Summary in one paragraph
HandTherapy.app is local-first. Your symptom logs and exercise sessions live on your device unless you explicitly opt in to cloud features. We collect the minimum needed to run a waitlist, ship a useful product, and keep you safe. We will never sell your health information. For how we treat symptom and session data compared to general account data, see the health data notice.
What we collect today
- Waitlist form: email, optional condition context, affected hand, therapist status, and free-text wishes for hand recovery.
- Server logs: standard request metadata (IP, user agent, timestamp) for security and abuse prevention. Retained briefly, not joined to your waitlist record for marketing.
- Local app state: stored in your browser via
localStorage/IndexedDB; never transmitted unless you opt in.
How we use it
- Send launch updates and early access information.
- Understand which conditions and recovery situations to prioritize.
- Improve the product roadmap based on patient-described needs.
- Keep the service secure and prevent abuse.
Legal bases (GDPR/UK GDPR)
- Consent — for marketing emails and any future cloud sync of health data.
- Legitimate interests — for security logs and product improvement that does not rely on health data.
- Legal obligation — for tax, safety reports, and law-enforcement requests where required.
Your rights
- Access — ask what we hold about you.
- Correct — fix anything wrong.
- Delete — remove your waitlist record at any time.
- Export — get a copy of your local app data using in-app export.
- Object — opt out of marketing or specific processing.
- Lodge a complaint with your local data-protection authority (e.g. ICO in the UK).
Sharing
We do not sell personal information. We share data only with vetted processors that help us operate the service (email delivery, hosting), under contracts that limit their use of your data. A list of subprocessors will be published before public launch.
What we will never do
- Sell your health information.
- Use your data to target you with unrelated advertising.
- Share waitlist responses publicly without explicit consent.
- Claim your data validates clinical outcomes.
- Embed third-party trackers that follow you across the web.
US users (CCPA/CPRA)
California residents have the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as defined by these laws. To exercise rights, contact us via the channel published in the app.
HIPAA
HandTherapy.app is a consumer wellness tool, not a covered entity, and is not intended for use as a HIPAA-regulated service. If your clinician asks you to share data, that sharing happens at your initiation, on your device.
Children
HandTherapy.app is not directed at children under 13. Adults responsible for a child's recovery should consult a clinician for pediatric hand therapy guidance.
Changes to this policy
Material changes will be reflected in the "Last updated" date and announced in the app. Continued use after the effective date constitutes acceptance.
Contact
For privacy questions related to the waitlist, please reach us through the contact information published on the app's official channels at launch — see our contact page.