questions about international processing or your privacy choices.

Data Retention

We will only keep your information for as long as reasonably necessary to fulfil the purposes for which your personal information was originally collected.

You may request deletion of your information through the app or by contacting support@sengira.com, and we will delete your information.

You may be required to re-enter your personal information if it has been deleted.

Sensor-derived information and generated digests may remain linked to a care recipient or home account so that authorized users can use the Services. We do not describe this linked information as anonymous.

International Transfers

You agree and acknowledge that your personal information and sensitive information may be stored at or transferred within Canada or a destination outside of Canada.

This will allow staff operating outside of Canada (whether employed by us or by a third-party engaged by us or otherwise authorised under this Privacy Policy to access your personal information) to process your information for the purposes of providing you with our Services.