Sovereign Individual DataInfrastructure & Privacy Agreement

The COI Compassion Orb Intelligence platform operates strictly as a decentralized data management utility infrastructure loop. By utilizing this system, the Individual explicitly acknowledges that all cryptographic row-level access permissions are governed solely by the Individual via their local User Preference Control Dashboard (PEI → Privacy & Circle of Care). The Network Administrator and Platform Developers maintain zero operational keys to intercept, read, or distribute private medical telemetry logs independently.

Because data sharing across the Caregiver Dashboard, Clinician Dashboard, and Family Proxy Dashboard is authorized exclusively by the Individual's touch toggles, the Individual assumes full responsibility for any data exposure resulting from permission keys granted to outside entities — such as selecting “Can View” or “Full Manage” for a specific clinician, caregiver, or family email.

• Deny by default: a scope resolves to No Access unless the Individual grants it explicitly. No background sync, no implied access.
• Active revocation: setting any data track row to No Access immediately forces a row-level block across all connected platforms, leaving zero caching traces behind. Revoked members cannot read or receive updates.

Electronic signature canvas captures (typed-name sign-offs) are cryptographically bound to their unconfirmed entries, creating a tamper-evident, audit-ready compliance history. A signature receipt is stored with a cryptographic check hash, the signed entry cannot be re-signed after human confirmation, and every permission change is written to the audit ledger.

The System Administrator Dashboard operates strictly on infrastructure system metrics — such as active connection counts, database pool tracking, and service health — and has zero structural access to actual clinical health records. Clinical data remains behind the Individual's row-level permission registry at all times.

This system behaves as a peer-to-peer validation channel matching regional privacy frameworks (including HIPAA and PIPEDA regulations). The platform does not curate, modify, or provide medical diagnostics.

Automated patterns flagged by the Compassion Orb Intelligence (COI) layer represent non-punitive pattern discovery assistance only and do not constitute authorized medical charts until explicitly signed off by a licensed human professional. COI is not a medical device and is not a substitute for professional medical evaluation, direct therapeutic intervention, or licensed clinical diagnosis.

The platform minimizes data collection to what the individual and their Circle of Care intentionally record:

• Individual-controlled records:vitals, medication administration logs (MAR), daily assessments, wellness check-ins, and care observations entered by the Individual, their caregiver, or their clinician — each gated by the Individual's RBAC grants.
• Contact and account data: names and emails needed to operate the account and the Circle of Care.
• Technical metadata: anonymized metrics such as browser types and interface engagement intervals used to refine stability. Metadata is never merged with personal records.

All data is encrypted in transit (TLS/HTTPS) and at rest, with per-care-circle logical separation. Under Canadian statutes (PIPEDA federally; PIPA in British Columbia), you maintain absolute control over your digital footprint:

• Right to access: request a formal summary of any personal details we retain.
• Right to erasure: demand immediate, irreversible deletion of your records from operational databases.
• Right to control sharing:grant, tighten, or revoke every Circle of Care permission from PEI → Privacy & Circle of Care at any time.

This platform is provided as a complementary wellness and care-coordination service. It is not a medical device and does not replace professional healthcare. You must not overburden the hosting architecture, inject malicious code, reverse-engineer backend loops, or deploy automated bots to extract data.

This Agreement and any operational disputes shall be governed by and interpreted under the laws of the Province of British Columbia and the federal laws of Canada.