Privacy Policy

Information We Collect

Information You Provide

• Account Information: Your name, email address, and practice name (for providers) when you create an account.
• Movement Content: Videos, descriptions, and exercise parameters (hold times, reps, modifications) that providers upload to the Service.
• Program Data: Exercise prescriptions including the specific parameters assigned to each patient.
• Communications: Messages, feedback, or support requests you send to us.

Information Collected Automatically

• Usage Data: How you interact with the Service, including pages viewed, features used, and session duration.
• Device Information: Browser type, operating system, and IP address.
• Cookies: We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

How We Use Your Information

We use your information to:

• Provide and operate the Service.
• Deliver exercise programs from providers to their patients.
• Improve the Service based on usage patterns and feedback.
• Communicate with you about your account, updates, and support.
• Ensure security and prevent unauthorized access.
• Comply with legal obligations.

How We Share Your Information

• Provider–Patient Relationship: Exercise programs and movement videos are shared between the prescribing provider and their patients. Patients can only see programs prescribed to them.
• Group Practices: Within a group practice, movement library content is shared among all practitioners in that practice.
• Service Providers: We use trusted third-party services for hosting, email delivery, and analytics. These providers are contractually bound to protect your data.
• Legal Requirements: We may disclose information if required by law, court order, or government request.

We do not sell your personal information to third parties.

Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest. Movement videos and exercise program data are stored securely and accessible only to authorized users. However, no security measure is perfect, and we cannot guarantee absolute security.

Your Rights

• Access: You can view your account information and exercise programs through the Service.
• Correction: You can update your account information at any time.
• Deletion: You can request deletion of your account and associated data. Providers may request export of their movement library before deletion.
• Opt-Out: You can unsubscribe from non-essential communications at any time.

Data Retention

We retain your data as long as your account is active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your data within 30 days, except as required by law. Movement videos may be retained in group practice libraries even after the uploading practitioner's account is deleted.

Children's Privacy

Patient accounts may be created by individuals 13 years or older. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.

International Data Transfers

Your information may be processed in countries other than your own. By using the Service, you consent to such transfers subject to applicable privacy laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the Service or by email. Continued use after updates indicates acceptance.

Contact

If you have questions about this Privacy Policy, contact us at support@oncue.health