Privacy notice
How NephroLink handles personal information.
NephroLink is coordination software for kidney transplant workups in Ontario. It tracks which steps are done, due or about to expire. It never stores test results.
In short
- No real patient information is in NephroLink today. Everything you see, and all testing, uses synthetic data.
- This website has no sign-up, no tracking cookies and no analytics.
- When a renal program uses NephroLink, the hospital stays in charge of its patients' information. We handle it only on the hospital's behalf, under a written agreement.
- NephroLink records that a test happened and when. Results stay in the hospital record.
- Data is planned to stay in Canada, on Microsoft Azure in the Canada East region (Montreal).
Who we are
NephroLink is a Ru'ya Horizon company based in Ontario, Canada. In this notice, "we" and "us" mean NephroLink.
Questions about privacy go to hello@ruyanephrolink.ca.
This website
What we collect
The website has no accounts, forms, tracking cookies or analytics tools. You can read it without telling us who you are.
The page loads its typefaces from Google Fonts, so your browser shares your IP address with Google when the fonts load. Google's own privacy policy covers that.
If you email us
If you write to hello@ruyanephrolink.ca, we receive your name, email address and whatever you put in the message. We use it to reply and, if you asked, to arrange a walkthrough. We don't add you to a mailing list unless you ask us to, and we don't sell or share your details.
Please don't send patient information by email. If it arrives anyway, we'll delete it and let you know.
The NephroLink service
This part applies once a renal program uses NephroLink with real patients. That hasn't happened yet: there is no pilot, and no real patient information has been used to build or test the software.
The hospital is in charge
Under Ontario's Personal Health Information Protection Act (PHIPA), the hospital or renal program is the health information custodian for its patients. NephroLink would handle personal health information only on the custodian's behalf and on its instructions, under a written agreement with each program.
What NephroLink holds, and what it never holds
- Patient name and contact details, for reminders
- The workup steps, each step's state and the date it changed
- Valid-until dates for completed steps
- Which staff are assigned to which patients
- Messages between the care team, and reminders sent
- A record of who looked at or changed what, and when
- Test results or values
- Imaging, consult or clinical findings
- Eligibility or listing decisions
- Clinical advice of any kind
Who can see it
Access is by role. Each person sees only the patients they are assigned to: the Coordinator, the Referring Doctor, the Dialysis Unit and, once a referral package is sent, the Transplant Centre. Patients see their own workup. Every access is logged.
Where it is kept
NephroLink is planned to run on Microsoft Azure in the Canada East region (Montreal), so personal health information stays in Canada. If reminders are sent by text or email, the message content will be kept to what the patient needs: a step and a date, never a result.
How long it is kept
For as long as each program's agreement says, and then it is deleted or returned to the program.
Your rights as a patient
You can ask to see or correct your information. Because your hospital is the custodian, start with your renal program; we'll help them answer quickly. You can also complain to the Information and Privacy Commissioner of Ontario.
If something goes wrong
If personal health information is lost, stolen or seen by someone who shouldn't see it, we'll tell the hospital promptly so it can notify affected patients and the Commissioner as PHIPA requires.
Changes to this notice
If we change this notice, we'll post the new version here and update the date at the top.