What we hold, where it sits, and who is allowed to see it

Your name, mobile number, age, sex, home address and locality. The condition you were referred for, the note your doctor added, and the care plan built from it.

Then, session by session: the date, who visited, which parts of the plan were completed, your pain before and after, the movement measurement for your condition, the physiotherapist’s notes, and anything they flagged. Plus the record of your consent — which of the four you agreed to, and when.

In India. Our database runs in the Mumbai region, and patient health information does not leave the country.

Our own team, so that cases can be scheduled and problems can be fixed. The physiotherapist assigned to you, who sees what they need for the visit ahead. And the doctor who referred you — but only if you agreed to that specific consent.

If you did not agree to it, your doctor sees that sessions are happening and nothing else. No measurements, no notes, no address. That is enforced by the system, not by someone remembering.

We do not sell information about you, and we do not share it with advertisers, insurers or employers.

Your tracking page is protected by the link itself — a long random address that only your case has. That is why it should be treated like a bank message: share it with the family members who need it, and nobody else.

The page deliberately carries as little as it can: your first name, your physiotherapist’s name and qualification, your doctor’s name, your sessions and your measurements. No identity numbers, no phone numbers of the people looking after you, nothing that would matter if the link were forwarded on. Every time it is opened, that access is recorded. The link stops working ninety days after your case closes.

A physiotherapist can ask the app to draft a session note from what they recorded. The draft is only ever a suggestion — nothing is saved until they have read it and accepted it, and whether they kept it or wrote their own is itself recorded. No decision about your care is made by software.

Any of the four consents can be withdrawn at any time, from the link on your tracking page or by calling us. Withdrawal is recorded with the time it happened and takes effect straight away — if you withdraw your doctor’s visibility, the next evening’s summary no longer carries your clinical detail.

You can also ask us what we hold about you, ask for a correction, or ask us to close your case entirely.

Patient names, numbers, addresses and clinical details are kept out of our application logs and error reports. Someone debugging a problem at midnight should not be reading about your knee.