Privacy Policy

Introduction & Scope

This Privacy Policy explains what data collects, how we collect it, how we use it, with whom we share it, how long we keep it, and how you can exercise your rights. By using our physical therapy platform (the “Service”), you agree to this Policy.

• Contact:
• HIPAA: We act as a Business Associate and sign BAAs where applicable.

Information We Collect & Why

You Provide

• Identity & Contact Information: such as your name, email address, or phone number, used to create and manage your account and communicate with you.
• Physical Therapy Data: information you enter or your therapist records within the platform, including pain or exertion levels, mobility details, goals, exercise logs, and notes. This data is used to personalize your program and support your care.
• Media Uploads (optional): videos or photos you choose to upload for motion tracking or exercise-form review.
• Preferences: language, notification settings, and other customization options that help tailor your experience.

Automatically Collected

• Device & Usage Data: technical information such as device type, operating system, IP address, app version, and crash or performance diagnostics.
• Activity Events: non-sensitive in-app actions (for example, starting or completing a workout) used to measure progress and improve reliability.
• Cookies & Local Storage: used to keep you signed in, store preferences, and maintain session security.

We collect this information to provide core features, personalize your workouts and AI-generated plans, ensure account security and platform stability, improve the productand comply with applicable legal and healthcare requirements.

How We Use Information

• Provide and improve PT features and clinician collaboration
• Generate/adapt workouts, reminders, and progress tracking
• Security, fraud prevention, and diagnostics
• Legal, regulatory, and healthcare documentation

We do not sell personal data.

Sharing & Disclosures

We share information only as necessary to operate the Service, support your care, or comply with legal requirements. We do not sell personal data.

Your Care Team

If you are a patient, your connected physical therapist or clinic—who are also registered users of the platform—can access the information required to deliver and monitor your physical therapy program. These clinicians are not third parties but authorized users of the same system who use this data solely to provide your care.

Service Providers and Vendors

We use certain trusted third-party service providers to host, maintain, and operate our platform and supporting systems. These may include cloud hosting, database, analytics, email, diagnostics, content-delivery, and AI processing services. Each provider is contractually required to use your data only for the purpose of providing their services to us and to maintain privacy and security protections at least as strong as those described in this Privacy Policy and required by Apple’s guidelines.

When AI services such as OpenAI are used, inputs are processed only to generate responses and are not used by those providers to train their models or for any purpose other than delivering the requested output.

Corporate Affiliates

We may share information with our parent company, subsidiaries, or related entities that assist in operating the Service, subject to the same privacy protections.

Legal or Regulatory Requirements

We may disclose information when required by law, court order, or government request, or when necessary to protect our rights, property, users, or others.

Equal Protection Commitment: All service providers, affiliates, or other entities with whom we share user data are required to provide the same or greater level of protection of that data as described in this Privacy Policy and as required by Apple’s App Store guidelines.

Representative vendors: Vercel/DigitalOcean (hosting/DB), SendGrid (email), Sentry (diagnostics), Cloudflare (CDN/security), OpenAI (AI processing), and others listed upon request at .

Data Retention & Deletion

We keep personal data only as long as necessary for the purposes above or as required by law. Typical account and workout data is retained while your account is active and for a standard window after inactivity or deletion, unless a longer period is legally required.

You can request access, correction, export, or deletion of your data in the app (where available) or by emailing . If processing is based on consent, you may withdraw consent at any time in settings or via that email.

Security

We implement safeguards appropriate to the sensitivity of your data, including encryption in transit and at rest, role-based access, least-privilege controls, and vendor due diligence. No method is 100% secure; we continuously improve our protections.

Your Rights & Choices

• Access, correction, deletion, restriction, portability (where applicable)
• Object and withdraw consent (where applicable)
• Manage notifications and unsubscribe links
• EU/EEA/UK: GDPR rights; you may contact your supervisory authority
• California: We do not “sell” personal information; CCPA/CPRA rights apply

Cookies, SDKs & Tracking

We use cookies and SDKs only for essential functionality such as authentication, preferences, and diagnostics. If we introduce marketing or analytics tracking, we will update this Policy and request consent where required.

Children’s Privacy

The Service is intended for users aged 13 and older. If you believe a child under 13 has provided personal data, contact us so we can delete it.

International Transfers

Your data may be processed in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses).

Changes to This Policy

We may update this Policy from time to time. We will revise the “Last Updated” date and provide in-app or email notice for material changes. Continued use indicates acceptance.