Terms of service
The agreement between you and Selfsense when you use it.
Version 2026-11-03 · Nov 3, 2026 · draft
1. The agreement
Selfsense is a small service run from British Columbia, Canada. By creating an account, with an email address or with Google, you agree to these terms, and you acknowledge the privacy policy, which says what happens to your information. Which version you agreed to is recorded with your account. If you do not agree, do not create an account.
2. Not medical advice
Selfsense keeps, charts and explains your own health record. It is not a doctor, does not diagnose or treat anything, and is not a medical device.
- The coach answers questions about your record. Its answers are information to take to a clinician, not instructions. It can be wrong, and it does not know what your doctor knows.
- Lab report explanations and the notes on a new panel describe what a report says in plain words. They are not an interpretation of your health.
- The visit page and its summary are a list for you and your clinician to go through, not a referral or an assessment.
Do not start, stop or change a prescribed treatment because of something Selfsenseshows or says; ask the person who prescribed it. Charts and readings come from the devices and documents you add, and are only as accurate as they are. In an emergency, call 911 or go to the nearest emergency department.
3. Your account
You must be at least 16, and the record must be your own (or one you have the legal right to keep, such as a dependant’s). Give accurate sign-in details, keep them to yourself, and turn on two-step sign-in. You are responsible for what happens under your sign-in until you tell us it has been compromised.
4. Your record is yours
You own what you put in. You let us store it, process it and show it back to you, and send it to the services the app uses to do what you ask (the AI you chose, the masker for a share link), as the privacy policy describes, and for nothing else. That permission ends when you delete the information or your account.
You confirm you have the right to add what you add. Family history and some documents hold other people’s information; add it only where you are entitled to.
5. Acceptable use
Do not:
- keep someone else’s record without their permission or legal authority;
- upload anything unlawful, or anything you have no right to share;
- try to get into another account, test or work around the security (the sealing, the gatekeeper, the share-link masking), or overload the service;
- read the site with scripts or bots, except through the connectors and the assistant connection the app itself offers;
- resell the service, or use it to provide clinical services to other people.
If you find a security problem, tell us at privacy@selfsense.ca rather than testing it further. We will not pursue anyone who reports one in good faith.
6. Share links are your responsibility
A share link shows the parts of your record you choose to whoever has the link (and the password, if you set one). You decide who receives it, what it shows and when it stops working, and you can revoke it at any time. Once someone has opened it, they can copy what they saw; revoking stops further views, not copies already made.
Documents reach a share link only as a masked copy, with identifiers blacked out and uncertain pages withheld. The masking is careful but can miss something. Look at what a link shows before you send it. We are not responsible for what a recipient does with what you shared.
7. Connected services have their own terms
Oura, Garmin Connect, ResMed myAir, Google’s Health Connect, LibreView, Health Gateway and Google sign-in are run by other companies and governments, under their own terms and privacy policies. When you connect one, you confirm the account is yours and that you are allowed to connect it under those terms.
Oura is connected through Oura’s own authorisation page. Garmin and myAir are connected with your own sign-in for those services, the same one their apps use, not through a published developer programme. Any of these companies can change or stop that access, and we may switch a connector off at any time. We are not responsible for the accuracy of the data they provide, or for their services.
Whether connecting Garmin and myAir this way sits within Garmin’s and ResMed’s own terms is one of the questions for the review.
8. AI can be wrong
Reading documents, the coach, explanations and housekeeping use an AI model: Gemini (Google, in Montreal) by default, or Claude (Anthropic, in the US) if you choose it in Profile. A model can misread a value or say something untrue with confidence. Check anything that matters against the original document, which Selfsense keeps for exactly that reason.
9. The service itself
Selfsense is provided as it is, by a small team, with no promise that it will always be available, free of errors, or keep every feature. We may change, add or remove features. You can download your whole record from Profile at any time, and we recommend keeping your own copy of anything you cannot replace.
If we ever close the service, we will give at least 30 days’ notice by email so you can download your record, and then delete every account as the privacy policy describes.
Selfsense is free today. If paid features arrive, we will say so and what they cost before anything is charged; nothing you already have will start costing money without your agreement.
10. Ending the agreement, and what survives
You can delete your account at any time from Profile. We may suspend or close an account that breaks these terms, and will tell you why unless the law or someone’s safety prevents it.
Deleting an account schedules its encryption key for destruction, after which nothing sealed under it can be opened from any copy; within those seven days it can be restored if you ask. The record, files, tokens and sign-in details go at once, and the nightly backups drop the account at their next run. What survives is described in the privacy policy: the audit trail’s entries, with your words removed; anonymous AI usage counts; and what other services keep under their own terms (such as emails in our email provider’s logs). Sections 2, 6, 7, 11 and 12 of these terms continue to apply after the account is gone.
11. Liability
To the extent the law allows, Selfsense is not liable for decisions you or anyone else makes based on what it shows or says, for losses caused by services it connects to, or for indirect or consequential losses. Where liability cannot be excluded, it is limited to the greater of what you paid us in the twelve months before the claim and one hundred Canadian dollars. Nothing here limits liability that the law does not allow to be limited, or any right you have as a consumer that cannot be waived.
You agree to cover our reasonable costs if you break Section 5 and that causes a claim against us.
12. Governing law
These terms are governed by the laws of British Columbia and the federal laws of Canada that apply there, and disputes go to the courts of British Columbia.
If you live in Quebec or elsewhere in Canada, you keep the protections of your own province’s consumer and privacy laws, and you may be entitled to bring a claim where you live.
13. Changes to these terms
When these terms change in substance, the version date above changes, and we will tell you before the new version applies to you. If you do not agree to a new version, you can delete your account before it applies. Which version each account agreed to at sign-up is recorded.
14. Contact
Questions about these terms: privacy@selfsense.ca.