Privacy Policy

Last updated: February 2025

Overview

ERstat ("we", "our", or "us") provides emergency room wait time information for Canadian hospitals. We are committed to protecting your privacy and being transparent about how we collect and use data.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Password (stored securely using industry-standard hashing)
• Phone number (optional, for SMS alerts)
• Name (optional)

Social Login

If you sign in with Google or Facebook, we receive:

• Your name and email address
• Profile picture URL
• A unique identifier from the provider

We do not have access to your social media passwords or the ability to post on your behalf.

Usage Information

We automatically collect:

• Device type and browser information
• IP address (used for security and approximate location)
• Pages visited and features used
• Wait time reports you submit

How We Use Your Information

• Provide the service: Display wait times, send alerts when wait times drop
• Improve the service: Understand how people use ERstat to make it better
• Communicate with you: Send wait time alerts, feature announcements (if opted in), and important service updates
• Security: Protect against fraud and abuse

Information Sharing

We do not sell your personal information. We may share data with:

• Service providers: Companies that help us operate (e.g., email delivery, SMS providers)
• Legal requirements: When required by law or to protect our rights
• Aggregated data: Anonymous, aggregated statistics may be shared publicly

Data Retention

We retain your account information as long as your account is active. Wait time reports are retained indefinitely for historical analysis but may be anonymized after 1 year.

You can delete your account at any time through Account Settings, which will remove your personal information.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Opt out of marketing communications
• Export your data

Cookies and Tracking

We use:

• Essential cookies: To keep you logged in and remember preferences
• Analytics: Google Analytics to understand usage patterns (you can opt out using browser settings)

Security

We protect your data using:

• HTTPS encryption for all connections
• Secure password hashing (PBKDF2)
• Regular security reviews

Children's Privacy

ERstat is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.

Contact Us

For privacy questions or to exercise your rights, contact us at:

Email: [email protected]

Canadian Privacy Laws

ERstat complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.