Privacy Policy

Think Tank Innovations Ltd. (“ShareSmart”) recognizes that its customers and users are especially concerned with their privacy and third party privacy. ShareSmart provides this Privacy Policy to help you make an informed decision about whether to use or continue using the ShareSmart Site, ShareSmart Software and/or the ShareSmart Service. If you do not agree to our practices, please do not use the ShareSmart Site, ShareSmart Software,or ShareSmart Service. This Privacy Policy is incorporated into and is subject to the ShareSmart Terms of Service. Your use of the ShareSmart Site, ShareSmart Software and the ShareSmart Service and any personal information you provide on the ShareSmart Site or ShareSmart Service remains subject to the terms of this Privacy Policy and our Terms of Service. Please note that any Status Submissions or other content posted at the direction or discretion of users of the ShareSmart Service becomes published content and is not considered personally identifiable information subject to this Privacy Policy.

What Does This Privacy Policy Cover?

This Privacy Policy is part of ShareSmart’s Terms of Service and covers the treatment of third party health information and user information, including personally identifying information, obtained by ShareSmart, including information obtained when you access the ShareSmart’s Site, use the ShareSmart Service or any other software provided by ShareSmart. This Privacy Policy does not apply to the practices of companies that ShareSmart does not own or control, or to individuals whom ShareSmart does not employ or manage, including any of the third parties to which ShareSmart may disclose user information as set forth in this Privacy Policy.

The Information ShareSmart Collects

ShareSmart may obtain the following types of information from or concerning you or your mobile phone device, which may include information that can be used to identify you as specified below (“Personally Identifying Information”):

User Provided Information: You provide certain Personally Identifiable Information, such as your mobile phone number, push notification name (if applicable), billing information (if applicable) and mobile device information to ShareSmart when choosing to participate in various uses of the ShareSmart Service, such as registering as a user, updating your status or requesting status for your contacts. In order to provide the ShareSmart Service, ShareSmart will periodically access your address book or contact list on your mobile phone to locate the mobile phone numbers of other ShareSmart users (“in-network” numbers), or otherwise categorize other mobile phone numbers as “out-network” numbers, which are stored as one-way irreversibly hashed values.

Cookies Information: When you visit the ShareSmart Site, we may send one or more cookies – a small text file containing a string of alphanumeric characters – to your computer that uniquely identifies your browser. ShareSmart uses both session cookies and persistent cookies. A persistent cookie remains after you close your browser. Persistent cookies may be used by your browser on subsequent visits to the site. Persistent cookies can be removed by following your web browser help file directions. A session cookie is temporary and disappears after you close your browser. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent. However, the ShareSmart Site may not function properly if the ability to accept cookies is disabled.

Log File Information: When you use the ShareSmart Site, our servers may automatically record certain information that your web browser sends whenever you visit any website. These server logs may include information such as your web request, Internet Protocol (“IP”) address, browser type, browser language, referring / exit pages and URLs, platform type, number of clicks, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the date and time of your request, one or more cookies that may uniquely identify your browser, your phone number, phone number you are requesting the status of and various status information. When you use the ShareSmart Service, our servers log certain general information that our application sends whenever a message is sent or received, or if you update or request any status information, including time and date stamps and the mobile phone numbers the messages were sent from and to.

