Privacy Policy
Last Updated: September 5, 2025
LuminIL.ai ("LuminIL," "we," "our," or "us") is committed to protecting the privacy, confidentiality, and security of personal information. We design our AI-enabled healthcare tools to comply with the Personal Health Information Protection Act (PHIPA, Ontario) and other applicable Canadian privacy laws. This Privacy Policy explains how we collect, use, and safeguard information when you use our website, products, and services.
1. Information We Collect
Personal Information
Name, contact details, or other identifiers provided when you contact us, request a demo, or subscribe to our services.
Usage Information
Technical information such as IP address, browser type, and interaction with our website, collected through cookies or analytics tools.
Health Information
When using our AI healthcare modules, we may process personal health information (PHI). In these cases, PHI is handled in accordance with PHIPA and remains under the custody and control of the healthcare provider.
2. How We Use Information
We use information to:
- Provide, improve, and support our services
- Respond to inquiries and customer support requests
- Conduct security, compliance, and quality assurance testing
- Meet legal, regulatory, and contractual obligations
We do not sell, rent, or trade personal or health information to third parties.
3. Data Sovereignty & Storage
All data is stored and processed exclusively in Canada, ensuring compliance with Canadian privacy laws.
On-Premises Deployments
Health data remains within the clinic or institution's own secure infrastructure.
Cloud Services
When cloud services are used, we rely on Canadian-based secure hosting that complies with PHIPA and other applicable laws.
4. Sharing of Information
We may share information only with:
- Healthcare providers and institutions using our tools, in accordance with their professional obligations
- Trusted service providers under strict confidentiality agreements (e.g., hosting providers, auditors)
- Legal or regulatory authorities, when required by law
5. Security Measures
We implement industry-standard safeguards including:
- Encryption of data in transit and at rest
- Access controls and authentication protocols
- Regular security audits and penetration testing
6. Your Rights
You may have rights under applicable laws to:
- Access and correct your personal information
- Withdraw consent to non-essential uses of your information
- Contact us with questions or concerns about your privacy
8. Children's Privacy
Our services are intended for use by licensed healthcare providers and their patients. We do not knowingly collect personal information directly from children without appropriate consent.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date.
10. Contact Us
If you have any questions about this Privacy Policy or our practices, please contact us: