Privacy Policy

A patient does not create an account and does not provide any personal information to use the Platform. When joining a session, a patient may optionally type a first name, which is shown to their therapist only for the duration of that live connection and is never written to our database. We do not collect a patient's email, phone number, date of birth, clinical notes, or any other identifying or health information, and we have no way to link a session to a specific patient afterward.

We do not record sessions. No video, audio, or transcript of a session is captured, stored, or retained by the Platform, in any mode, ever.

How the call itself reaches your therapist depends on the mode they choose. In the link and screen-share modes, the Platform carries no video or audio at all: any call happens entirely outside it, for example over Zoom, and is not something we have access to.

In the built-in video mode, the Platform does carry the call. The patient's and therapist's camera and microphone are relayed live through our video sub-processor, Daily, purely so the two can see and hear each other in real time. Nothing is written down: no recording is made, no participant name is sent to that provider, and the room used for a session is destroyed when the session ends. Access to a room requires a short-lived credential issued by us for that one session.

A session itself only exists in our systems while it is open: the moment a therapist ends it, the session record, including its stimulus settings for that session, is deleted. We keep no history of past sessions.

When you create a therapist account, we collect and store:

• Your name, email address, phone number, and country, which you provide when you sign up or update your account.
• Your stimulus preferences: the pattern, shape, color, speed, sound and similar settings you use, including your saved presets and, if you opt in, your most recently used settings (so a new session can start from where you left off). These describe visual and audio settings only, never anything about a patient.
• A simple usage count of when you start a session (just your account and a timestamp, nothing about what happened in the session), which we use internally to understand how the product is used. You cannot see or edit this count yourself.
• If you use in-app video, a record of each video call: when it started and how long you and your patient were each connected. This comes from our video provider, Daily, and contains no names and nothing about what was said or shown. We use it internally to understand usage and, once paid plans exist, for billing.
• The content of any support request or bug report you send us, including any optional technical details you choose to include.

We use only the cookies needed to keep you signed in to your account, set by our authentication provider, Supabase. Your language preference is stored in your browser's local storage, not in a cookie, and is not sent to our servers. We do not use advertising cookies, and we do not use any third-party analytics or tracking scripts on the Platform.

• To operate your account and your session room, and to keep your patient's connection synced with yours during a session.
• To send you account-related emails: confirming your address, resetting your password, confirming an email change, and letting you know when your password has changed.
• To respond to a support request or bug report you send us.
• To understand, in aggregate, how often the Platform is used, so we can improve it.

We do not sell personal information, and we do not share it with advertisers. We use a small number of service providers ("sub-processors") to run the Platform, each of which processes data on our behalf and under its own privacy terms:

• Supabase, for our database, authentication, and the real-time connection between a therapist and patient during a session.
• Vercel, which hosts the Platform.
• Resend, which delivers the transactional emails described above (account emails and support notifications).
• Daily, which relays the live video and audio of sessions that use the Platform's built-in video mode. This applies only to sessions run in that mode, only while the session is live, and never involves recording or storage.

We may also disclose information where required by law, to protect the rights, property, or safety of the Company, our users, or others, or in connection with a merger, acquisition, or sale of assets, in which case this Policy would continue to apply to your information under the new owner.

• Session data: deleted the instant the session ends. We keep no session history.
• Account and profile data: kept while your account is active, and deleted or anonymized within a reasonable period after you close your account or request deletion.
• Support requests: kept for as long as reasonably needed to handle your request and any follow-up.
• Usage counts: kept in aggregate, without being tied to any patient, for as long as needed for internal product metrics.

Our team operates from Israel, and our service providers (Supabase, Vercel, Resend, and Daily) may process and route data in other countries. By using the Platform, you understand that your account information may be processed outside your own country.

We use industry-standard measures, including encrypted connections and access controls, to protect the information we hold. No online service can guarantee complete security, and we recommend using a strong, unique password for your account.

Depending on where you are located, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Since a therapist's account is the only personal data we hold, most of these requests are straightforward for us to fulfil quickly. To exercise any of these rights, contact us using the details below.

The Platform is intended for use by licensed adult professionals, not by children. We do not knowingly collect personal information from anyone under 18 through the Platform.

We may update this Policy from time to time. If we make a substantial change, we will let you know, for example by emailing the address on your account or by posting a notice on the Platform.

Questions about this Privacy Policy, or requests to exercise your rights, can be sent to support@imotionwellness.com. This Policy is governed by the same terms described in our Terms of Use, including its governing law and jurisdiction.