Privacy Policy

HepBuddy ("HepBuddy", "we", "us") helps physical-therapy patients complete their home-exercise program and keeps a patient's chosen loved one in the loop with progress updates. This policy explains what information we collect, how we use it, and the choices you have. HepBuddy is operated by Harrison Shu (sole proprietor), Kirkland, WA, United States.

Information we collect

• Contact details: the patient's first name and mobile phone number, provided at the physical-therapy visit with the patient's consent; and the first name and mobile phone number of a support contact, which the support contact enters and consents to themselves on a HepBuddy web page. HepBuddy does not collect a support contact's number from anyone else.
• Program activity: which exercise sessions a patient completes, and the difficulty (RPE) and pain ratings a patient enters after a session.
• Message records: the text and delivery status of SMS messages we send and receive, for support and compliance.
• Website usage: for visitors to our public marketing pages only, how those pages are used. See Website analytics below.

How we use information

• Send patients reminders and links to complete their home-exercise sessions.
• Send the nominated loved one progress updates so they can encourage the patient.
• Share progress and adherence with the patient's physical-therapy clinic.
• Operate, support, and improve the service.

How we share information

We share information only with:

• The patient's physical-therapy clinic, which uses HepBuddy to support that patient's care.
• The patient's support contact, who has themselves opted in to receive progress updates.
• Service providers that operate the product on our behalf (for example, our SMS carrier and cloud hosting). They may process information only to provide their service to us, not for their own purposes.

We may also disclose information where required by law.

Website analytics

This public website uses PostHog to understand how visitors find and use these pages, so we can improve them. PostHog acts as our service provider and processes this information only on our behalf.

For visitors to this website we collect pages viewed, clicks and scrolling on the page, approximate location derived from IP address, browser and device type, the referring site, and any campaign tags in the link you arrived from. We may also record a playback of the visit to see where pages are confusing. This is set through cookies and similar browser storage.

This applies to our public marketing pages only. We do not run website analytics or session recording inside the patient exercise app or the clinic dashboard, and this analytics data is never combined with a patient's health or exercise information.

If your browser sends a Global Privacy Control or Do Not Track signal, or you use an ad or tracker blocker, we do not receive this data. You can also clear or block cookies for this site in your browser settings.

Your choices

You can opt out of text messages at any time by replying STOP. You can opt out of website analytics by blocking cookies for this site or by using a tracker-blocking extension. To request access to or deletion of your information, email us at the address below.

Data retention & security

We keep information for as long as needed to provide the service and meet legal obligations, then delete or de-identify it. We use reasonable administrative and technical safeguards to protect it.

Children

HepBuddy is not directed to children under 13, and we do not knowingly collect their information.

Changes

We may update this policy and will revise the date above when we do.

Contact

Questions about this policy? Email harrisonshu@hepbuddy.com.