Privacy Policy
Last updated: October 27, 2026
This Privacy Policy covers the Therabot Health Inc. website and Shopify-powered online store, customer communications, mobile app and Therabot device. It provides one general privacy notice for those services. Our separate Consumer Health Data Privacy Policy at https://therabot.com/pages/consumer-health-data-privacy explains additional rights and disclosures relating to consumer health data.
Therabot is a leg massage robot. A belt tightens around your leg and a motor-driven roller travels along it. The device measures your leg and records the massage so that it can operate and apply pressure in the intended way.
Website, online store and communications
When you browse or buy from therabot.com, Therabot and its ecommerce provider Shopify may collect your name, email address, telephone number, delivery and billing details, orders, purchases, returns, payment status, account preferences, messages to support, browser and device details, IP address, cookie identifiers and website activity. Payment details are processed by the payment services offered at checkout. This information comes from you, your browser or device, Shopify and other service providers involved in fulfilment and customer support. We may receive relevant information from advertising or other partners where permitted by law.
We use store information to operate the website, process payment, fulfil and deliver purchases, handle cancellations, refunds and warranty claims, provide support, prevent fraud, maintain business and tax records, communicate order and shipping updates, and send marketing where you have made the applicable choice. Cookies and similar technologies may support store functionality, analytics and advertising. Where required, we provide notice, consent and opt-out controls for these activities.
We share store information as reasonably needed with Shopify, payment processors, delivery and fulfilment partners, customer support and messaging providers, and marketing or advertising service providers. Shopify and some enabled advertising services may use store activity, including activity across different websites or merchants, for personalised advertising. Depending on applicable law this may constitute a sale, sharing or targeted advertising. You may exercise applicable opt-out rights at https://therabot.com/pages/data-sharing-opt-out or contact support@therabot.com. This advertising activity is limited to website/store information; we do not use Therabot app scans, massage histories or AI conversations for targeted advertising.
If you give us your mobile number, we may send order and delivery messages where permitted by law. Recurring automated marketing texts are sent only where you separately opt in; providing a number for checkout is not marketing consent. Marketing consent is not a condition of purchase. Message frequency varies; message and data rates may apply. Reply STOP to opt out or HELP for assistance, or contact support@therabot.com or +1 (302) 365-0773. We and our messaging providers process your mobile number, consent records and message history to deliver and administer these services.
We retain order, payment confirmation, tax and support records for as long as reasonably needed to complete purchases, comply with law, resolve disputes and administer product obligations. Store accounts and app accounts may be administered separately, so deleting your app account does not automatically erase purchase records that must be retained for these purposes. You may request access, correction, deletion or applicable privacy opt-outs by contacting support@therabot.com. Our store providers may also offer their own privacy choices.
App and device information we collect
Your account
You can sign in with your phone number, Google account or Apple ID. Depending on how you sign in, we collect your name, email address, phone number and profile photo. We record the terms and consent versions you accept, when you accepted them and a fingerprint of the text shown.
Profiles
The app supports up to ten profiles per account. For each profile we store a name, an optional photo, sex, birth year, height and weight. Each adult user should use their own account and accept the applicable terms and consents.
Leg scans
Before the first massage, the robot scans the leg using light and firmer pressure. We store raw scan readings and measurements derived from them, including leg diameter along its length, tissue compression under pressure and the positions of the ankle and knee.
Massage sessions
During a massage, the app records device readings such as roller position, actual and target force, measured leg diameter, speed, belt tension, motor current and battery state. It also stores when sessions occur, their duration, reason for ending, programme and ratings. Messages used to adjust a massage may also be associated with the session.
Device fault reports
If the firmware crashes, the app may upload a crash report, the device serial number and firmware version. We use these records to diagnose and resolve faults.
The AI massage assistant
The AI massage assistant is optional. If you enable it, each request sends the current conversation and relevant non-name profile, leg scan and massage information through OpenRouter to an eligible AI model-hosting provider. Providers may vary between requests. We do not include the profile-name field, your email address or your Therabot account identifier in the information sent to the provider. Requests may include sex, age, height and weight, leg measurements, the massage programme and live force and roller position. Information that you type or say in a message could still identify you if you include identifying details yourself.
When you enable the AI massage assistant, we retain your messages, the assistant’s replies and the massage information made available to it in your account so it can remember your preferences and personalise later sessions. History is retained while your account exists unless you request earlier deletion. Switching the AI assistant off stops new AI requests but does not by itself delete existing history. You can request deletion of that history without deleting your account.
Speech
Speech recognition runs on your phone. Therabot does not receive or store your voice recording for the AI assistant; only the transcribed words are sent and processed as described above.
