Beta privacy notice - version 2026-06-27-beta
Privacy Notice
Last updated: 27 June 2026. This notice explains how Tech2Physio handles personal data for the clinic web dashboard and the T2P Rehab patient app. Health and rehabilitation data is treated as sensitive and private.
Who uses the platform
Tech2Physio is used by physiotherapists and clinics to manage patients, appointments, assessments, exercise plans, messages, billing records, and rehab progress. Patients use T2P Rehab to view plans, log exercise completion, track pain, request appointments, and message their physiotherapist.
Data we collect
We may process names, email addresses, phone numbers, clinic details, login details, appointment data, diagnoses or conditions entered by the physio, assessments, exercise prescriptions, pain scores, exercise logs, messages, payment/subscription data, device or browser metadata, and support or grievance requests.
Why we process data
We process data to create and secure accounts, provide clinic and patient workflows, deliver rehab plans, support appointments and communication, process subscription payments, respond to support or legal requests, investigate security incidents, and improve reliability of the service.
AI planner use
The AI exercise planner may use information entered by the physio, such as condition, goals, age, and clinical notes, to draft a rehabilitation plan. Physios must review and approve generated plans before sending them to patients. Do not enter information that is not needed for the plan.
Sharing and processors
We use service providers to run the product, including hosting, database/authentication, email, payments, push notifications, analytics/security tooling where enabled, and AI generation. These providers should only process data for Tech2Physio service purposes.
Security
We use account authentication, row-level access controls, secure mobile token storage, security headers, rate limiting, audit logging, and least-privilege service keys where implemented. No system is risk-free, so suspected security issues should be reported via the grievance page.
Retention
During beta, records are retained while an account or clinic relationship is active, and longer where needed for legal, billing, clinical continuity, security, or dispute reasons. A more detailed retention schedule will be added before public-scale launch.
Your choices and rights
You can request access, correction, export, deletion, withdrawal of consent, or raise a grievance. Some data may need to be retained where required for law, billing, security, or legitimate clinical record purposes. Requests are handled manually during beta.
Contact
For privacy, consent withdrawal, deletion, export, correction, or grievance requests, email privacy@tech2physio.com or use the grievance and data request form.