Privacy Policy

Effective date: February 14, 2026

Kinesia ("we", "our", "us") is a mobile application designed for physiotherapists to create, manage, and share exercise programs with their patients. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

We collect the following types of information:

• Account information: Email address and password when you create a physiotherapist account.
• Patient information: Patient names and email addresses, entered by the physiotherapist when creating exercise programs.
• Exercise data: Exercise names, notes, and ordering within programs.
• Exercise videos: Videos recorded through the app using your device's camera and microphone. These videos demonstrate exercises for patients.

2. How We Use Your Information

We use the collected information solely to provide and improve the Kinesia service:

• To create and manage your physiotherapist account.
• To allow you to create exercise programs and share them with patients via email.
• To store and deliver exercise videos so patients can view their assigned programs.

3. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Database: Account, patient, and exercise data is stored in a PostgreSQL database hosted by Supabase, protected by row-level security policies that ensure physiotherapists can only access their own data.
• Video storage: Exercise videos are transcoded and stored in Cloudflare R2 object storage.
• Encryption: All data is transmitted over HTTPS/TLS. Passwords are hashed and never stored in plain text.

4. Third-Party Services

We use the following third-party services to operate Kinesia:

• Supabase — Database hosting and user authentication.
• Cloudflare — Video storage (R2) and content delivery.
• Expo / EAS — App building and distribution.

These services have their own privacy policies governing how they handle data.

5. Data Retention

We retain your data for as long as your account is active. If you wish to delete your account and all associated data (including patient records and exercise videos), you may request deletion by contacting us at the email address below.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete data.
• Delete your account and all associated data.

To exercise any of these rights, please contact us using the details below.

7. Children's Privacy

Kinesia is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated effective date. We encourage you to review this page periodically.

9. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact us at:

yasinkkhan@gmail.com