Privacy Policy
Last updated: September 11, 2026
This policy covers the Therabot mobile app and the Therabot device. It is written to describe what the product actually does. If you only shop on this website and never use the app, the store privacy policy at /policies/privacy-policy is the one that applies to you.
Therabot is a leg massage robot. A belt tightens around your leg and a motor-driven roller travels along it. To do that safely the device measures your leg and records what it did. That is the reason most of the data below exists.
What we collect
Your account
You sign in with your phone number, your Google account, or your Apple ID. Depending on which you choose, we store your name, email address, phone number, and profile photo. We also record that you accepted the liability release — which version, when, and a fingerprint of the exact text you were shown.
Profiles
The app supports up to ten profiles per account, so more than one person in a household can use the same robot. For each profile we store a name, an optional photo, and — because the massage is sized to the body — sex, birth year, height, and weight.
Leg scans
Before the first massage the robot scans the leg. It travels the leg four times, twice at a light pressure and twice at a firmer one. From that we derive the shape of your leg: its diameter along its length in millimetres, how much the tissue compresses under load, and where the ankle and knee are. Both the raw scan data and these derived measurements are stored.
Massage sessions
While a massage runs, the app records a stream from the robot roughly 25 times a second: where the roller is on your leg, how much force is being applied, what force was being aimed for, the measured leg diameter at that point, speed, belt tension, motor current, and battery state. We also store when the session ran, how long it lasted, why it ended, which program was used, and any rating you give it.
If you adjust the massage by speaking or typing to the AI, the words you used are stored alongside that adjustment.
Device fault reports
If the robot's firmware crashes, the app copies the crash dump off the device and uploads it, along with the robot's serial number and firmware version. This is a snapshot of the robot's memory at the moment it failed. We do not inspect it for anything other than fixing the fault.
The AI conversation
The app has an AI feature you can talk or type to during a massage. Be aware that this sends more than your words. Each time you send a message, the following goes to the AI service: the whole conversation so far; the profile's name, sex, age, height, and weight; the leg measurements from your scan; the massage program being run; and the live state of the massage including the force currently being applied and the roller's position on your leg.
Conversations stay in the app while you use it. If you tap Save at the end of a session, the transcript is stored with the saved program. If you choose to make a saved program public, its conversation is part of what you publish — do not put anything private in a program you intend to share.
Speech
Your voice never leaves your phone. Speech recognition runs on the device itself; no audio is recorded, stored, or uploaded by us. What the phone transcribes is then treated exactly like text you typed — so the resulting words do travel to the AI service and can be stored as described above.
What we do not collect
We do not use analytics or advertising SDKs. There is no Google Analytics, no Firebase Analytics, no Facebook SDK, and no third-party crash-reporting service in the app. We do not track you across other apps or websites, and we do not sell or share personal information for advertising.
On Android, older phones require a location permission before an app is allowed to scan for Bluetooth devices. We request it only for that reason and we do not use it to determine where you are.
Why we collect it
- To run the massage safely. Leg measurements and body details are what let the device apply the right force in the right place.
- To let you pick up where you left off. Scans and past sessions are what make the next massage work without re-measuring.
- To make the AI feature work. It cannot adjust a massage it cannot see.
- To fix faults. Crash dumps and session records are how we find out what went wrong on a real device.
- To improve the product. Session and scan data tells us how the robot performs across different bodies.
We do not use your data to make decisions about you, and we do not use it for advertising.
Who else handles it
| Who | What they get | Why |
|---|---|---|
| Google (Firebase) | Effectively all of the above — account, profiles, scans, sessions, fault reports, saved conversations | Firebase is our database, file storage, sign-in, and server hosting. Data is held in the United States. |
| OpenRouter | Only what is described under "The AI conversation" above | OpenRouter routes our AI requests to the model that answers them. |
| DeepSeek | Only what is described under "The AI conversation" above | DeepSeek provides the model that generates the AI replies. Routed through OpenRouter; we do not hold a DeepSeek account. |
| Apple / Google | Your email and name, at sign-in only | Only if you choose Sign in with Apple or Sign in with Google. |
Your AI messages are sent to OpenRouter and DeepSeek from our server, not from your phone directly, and they are not sent with your name, email, or account identifier attached. They are sent with the profile's first name and body details, because the AI needs those to reason about the massage. We instruct our providers not to train on this data. We cannot make that promise on their behalf; their own policies are at openrouter.ai/privacy and DeepSeek's privacy policy.
We may also disclose information if the law requires it, or to protect someone's safety.
Children
Therabot is for adults 18 and over. We do not knowingly collect information from children. If you believe a child has used the app, write to us and we will delete the account.
How long we keep it
Your account data, profiles, scans and sessions are kept while your account exists, so that the app keeps working the way you expect. Fault reports are kept while they are useful for diagnosing that fault. When you delete your account, see below.
Deleting your account and your data
You can delete your account from inside the app: Account → Delete account. You will be asked to sign in again first, to prove it is you.
Deleting the account removes your data from our servers — account, profiles, photos, scans, sessions, fault reports — and wipes the copies held on your phone. One exception: if you published a program publicly and someone else has saved it, that program is stripped of any link to you rather than deleted, so their copy keeps working.
If you would rather not do it in the app, email support@therabot.com and we will do it for you.
Your rights
Depending on where you live — California's CCPA/CPRA, or the GDPR in the UK and EU — you may have the right to know what we hold about you, to get a copy of it, to correct it, to delete it, and to withdraw consent. We extend these rights to everyone who uses Therabot, wherever you are. To exercise any of them, email support@therabot.com.
We do not sell personal information and we do not share it for cross-context behavioural advertising. We will not treat you differently for exercising any of these rights.
Security
Data in transit is encrypted. Stored data sits in Google Cloud infrastructure with access restricted to your own account. Your leg scans, sessions, and profile photos are readable only by you.
Changes
If we change this policy we will update the date at the top. If the change is significant, we will tell you in the app.
Contact
Therabot Health Inc.
support@therabot.com
Support hours: Monday–Friday, 8am–5pm Pacific