← Back to Home

Privacy Policy & Health Data Protection

Effective Date: October 2026 | Last Updated: October 2026

FizioFlex ("we", "our", or "us") provides a practice management, documentation, and exercise logging platform designed for licensed physiotherapists and their patients. We are committed to protecting personal privacy and safeguarding sensitive health information.

1. Information We Collect

  • Practitioner Account Information: Name, professional qualifications, council registration numbers, contact details, clinic locations, and billing preferences.
  • Patient Care & Clinical Documentation: Demographic details, clinical assessments, evaluation charts, pain scores, session logs, and prescribed home exercise plans recorded by practitioners.
  • Device & Notification Data: Device push tokens (FCM/APNs) to deliver appointment reminders, exercise schedules, and administrative notifications.
  • Location Data: When explicitly authorized by the user, foreground location (approximate or precise GPS) is collected solely to assist patients in locating nearby registered physiotherapy clinics. Location data is never tracked in the background or shared with third-party advertisers.

2. How We Use Collected Data

  • To provide, maintain, and securely host clinical documentation and patient care portals.
  • To facilitate direct practitioner-patient appointment scheduling, exercise updates, and digital invoices.
  • To comply with regulatory standards and healthcare documentation retention requirements.

3. Data Confidentiality & Protection

All clinical data and patient health records are encrypted in transit using Transport Layer Security (TLS 1.3) and encrypted at rest in high-security, ISO 27001 / SOC 2 compliant database facilities with granular Row-Level Security (RLS). We do not sell, rent, or monetize personal or clinical data under any circumstances.

4. Account & Data Deletion (Google Play Compliance)

Users have the right to request the permanent deletion of their account and all associated data. You can initiate account deletion directly within the mobile application under Settings → Delete Account & Data, or by submitting an online deletion request through our public portal at fizioflex.com/delete-account. Deletion requests are processed in accordance with local healthcare record retention regulations.

5. Contact Us

If you have any questions regarding this Privacy Policy or our clinical data protection practices, please contact our Data Protection Officer at support@thefizioapp.com.