The Information ShareSmart Does Not Collect

ShareSmart will collect names, emails or other contact information from its users’ mobile address book or contact lists other than mobile phone numbers. We do not collect location data, but users may voluntarily share their location with other users via the ShareSmart Service. The contents of messages that have been delivered by the ShareSmart Service are copied, kept or archived by ShareSmart in the normal course of business pursuant to applicable health information and privacy laws. Users will have full control and use over the contents of their messages. The ShareSmart Service is meant to be a SMS replacement, using data service through a user’s phone (either via cell network or wifi). Users type their messages, which are sent via data service to our servers, and routed to the intended recipient (who must also be a ShareSmart user), if that recipient is online. If the recipient is not online, the undelivered message is held in ShareSmart’s server until it can be delivered. If the message is undelivered for thirty (30) days, the undelivered message is deleted from our servers. Once a message has been delivered, it resides on our servers – NorthCloud (and which may be deleted at the user’s option). The contents of any delivered messages are kept or retained by ShareSmart — the no records of the content of any delivered messages reside directly on the sender’s and recipient’s mobile devices. Notwithstanding the above, ShareSmart may retain date and time stamp information associated with successfully delivered messages and the mobile phone numbers involved in the messages, as well as any other information which ShareSmart is legally compelled to collect. Files that are sent through the ShareSmart Service will reside on our servers after delivery for a period of time, but are deleted and stripped of any identifiable information within a period of time in accordance with our general retention policies.

The Way ShareSmart Uses Information

If you submit Personally Identifiable Information or Health Information to us through the ShareSmart Site, or ShareSmart Service, then we use your personal information to operate, maintain, and provide to you the features and functionality of the ShareSmart Site and ShareSmart Service. In particular, your mobile phone number is essential to your use of the ShareSmart Service and will be retained. Any billing information that may be collected from you will be deleted thirty (30) days after the termination of your account with ShareSmart. Any Personally Identifiable Information, Health Information or status content that you voluntarily disclose on the ShareSmart Service becomes publicly available and may be collected and used by other users of the ShareSmart Service (unless such user is blocked by you). Your name (as it is saved in other user’s mobile phone address book or contact list) may be displayed to other users when you update your status messages through the ShareSmart Service and other users may contact you through the ShareSmart Service. We do not use your mobile phone number or other Personally Identifiable Information to send commercial or marketing messages without your consent or except as part of a specific program or feature for which you will have the ability to opt-in or opt-out. We may, however, use your mobile phone number (or email address, if provided) without further consent for non-marketing or administrative purposes (such as notifying you of major ShareSmart Site or ShareSmart Service changes or for customer service purposes). We may use both your Personally Identifiable Information and certain non-personally-identifiable information (such as anonymous user usage data, cookies, IP addresses, browser type, clickstream data, etc.) to improve the quality and design of the ShareSmart Site and ShareSmart Service and to create new features, promotions, functionality, and services by storing, tracking, and analyzing user preferences and trends. Hopefully we improve the ShareSmart Site and Service and don’t make it suck worse. We may use cookies and log file information to: (a) remember information so that you will not have to re-enter it during your visit or the next time you use the ShareSmart Service or ShareSmart Site; (b) provide custom, personalized content and information; (c) monitor individual and aggregate metrics such as total number of visitors, pages viewed, etc.; and (d) track your entries, submissions, views and such.

When ShareSmart Discloses Information

Other users of the ShareSmart Service may see your Status Submissions in a way that is consistent with the use of the ShareSmart Service. For example, a status of “Can’t talk, please SMS instead” set by phone number +1 (604) 888-8888 will be available to every user of the ShareSmart Service who has that mobile phone number in their mobile phone’s address book or contact list. In other words: If another user has your mobile phone number stored in their mobile phone address book or contact list, they will be able see your status information unless you have chosen to block such user. “Last Seen” information is available and displayed to each user who has your mobile phone number in their mobile phone address book or contact book (and which you have not blocked), and reflects the last approximate time the ShareSmart mobile application has been used or brought to the foreground on your mobile phone. “Last Seen” information is reported to ShareSmart when a user brings the mobile application to the foreground. We do not sell or share your Personally Identifiable Information (such as mobile phone number) with other third-party companies for their commercial or marketing use without your consent or except as part of a specific program or feature for which you will have the ability to opt-in or opt-out. We may share your Personally Identifiable Information with third party service providers to the extent that it is reasonably necessary to perform, improve or maintain the ShareSmart Service. We may share non-personally-identifiable information (such as anonymous User usage data, referring / exit pages and URLs, platform types, asset views, number of clicks, etc.) with interested third-parties to assist them in understanding the usage patterns for certain content, services, advertisements, promotions, and/or functionality on the ShareSmart Site. We may collect and release Personally Identifiable Information and/or non-personally-identifiable information if required to do so by law, or in the good-faith belief that such action is necessary to comply with state and federal laws (such as Canadian Copyright Law), international law or respond to a court order, subpoena, or search warrant or equivalent, or where in our reasonable belief, an individual’s physical safety may be at risk or threatened. ShareSmart also reserves the right to disclose Personally Identifiable Information and/or non-personally-identifiable information that ShareSmart believes, in good faith, is appropriate or necessary to enforce our Terms of Service, take precautions against liability, to investigate and defend itself against any third-party claims or allegations, to assist government enforcement agencies, to protect the security or integrity of the ShareSmart Site or our servers, and to protect the rights, property, or personal safety of ShareSmart, our users or others.

