spore — Privacy Policy

Last updated 2026-09-27. This policy has not been reviewed by a lawyer; it says what we actually do.

spore is operated by Newnorm Inc., carrying on business as wemark. This policy explains what spore holds, where it is, who can reach it, and what you can ask us to do about it. It is written with Canada's PIPEDA in mind and designed to meet it. That is a description of our intent, not a certification. Read it together with our Terms of Service.

---

The short version

spore holds no patient information. It records instruments and machines, not people's teeth. The personal information it does hold is about your staff: their names, so the record can say who packed a load and who signed it out.

Your records are stored in Canada. A complete backup copy is written off-site every fifteen minutes to a different company, and that copy may be held elsewhere in North America — see "Where your data lives".

---

What spore holds

About the practice

Practice name, address, three-letter practice code, timezone, the sterilizers you have, the pouch types you use, and your billing details.

About your staff

• Names of the people who run the steri room, so the record can say who did what. This is personal information and it is the reason this policy exists.
• A 4-digit PIN for each, stored only as a bcrypt hash. We cannot read a PIN, and neither can anyone else — including us.
• Email addresses for people with a dashboard login.
• The account owner's email, and what they did in the record.

About the work

Cycles, loads, pouches and their codes; monitoring test results and their lot numbers; which operatory a pouch was opened in and when; failures and every action taken about them; and, where a practice has a networked W&H Lexa, the machine's own validation report kept verbatim.

About your use of spore

Device registrations for the steri-room iPad and operatory screens, and ordinary technical logs used to keep the service running and secure.

What spore does NOT hold

No patient names, no chart numbers, no clinical notes, no health information. This is enforced by the design of the database, not by a policy: there is nowhere to put it. It is also why a practice can hand the whole record to an inspector without redacting anything.

Why we hold it

To run spore for your practice: to keep the record, print labels, show you what is due, tell you when something needs attention, support you when you ask, bill you, and keep the service secure. We do not sell personal information, and we do not use your records to advertise to you or anyone else.

Where your data lives

What	Where	Who runs it
Your records, day to day	Canada (Montréal region)	Supabase
The application	Vercel's network	Vercel
Off-site backup, every 15 minutes	Cloudflare R2. Cloudflare offers no Canada-only option, so this copy may be stored elsewhere in North America	Cloudflare
Email spore sends you	Resend	Resend
Payments	Stripe	Stripe

Backups go to a company unrelated to the one holding the live record, on purpose: a provider's bad day should not be able to take both.

Data held outside Canada can, in principle, be reached by that country's authorities under its own laws. We tell you this because you are entitled to know it, not because we have ever been asked.

Who can see it

• Your practice. Owners and office managers see everything; front-desk staff can log and look things up but not change how the room is configured.
• wemark staff, only to support you or to keep the service running. Our staff accounts are read-only against clinical records and cannot create or alter a sterilization record.
• The providers listed above, each only for its own job.
• Anyone you show it to — an inspector, an insurer, your regulator — by exporting it. That is your decision, not ours.

We will not hand your records to anyone else unless the law requires it. If we are compelled, we will tell you unless we are forbidden to.

How it is protected

• Encrypted in transit, and encrypted at rest by our storage providers.
• Each practice's data is separated in the database and access is enforced by the database itself, not only by the application.
• PINs are bcrypt-hashed; device tokens are stored as hashes.
• Sterilization records cannot be deleted through the application by anyone, and corrections are added rather than overwritten.
• We hold no security certification — no SOC 2, no ISO, no HIPAA attestation — and we will not imply otherwise. What is written here is what is actually done.

How long we keep it

While you are a customer, we keep your records so they are there when you need them, which for a sterilization record may be years after the load.

After you cancel, two different clocks run:

• Your staff and account details (owner and staff emails, hashed PINs, device registrations, billing contact) are kept for 12 months, so you can come back without starting over. We then give you 30 days' notice and delete what the law lets us delete. Invoices stay as long as tax law requires.
• The sterilization records (cycles, loads, pouches, monitoring results, incidents and their audit trail) are kept for 10 years after cancellation, and we will give you a complete export at any time in that period if you ask. A practice can be inspected years after it stopped using spore.

If you ask us to delete sooner, we will where the law allows, and we will confirm in writing when it is done. Backups age out on their own schedule after the live copy is deleted.

If something goes wrong

If a breach of our safeguards involving personal information creates a real risk of significant harm, or if the law otherwise requires it, we will notify the people affected and the Office of the Privacy Commissioner of Canada without undue delay, and we will tell the account owner of every practice involved what happened and what we did about it.

Your rights

You may ask us to show you the personal information we hold about you, correct it if it is wrong, or delete it. Email spore@wemark.ca and we will reply within 30 days.

One limit worth stating plainly: we will not delete a staff name from a completed sterilization record. That record is evidence about patient safety, your practice may be required to keep it, and removing the name of the person who signed a load would damage its integrity. If a former employee asks, we will explain this and work with the practice on what can be done.

Staff, not just practices

If you work at a practice that uses spore and you have a question about your own information, you can contact us directly. We will usually need to involve your employer, because the record belongs to the practice.

Changes

If we change this policy in a way that matters, we will tell the account owner by email before it takes effect.

Contact

The person accountable for privacy at wemark is Aryan Abadeh, founder. Write to spore@wemark.ca and it reaches him.

spore, a product of Newnorm Inc. (carrying on business as wemark) spore@wemark.ca · usespore.com

If we cannot resolve your concern, you may complain to the Office of the Privacy Commissioner of Canada.