Privacy Policy

Exercise Studio ("we", "us") lets physical therapists and other clinicians turn their own exercise recordings into instruction videos and share them with patients. This policy explains what we collect, why, and the choices you have.

Who this covers

• Clinicians who create an account ("you").
• Patients who open a program link a clinician has shared with them.
• Visitors to our website.

Exercise Studio is offered to clinicians in the United States.

What we collect from clinicians

• Account details: your email address and password (stored only as a secure hash), or, if you sign in with Google, the name, email address and profile picture link that Google shares. We use these only to run your account; we don't use your profile picture, and we never get access to your Google account itself, such as your Gmail or files.
• Practice details: your name, phone number, practice name, current EMR, practice type, specialities and number of clinical providers.
• Your content: the exercise recordings you upload or record, any face or background photos you add, exercise names, instructions you write or generate, the videos we create from them, and your programs and their plans (days, sets, repetitions and similar).
• Patient links you create: any nickname or label you give a link, its start date and any plan changes you make for that link.
• Usage information: when you sign in and which features you use, so we can keep the service working and improve it.

What we collect from patients

We do not collect any personal information about patients. Patients never create an account or sign in, and we never ask for or store a patient's name, email, phone number, date of birth, address, medical history or photo. Patient pages set no cookies and use no analytics or advertising tools. (Like any website, our hosting and video providers keep standard technical logs, such as IP addresses, for a short time for security; we don't link these to patients.)

A program link is a random code. The only things recorded against it are what helps the clinician follow the program: that the link was opened, which videos were played, which exercises were marked done, and any feedback the patient chooses to give (such as how an exercise felt). This is shown only to the clinician who shared the link, and nothing in it says who the patient is.

Clinicians should not put a patient's full name or other identifying details in a link nickname, and must not upload recordings that show patients.

How we use information

• To run the service: create your videos, store your library and programs, and show patients their exercises.
• To send you service emails, such as confirming your email, resetting your password and telling you when a video is ready.
• To contact you about Exercise Studio using the practice details you gave us. You can ask us to stop at any time.
• To keep the service secure, prevent abuse and fix problems.
• To understand how the website is used, in aggregate, so we can improve it.

We don't sell personal information, and we don't use your recordings to train our own AI models.

Services that process information for us

We use these providers to run Exercise Studio. Each receives only what it needs for its task.

• Supabase: accounts and database.
• Vercel: website hosting.
• Bunny.net: storing and streaming recordings, photos and finished videos.
• Magnific: creating the edited exercise video from your recording and choices.
• OpenAI: drafting instructions from the exercise name and still frames from your selected clip, only when you ask for a draft.
• Resend: sending service emails.
• HubSpot: keeping your practice details so we can support you and stay in touch.
• Google Analytics: measuring use of the clinician website. It is never loaded on patient pages.
• Google: signing you in, if you choose Sign in with Google.

Cookies

We use cookies and similar storage to keep you signed in and remember your settings. Google Analytics sets its own cookies on clinician pages to measure visits. Patient pages use only what is needed to show the program.

How long we keep information

We keep your account and content until you delete them. Deleting a video removes its recording, photos and finished video. Deleting your account removes your account, videos, programs, patient links and their activity. We keep a minimal record of deleted videos (the exercise name, dates and generation cost, with no recordings or contact details) for billing and service statistics. Backups are overwritten on a rolling schedule.

Your choices

• You can view and edit your practice details in Settings.
• You can delete any video, or your whole account, in the app.
• You can ask us for a copy of your information, to correct it, or to delete it, by emailing info@myexercisestudio.com.

Security

Information is encrypted in transit, access to the database is limited to our servers, and recordings and videos are served through protected links. No service can be completely secure, so please use a strong password and keep it private.

Children

Exercise Studio is for clinicians and is not directed to children. Clinicians are responsible for how they share programs with their patients.

Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll tell you by email or in the app.

Contact

Questions or requests: info@myexercisestudio.com.