What we do not collect or do
The Therabot app does not use Google Analytics, Firebase Analytics, the Facebook SDK or advertising SDKs. We do not use app/device health information, leg scans, massage sessions or AI conversations for cross-context behavioural advertising, and do not track you across other apps or websites through the app. Website and store advertising practices are described above. Some older Android phones require location permission to scan for Bluetooth devices; we use that permission for Bluetooth discovery, not to locate you.
Why we collect and use information
- Operate the device, calculate appropriate massage measurements and apply the selected programme.
- Keep your scans, settings and session history available between sessions.
- Provide the optional AI assistant, including account-linked memory and personalisation.
- Diagnose device faults and provide support.
- With your separate optional permission, review early session patterns (such as repeated very short massages) to identify possible setup problems and contact you with specific help. You may withdraw this permission at any time by emailing support@therabot.com.
- Improve device performance using information where permitted by law and any additional consent required for that purpose.
- Meet legal obligations, prevent misuse and protect safety.
The device and AI features use information to select or adjust massage programmes. We do not use it to make decisions producing legal or similarly significant effects concerning you.
Who handles information
| Provider | Data | Purpose |
|---|---|---|
| Google (Firebase / Google Cloud) | Account details, profiles, scans, sessions, device fault records, saved programmes and AI histories | Database, authentication, file storage and server hosting in the United States |
| OpenRouter and model-hosting provider | AI message and transcript, non-name profile details, scan details, massage programme and live device information | Route to eligible zero-data-retention / no-training AI inference endpoints and generate replies |
| Apple / Google | Account details used to authenticate you | Only if you choose their sign-in method |
AI requests pass through OpenRouter from Therabot’s server. We restrict routing to model endpoints with a zero-data-retention policy that does not permit retention of request or response content after inference or use of that content for model training. If no eligible endpoint is available, the request is not forwarded to another model provider and the AI request fails. OpenRouter may retain operational request metadata, such as model, usage and timing, but its prompt/response logging must remain disabled. Therabot continues to retain AI history in your own account as described above; provider-side zero retention does not delete that account history. We do not sell AI conversations or use them for advertising. Any separate use of identifiable conversations for research, product improvement or model training will be assessed and consent obtained where required.
We may also disclose information where required by law or reasonably necessary to protect the safety and rights of users and others.
Children
Therabot is for adults aged 18 or older. We do not knowingly collect information from children. If you believe a child has used the app, contact us so we can investigate and address the account or information.
How long we keep it
We generally retain account details, profiles, scans and sessions while your app account exists. Fault reports are retained for as long as reasonably needed for diagnostics and legal obligations. AI conversation history is retained while your app account exists to support the assistant’s memory and personalisation, unless you request it to be deleted sooner.
When you delete your app account or submit a verified deletion request for app information, we delete applicable active records without undue delay and within the shorter deadline required by law, and in any event no later than 90 days. Backup copies are deleted or isolated and removed in accordance with applicable law and the backup lifecycle. Limited information may be retained where required or permitted by law.
Deleting your app account and data
You may delete your account in the app at Account → Delete account (you may be asked to sign in again). You can also use our account-deletion request form or email support@therabot.com. An app account deletion covers account details, profiles, photos, scans, sessions, saved programmes, AI conversation histories, and device fault reports, subject to lawful retention exceptions.
Deleting your account removes access to app-based scanning, loading or changing a massage programme. If Use without phone was enabled, the device may still run its last locally stored programme without the app or internet, configured for the previously scanned leg. It cannot scan another leg or change that programme without the app. Keep the device inaccessible to children and do not use a programme on a different person or leg.
Your rights
Depending on applicable law, you may have rights to confirm whether we process information about you, access or obtain a copy, correct inaccurate information, withdraw consent and request deletion. We make request routes available to users of our store, app and device. To exercise a right or appeal a refusal where available, email support@therabot.com. Our Consumer Health Data Privacy Policy at https://therabot.com/pages/consumer-health-data-privacy provides additional information about health data rights and recipients.
We do not sell or use app/device health data for cross-context behavioural advertising. Website/store information may be used in advertising programmes described above, subject to opt-out rights at https://therabot.com/pages/data-sharing-opt-out. We do not discriminate against you for exercising applicable privacy rights.
Security
We use encryption in transit and store app information on Google Cloud infrastructure. Access is limited to you and authorized Therabot personnel who need it to respond to support requests or investigate device problems. With your separate permission, a small number of authorized support staff may also review limited session information to identify setup difficulties and offer assistance. We limit access to what is needed and do not use app health information for advertising. No security measure provides an absolute guarantee. Please keep your account credentials secure.
Changes
We update the date above when this policy changes. Where a material change requires notice or renewed consent, we will provide it before implementing the relevant processing.
Contact
Therabot Health Inc.
251 Little Falls Drive, Wilmington, Delaware 19808, United States
support@therabot.com