Your Choices

You may, of course, decline to submit Personally Identifiable Information through the ShareSmart Site or the ShareSmart Service, in which case ShareSmart may not be able to provide certain services to you. If you do not agree with our Privacy Policy or Terms of Service, please delete your account, uninstall the ShareSmart mobile application and discontinue use of the ShareSmart Service; your continued usage of the ShareSmart Service will signify your assent to and acceptance of our Privacy Policy and Terms of Service. To protect your privacy and security, we take reasonable steps (such as SMS authentication in certain cases) to verify your identity before registering your mobile phone number and granting you access to the ShareSmart Service. Please contact ShareSmart via email to support at ShareSmart.com or available web forms with any questions or comments about this Privacy Policy, your personal information, your consent, or your opt-in or opt-out choices.

Third-party Advertisers, Links to Other Sites

ShareSmart is currently ad-free and we hope to keep it that way forever. We have no intention to introduce advertisement into the product, but if we ever do, will update this section.

Duties – Users of ShareSmart

The data collected by you may concern third party individuals that may not have been well enough to provide legal consent for the use of the data and so must be treated by you with the utmost care and respect and only as a tool to enable medical professionals to send images to approved recipients in order to aid in the professional medical assessment of patients. As a user, you are responsible for assessing and complying with all laws, policies and other requirements applicable to your use of ShareSmart, including health records, privacy and freedom of information laws and any applicable institution policies. In particular, as a user of the ShareSmart, you are responsible for ensuring that:
  1. You have fully explained to the patient, or their authorized representative/guardian, how data and images relating to the patient will be used, including complying with all applicable laws and institution policies regarding consent and written collection statements. As such, the explanation should include making the patient generally aware of:
    • the identity of the organization and how to contact it;
    • the fact that the patient is able to gain access to the information;
    • the purposes for which the information is collected;
    • to whom (or the types of individuals or organizations to which) the organization usually discloses information of that kind, including to ShareSmart and to third party services for the purpose of the secure hosting and communication of the information;
    • any law that requires the particular information to be collected; and
    • the main consequences (if any) for the patient if all or part of the information is not provided.
  2. Fully informed consent is obtained from the patient or their authorized representative/guardian, or a medical professional has assessed that consent is not required in the specific situation, before capturing data and images. In particular, you are responsible for: ensuring that the patient has consented to the transfer and/or communication of patient information to ShareSmart and secure third party hosting and exchange services; or determining that patient consent for the above activities is not legally required in the circumstances and in providing ShareSmart, ShareSmart is reliant upon you obtaining such consents and making such determinations.
  3. You only grant access to a patient’s data and images to appropriate medical professionals who are authorized and have consent to access such data and images in accordance with the uses specifically stipulated within that patient’s consent; and
  4. Patient data and images are stored and retained in accordance with all applicable privacy and health records requirements.
  5. If you use the data for anything other than to enable medical professionals to send images to approved recipients in order to aid in the professional medical assessment of patients, or in a manner that breaches your duties under this Privacy Policy, then ShareSmart, in addition to any other legal rights it may claim against you, has a right to claim against you for breach of the contractual rights you accepted by installing ShareSmart and agreeing to be bound by the App terms, which include this Privacy Policy.

