Privacy Policy - DialApp

Privacy Policy

Your privacy and data security are our top priorities. Learn how we protect and handle your information.

Last updated: September 1, 2025

Introduction

DialApp ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our clinic phone management platform and services. By using DialApp, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Information We Collect

We collect minimal information necessary to provide our clinic phone management services:

Account Registration: For account creation, we only collect your email address and name. No additional personal information is required for registration.

Call Information: We blur phone numbers before storing them, which means we never store the actual phone numbers and cannot access the original numbers. We provide call reports including call duration, timestamps, and associated costs. We do not store any health-related data or patient information during calls.

Chrome Extension Data: Our Chrome extension accesses patient phone numbers from your EMR system only for the purpose of initiating calls. We do not have access to your EMR system itself or store complete patient information. The phone numbers are blurred before storage, ensuring we cannot retrieve the original numbers.

Technical Logs & Analytics: We collect technical logs for troubleshooting and monitoring purposes.

How We Use Your Information

We collect technical logs for troubleshooting and monitoring purposes.

Call Processing: We route your calls through trusted telecommunications providers including Twilio to ensure reliable call delivery. We work with multiple certified providers to maintain call quality and prevent service interruptions by automatically switching between providers when necessary.

Billing and Reports: We provide detailed call reports in your dashboard showing call duration, timestamps, and costs. Based on your usage, we charge your payment method and pay the telecommunications providers for call services.

Service Quality: To enhance call quality and ensure reliability, we work with various trusted providers. This allows us to handle calls efficiently, maintain high quality standards, and prevent call drops or interruptions.

Analytics and User Experience Tracking

We use Hotjar to collect anonymized analytics and user experience data. This helps us understand how users interact with our platform and improve our services. Hotjar may collect information such as device type, browser, general usage patterns, and click/tap behavior, but does not collect personally identifiable information or any health data. You can learn more about Hotjar’s privacy practices at hotjar.com/legal/policies/privacy/.

Payment and Billing Information

We prioritize the security of your payment information through industry-leading practices:

Payment Processing: All payment card information and billing details are securely stored by Stripe, our payment processor, not on our servers. We do not have access to or store your complete credit card information.

Usage-Based Billing: Users store their payment cards with Stripe, and we charge based on actual call usage. We immediately pay our telecommunications providers for the services rendered.

Payment Security: Stripe maintains PCI DSS compliance and industry-standard security measures to protect your payment information. We never see or store your full payment card details.

Data Security and Protection

We implement comprehensive security measures to protect your information:

Secure Infrastructure: All data is stored on secure servers with industry-standard security protocols, encryption, and access controls.

Data Protection: Phone numbers are blurred (anonymized) before being stored in our system, which means we never store actual phone numbers and cannot access the original numbers. This provides an additional layer of privacy protection.

No Health Data Storage: We explicitly do not collect, store, or process any health-related information or patient medical data. Our service is limited to call management functionality only.

EMR Access Limitation: While our Chrome extension can access your EMR system, it only extracts phone numbers for calling purposes and does not collect any other patient data. Our central system has no access to your EMR - all EMR interaction happens locally through the browser extension only.

Your Control and Rights

You maintain full control over your account and data:

Account Deactivation: You can deactivate your account and discontinue our services at any time through your account settings or by contacting our support team.

Data Access: You can access all your call reports, usage data, and account information through your dashboard at any time.

Data Deletion: Upon account deactivation or upon request, we will securely delete your account information and call records in accordance with our data retention policies and legal requirements.

Service Control: You have complete control over when and how to use our calling services. The Chrome extension only functions when actively used by you for making calls.

Data Subject Rights: Under Canadian privacy law (PIPEDA), you have the right to access, correct, delete, or export your personal information. You can also opt-out of non-essential communications at any time. To exercise these rights, please contact us at info@DialApp.ca.

Third-Party Service Providers

We work with trusted partners to deliver our services:

Telecommunications Providers: We partner with reputable providers including Twilio and other certified telecommunications companies to route and manage your calls. These providers are bound by strict confidentiality and security agreements.

Payment Processing: Stripe handles all payment processing and stores your payment information. Stripe is PCI DSS certified and maintains the highest security standards for financial data.

Provider Redundancy: We work with multiple telecommunications providers to ensure service reliability and call quality. This redundancy helps prevent service interruptions and maintains consistent call quality.

Data Sharing and Disclosure

We maintain strict limitations on data sharing:

No Phone Number Sharing: Since we blur phone numbers before storage and cannot access the original numbers, we cannot share actual phone numbers even if we wanted to.

No Health Data Sharing: Since we do not collect health-related information, we cannot and do not share any patient medical data.

Service Providers Only: We only share necessary technical information with our telecommunications and payment processing partners to deliver our services.

Legal Requirements: We may disclose information only when required by law, court order, or government regulation, or when necessary to protect our rights or user safety.

No Marketing or Sales: We do not sell, trade, or share your information for marketing purposes or with any unauthorized third parties.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Call records and billing information are typically retained for regulatory compliance purposes. When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

International Data Transfers

Our services may involve the transfer of information to countries other than your own. When we transfer personal information internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable Canadian data protection laws.

Children's Privacy

Our services are not intended for individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will take steps to delete such information promptly.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by email or through our service. We encourage you to review this policy periodically to stay informed about how we are protecting your information. The "Last Updated" date at the top of this policy indicates when it was last revised.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please don't hesitate to contact us. We are committed to addressing your privacy concerns promptly and most inquiries receive a response within 24 hours.

For all inquiries including privacy questions, support requests, billing issues, or any other matters, please contact us at info@DialApp.ca

You can also visit our website at DialApp.ca for additional resources and information about our services and privacy practices.

Ownership

All content, technology, and intellectual property associated with DialApp are owned by us and protected by applicable laws. You are granted a limited, non-exclusive license to use our services in accordance with this Privacy Policy and our Terms of Service.