Last Updated: May 11, 2026

Company: Tactile Robotics Ltd.

1. Introduction

Tactile Robotics Ltd. (“Tactile Robotics”, “we”, “us”, or “our”) operates the iManus platform, a cloud-based software system designed to support remote rehabilitation, care coordination, and communication between patients, healthcare professionals, and caregivers.

This Privacy Policy explains how personal information and personal health information (“PHI”) are collected, used, stored, shared, and protected when users access or use the iManus platform.

This policy is designed to align with applicable privacy expectations including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and privacy best practices commonly used in healthcare technology environments.

2. Scope

This Privacy Policy applies to all users of the iManus platform including:

• Patients
• Healthcare professionals (doctors, therapists, practitioners, healthcare specialists)
• Caregivers
• Platform administrators

By creating an account or using the platform, users acknowledge that they have read and understood this Privacy Policy.

3. Information We Collect

Depending on the user role, the iManus platform may collect several categories of information.

Account Information:

• Name
• Email address
• Physical/home address (optional)
• Phone number (optional)
• Date of birth (optional)
• Profile picture (optional)
• Password (stored securely)
• User role (patient, healthcare professional, caregiver)

Optional Profile Information:

Certain profile fields such as address, phone number, date of birth, and profile picture are optional and may be provided by users if required for care coordination or communication with healthcare providers.

Health and Rehabilitation Information:

• Rehabilitation task videos uploaded by patients and healthcare professionals: Videos uploaded by patients or healthcare professionals may contain visible or audible identifying information depending on what the user chooses to record, including a person’s face, voice, home environment, background, or other identifying features or items.
• Questionnaire responses
• Rehabilitation activity information
• Progress tracking information

Communications:

• Messages exchanged between users through the platform

Technical Information:

• Login timestamps
• Device or browser information
• IP address or approximate location
• Security and audit logs

4. Purpose of Collection

Personal information and health information are collected and used for the following purposes:

• Providing access to the iManus platform
• Enabling rehabilitation monitoring and remote care coordination
• Allowing communication between patients, healthcare professionals, and caregivers
• Supporting clinical workflow coordination
• Maintaining system security and integrity
• Meeting legal or regulatory obligations

We collect only the information reasonably necessary to operate the platform and provide its services. Personal information is collected only for the purposes described in this policy and is not used for unrelated purposes without user consent unless required by law.

The iManus platform is designed to support communication, rehabilitation monitoring, and care coordination. It is not intended to provide medical advice, diagnosis, or treatment recommendations. Healthcare professionals remain responsible for all clinical decisions.

Optional profile fields are collected only where provided by users and only to support care coordination, communication, or clinician workflows.

When recording or uploading videos to the platform, patients and healthcare professionals are responsible for deciding what appears in the recording. If a user does not want their face, home environment, or other identifying information to be included in a video, the user is responsible for concealing, excluding, or avoiding those elements before uploading the video.

5. Role-Based Information Sharing

Information shared within the iManus platform depends on the user’s role.

Patients:

Patient information including name, email, physical or home address (if provided), phone number (if provided), date of birth or age (if provided), profile picture (if provided), rehabilitation videos, and questionnaire responses are shared with the healthcare professionals involved in the patient’s care. Caregivers invited by the patient can view only the patient’s name, email address, and profile picture (if available). Caregivers can also view the patient’s schedule of rehabilitation treatment/tasks, progress, and questionnaire answers only if the patient provides access to the caregiver(s).

Caregivers:

Caregiver information including name, email address, and profile picture (if provided) is visible to the patients they assist and the healthcare professionals working with those patients. If the caregiver provides access to the patient, the patient can view the caregiver’s responses to questionnaires assigned by the healthcare professionals.

Healthcare Professionals:

Healthcare professional information including name, email address, and profile picture (if provided) is visible to patients and caregivers associated with their care activities.

6. Communications Between Users

The platform allows text and/or voice communication between users participating in care coordination.

Messages exchanged within the platform are visible to the communicating parties and are stored within their respective accounts.

7. Third-Party Service Providers

The iManus platform uses trusted third-party cloud service providers to host and process information.

These providers may include infrastructure services such as:

• Google Cloud Platform (hosting and storage)
• MongoDB Atlas (database services)

These providers are contractually required to protect personal information, use the data only for authorized purposes, and maintain appropriate security safeguards.

8. Cross-Border Data Processing

Due to the use of cloud infrastructure, personal information may be processed or stored outside of Canada, including in the United States or other regions where cloud infrastructure is located.

When data is processed outside Canada, it may be subject to the laws of the jurisdiction where the data is processed. Appropriate contractual and technical safeguards are used to protect personal information.

9. Security Safeguards

We implement administrative, technical, and organizational safeguards to protect personal and health information, including:

• Encryption of data in transit using secure protocols
• Encryption of stored data within cloud infrastructure
• Role-based access control
• Authentication safeguards
• Security monitoring and logging
• Secure cloud hosting infrastructure

10. Data Retention

Personal information is retained only for as long as necessary to operate the platform and meet legal or operational requirements.

Users may delete their accounts at any time. When an account is deleted, all personal information and uploaded content associated with the account, including rehabilitation videos, are immediately and permanently deleted from active systems and cannot be recovered.

Encrypted system backups may temporarily retain deleted data until automatic expiry in accordance with internal backup retention schedules.

11. User Rights

Users have the ability to:

• Access their account information
• Update profile information
• Change their email address
• Reset their passwords
• Delete their accounts

Users may contact the company if they have questions about their personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational or regulatory changes. Updated versions will be posted on the platform.

Continued use of the platform after changes are posted indicates acceptance of the revised policy.

13. Contact Information

If you have questions about this Privacy Policy or about how your personal information is handled, you may contact:

Privacy Officer
Address: 200-135 Innovation Dr (UM Smartpark), Winnipeg, MB CANADA R3T 6A8
Email: contact@theimanus.com
Website: https://theimanus.com/