Consumer Health Data Privacy Policy

Effective date: October 27, 2026

Scope

This policy describes how Therabot Health Inc. (“Therabot”, “we”) collects, uses and shares information that may qualify as consumer health data under applicable US state laws when you use the Therabot mobile app or device. It supplements the general Privacy Policy for our website, online store, app and device at https://therabot.com/policies/privacy-policy.

Categories of consumer health data

Profile details: sex, birth year, height, weight and, if entered, information in a profile name or description.
Leg scans: raw and derived leg shape, diameter, tissue compression, and ankle and knee positions.
Massage information: roller position, pressure or force, speed, belt tension, session timing, programme selection, ratings and device readings relevant to body measurements.
AI assistant information, when enabled: what you type or say about your body, discomfort, preferences, pain, soreness or injuries, together with assistant replies, relevant profile details and session information.

Sources

We collect health information directly from you when you enter profile details or use the optional AI massage assistant, and automatically from the device and app sensors when you scan a leg or run a massage. We may derive measurements from the raw sensor information.

Purposes and processing

We use the information to scan and measure your leg; size, operate, select and adjust massage programmes; retain your settings and session history; diagnose faults; and, if you enable the AI assistant, remember your preferences and past conversations to personalise later sessions. With your separate optional permission, our support team may review early session durations and reasons for ending to identify possible setup or belt-fit problems and contact you with specific help. You can withdraw that permission at any time by emailing support@therabot.com, without affecting ordinary use of Therabot. Any separate secondary research, product-improvement analysis of identifiable health information or AI model training will be subject to applicable restrictions and any additional consent required by law. We do not sell health information or use it for advertising.

Categories of health data shared and recipients

Google (Firebase / Google Cloud) stores and processes profile information, scans, massage sessions and AI conversation history for Therabot in the United States. If you enable the AI assistant, relevant AI conversation content, non-name profile information, leg measurements and current massage information are transmitted through OpenRouter to a selected eligible model-hosting endpoint. The profile-name field, email address and Therabot account identifier are not included in the AI request, although you may voluntarily include identifying details in what you type or say. AI routing is restricted to endpoints that do not retain request/response content after inference or use it for model training. If no compliant endpoint is available, the AI request fails rather than being sent to a different provider. OpenRouter may retain operational metadata; Therabot retains your history in your account as described in this policy. We do not intentionally share consumer health data with advertisers or data brokers. We may disclose information as legally required. Authorized Therabot support personnel may also access session information as needed to respond to your requests or investigate faults; proactive review for setup assistance is limited to customers who have separately opted in.

Consent and choice

The app requests affirmative consent for collecting and using health information when required by applicable law. Proactive onboarding assistance has a separate, optional, unchecked consent choice. If you choose it, authorized support staff may review early session durations and ending reasons to offer setup help; you can withdraw that permission at any time by emailing support@therabot.com. Declining does not affect ordinary use of Therabot. The optional AI assistant has a separate affirmative choice before data is sent to OpenRouter and the model provider. When enabled, retaining conversation history while the account is active is part of the memory and personalisation feature, not an independently selected analytics service. Turning AI data sharing off stops new AI requests; previously retained history can be deleted upon request.

Retention and deletion

We generally retain consumer health data needed for an active account while that account remains open. AI conversation history is retained for the life of the account unless you request it be deleted sooner. Verified deletion requests and account deletion are acted on without undue delay and within the deadline required by applicable law, no later than 90 days for active records. If applicable law requires faster action, including for some consumer health data requests, that shorter period controls. Backup handling and any lawful retention exceptions are subject to applicable law.

Your rights and how to exercise them

Depending on where you live and the laws applicable to Therabot, you may request confirmation of whether we collect, use or share your consumer health data; access to it or a copy; a list of third parties and affiliates with whom it has been shared and available contact mechanisms; correction; withdrawal of consent; or deletion. You can email support@therabot.com or use Account → Delete account for account deletion. You may ask us to delete AI conversation history without deleting your account. We will verify and respond to your request in the time required by applicable law. If we decline a request, you may appeal by replying to our decision and, where permitted, contact your state Attorney General or privacy regulator.

Geofencing and cross-site collection

Therabot does not operate geofences around health care facilities to identify or track consumers. The Therabot app does not use advertising SDKs or allow third parties to collect consumer health information across other apps and websites for cross-site advertising or profiling.

Changes to this policy

We will update the effective date above and notify affected users of material changes as required by law. If a new collection, use or disclosure requires affirmative consent, we will request it before that processing begins.

Contact

Therabot Health Inc.
251 Little Falls Drive, Wilmington, Delaware 19808, United States
support@therabot.com