Patient’s Rights

Photographic images and other data relating to a patient may be requested, at any time, by that patient through relevant laws. A Patient has the right to object to the use or transfer of patient records relating to them (including photographic images and data) other than in accordance with their consent or as authorized by law. User Provided Information: You provide certain Personally Identifiable Information, such as your mobile phone number, push notification name (if applicable), billing information (if applicable) and mobile device information to ShareSmart when choosing to participate in various uses of the ShareSmart Service, such as registering as a user, updating your status or requesting status for your contacts. In order to provide the ShareSmart Service, ShareSmart will periodically access your address book or contact list on your mobile phone to locate the mobile phone numbers of other ShareSmart users (“in-network” numbers), or otherwise categorize other mobile phone numbers as “out-network” numbers, which are stored as one-way irreversibly hashed values. Cookies Information: When you visit the ShareSmart Site, we may send one or more cookies – a small text file containing a string of alphanumeric characters – to your computer that uniquely identifies your browser. ShareSmart uses both session cookies and persistent cookies. A persistent cookie remains after you close your browser. Persistent cookies may be used by your browser on subsequent visits to the site. Persistent cookies can be removed by following your web browser help file directions. A session cookie is temporary and disappears after you close your browser. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent. However, the ShareSmart Site may not function properly if the ability to accept cookies is disabled. Log File Information: When you use the ShareSmart Site, our servers automatically record certain information that your web browser sends whenever you visit any website. These server logs may include information such as your web request, Internet Protocol (“IP”) address, browser type, browser language, referring / exit pages and URLs, platform type, number of clicks, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the date and time of your request, one or more cookies that may uniquely identify your browser, your phone number, phone number you are requesting the status of and various status information. When you use the ShareSmart Service, our servers log certain general information that our application sends whenever a message is sent or received, or if you update or request any status information, including time and date stamps and the mobile phone numbers the messages were sent from and to.

Our Commitment to Data Security

ShareSmart uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your personal information. We cannot, however, ensure or warrant the security of any information you transmit to ShareSmart and you do so at your own risk. Using unsecured wifi or other unprotected networks to submit messages through the ShareSmart Service is never recommended. Once we receive your transmission of information, ShareSmart makes commercially reasonable efforts to ensure the security of our systems. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. If ShareSmart learns of a security systems breach, then we may attempt to notify you electronically so that you can take appropriate protective steps. ShareSmart may post a notice on the ShareSmart Site or through the ShareSmart Service if a security breach occurs.

Special Note to International Users

The ShareSmart Site and Service are hosted in Canada and are intended for and directed to users in Canada. If you are a user accessing the ShareSmart Site and Service from the European Union, Asia, or any other region with laws or regulations governing personal data collection, use, and disclosure, that differ from the laws of Canada, please be advised that through your continued use of the ShareSmart Site and Service, which are governed by the law of the Province of British Columbia, this Privacy Policy, and our Terms of Service, you are transferring your personal information to Canada and you expressly consent to that transfer and consent to be governed by the law of the Province of British Columbia for these purposes.

In the Event of Merger, Sale, or Bankruptcy

In the event that ShareSmart is acquired by or merged with a third party entity, we reserve the right to transfer or assign the information we have collected from our users as part of such merger, acquisition, sale, or other change of control. In the (hopefully) unlikely event of our bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your personal information is treated, transferred, or used.

Changes and updates to this Privacy Notice

This Privacy Policy may be revised periodically and this will be reflected by the “effective date” below. Please revisit this page to stay aware of any changes. Your continued use of the ShareSmart Site and ShareSmart Service constitutes your agreement to this Privacy Policy and any amendments. Date Last Modified: This Privacy Notice was last modified June 21, 2016