Helperbird PHIPA and MFIPPA Compliance

Overview

Helperbird is designed with privacy at its core. We comply with the Personal Health Information Protection Act (PHIPA) and the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) as required by Ontario school boards and public sector organizations.

Helperbird is also compliant with the Accessibility for Ontarians with Disabilities Act (AODA).

What Data Helperbird Collects

Helperbird collects the minimum amount of data needed to operate:

Subscription Key

Used to validate the license. This is set by the admin through Google Admin or Microsoft Intune.

Email Address (Only If the User Signs In)

Used to verify the user belongs to a licensed organization. This is the same email the user is already signed into their browser with.

Usage Data

Aggregated, anonymous data about which features are used and how often. This helps administrators track adoption and is visible in the admin dashboard.

What Data Helperbird Does Not Collect

Helperbird does not collect, store, or process:

• Student names, dates of birth, or Ontario Education Numbers (OEN)
• Personal addresses or parent/guardian contact information
• Health information or special education designations
• Page content, browsing history, or website URLs
• Text that is read aloud, translated, or simplified
• Voice recordings from speech-to-text
• Student images, likeness, or any biometric data

Some features do send content to a processor in order to work: the natural text-to-speech voices, voice typing, Immersive Reader, the Screenshot Reader, Translate, Simplify, Summarize and Grammar. Nothing is retained after the request finishes. Which feature sends what, and where, is set out in full in Helperbird data hosting. Every other feature runs entirely on the device.

How Data Is Stored and Processed

User Settings

User settings (font preferences, color choices, feature toggles) are stored by the browser itself, using chrome.storage.sync by default. That means they travel with the browser profile the user is signed in to, in the same way their bookmarks do, and they are held in that user's own Google, Microsoft or Apple account. Helperbird runs no server of its own for this and never sees them.

A user or an admin can switch this to chrome.storage.local, which keeps the settings on one device only. See sync data locally or remotely.

Admin-Managed Settings

When admin-managed settings are used, the subscription key and feature policies are delivered through chrome.storage.managed via Google Admin or Microsoft Intune. This stays on the device.

Usage Analytics

There are none. Helperbird collects no usage analytics, and the extension contains no analytics or telemetry code of any kind.

Cookies and Tracking

Helperbird does not use cookies or third-party tracking scripts.

PHIPA Compliance

PHIPA governs the collection, use, and disclosure of personal health information in Ontario. Helperbird complies with PHIPA because:

• We do not collect any personal health information.
• We do not collect special education designations or health records.
• No student data is shared with third parties.
• Data processing is limited to what is necessary for the extension to function.

MFIPPA Compliance

MFIPPA governs how Ontario public institutions, including school boards, collect, use, and disclose personal information. Helperbird complies with MFIPPA because:

• We collect only the minimum personal information necessary (email address for sign-in, if used).
• Data collection is directly related to the operation of the extension.
• We do not disclose personal information to third parties.
• We support data deletion requests. Administrators can request the removal of all data associated with their organization at any time.
• We are willing to participate in a Privacy Impact Assessment (PIA) with the Board.

AODA Compliance

Helperbird is compliant with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code. The extension is itself an accessibility tool, designed to remove barriers to reading, writing, and communication for students with disabilities.

Data Retention and Deletion

• Usage data is retained for the duration of the subscription.
• When a subscription ends or an organization requests deletion, all associated data is removed.
• Administrators can request a full data export or deletion at any time by contacting Helperbird support.

Related Guides

• Where Helperbird Stores Your Data
• Sync Data Locally or Remotely in Helperbird
• How to Deploy Helperbird to Your School or Business
• How to Set Helperbird JSON Policy in Google Admin

Need Additional Help?

If you have any questions about privacy, compliance, or data handling, please contact the Helperbird support team. You can reach us at Helperbird support. We are happy to provide additional documentation or participate in privacy assessments as needed.