Privacy Policy — EvoxOne Tab

Last updated: August 3, 2026

This policy describes how data is handled in the EvoxOne Tab mobile app, used by staff and patients of clinics on the EvoxOne platform for check-in, admission, and signing consent forms. The app is reserved for client clinics and is not intended for the general public.

1. Who processes your data

Each client clinic is responsible for its patients' data (the "data controller"). Evox Systems acts as the technology provider ("data processor"): we host and secure the infrastructure, but access to a given clinic's data is isolated by subdomain and cannot be viewed by another clinic.

2. Data collected

Patient identity and contact details: name, date of birth, sex, address, phone, email.

Health insurance number (RAMQ) and expiry date, when required by the clinic.

Answers to clinical and admission forms, and the electronic signature of the patient or their legal guardian (for minors).

Communication preferences (call, SMS, email consent).

Technical data: authentication token, app version, operating system, for security and support purposes.

3. Use of data

Data is used exclusively for patient check-in and admission, building the administrative record within the clinic, obtaining and storing signed consents, and technical support.

4. Data sharing

We do not sell or share your data with third parties for advertising purposes. Data only travels between the app and the secure subdomain of the relevant clinic (*.evoxsystems.cloud), hosted by Evox Systems.

5. Security

Communications are encrypted (HTTPS/TLS). Session tokens are stored in the operating system's secure vault (Keychain on iOS, Keystore on Android). A PIN lock protects access to patient mode on the device.

6. Retention

Data is retained in accordance with legal obligations applicable to health and administrative records, and according to each client clinic's own retention policy.

7. Your rights

You may request access, correction, or withdrawal of consent by contacting your clinic directly, or by emailing [email protected]. You also have the right to file a complaint with the Commission d'accès à l'information du Québec.

8. Minors

When the patient is a minor, the consent form must be signed by a parent or legal guardian using the guardian signature feature built into the app.

9. Changes

This policy may be updated from time to time. The last updated date appears at the top of the page.

10. Contact

For any privacy-related question: [email protected]