PRIVACY POLICY & TERMS OF USE
By using Pt Pal you consent to this agreement and Provider, providing remote patient monitoring services (referred to as “RPM Services”) to you as more fully described below.
RPM Services includes the transmission and evaluation of physiologic data (e.g. exercise performance, blood pressure readings, glucose monitoring, etc.) that is digitally stored and/or transmitted by you and/or your caregiver to your physician or other qualified health care professional, as they relate to your self-care plan.
1. Introduction
Your privacy is very important to us. This Privacy Policy and Terms of Use (this “Policy”) describes how our Service handles and secures information it collects.
Pt Pal mobile application (the “Application”), as made available through the Apple, Inc. (“Apple”) App Store and the Android Play Store is licensed, not sold, to you. As used herein, “You” and “Your” refer to the individual or entity that wishes to use the Application. Your license to this Application is subject to your acceptance of this Policy. Your license to this Application under this Policy is granted by Health Tech Pal Corp (“Licensor”). Licensor reserves all ownership and intellectual property rights in and to the Application. This Application supports Apple devices and Android devices, and enables users to access, review and use certain data (and perform certain actions with such data) where such data is provided by your medical provider through the Pt Pal portal (an application licensed by a third party medical provider (“Your Provider”)) under a separate agreement with Your Provider.
By accessing or otherwise using the Services, you accept and agree to be bound by these Terms. If you do not agree to these Terms, you may not access or use the Services.
2. Information Collected by our Services
Information You Submit: When you use our Service, you can submit information by:
• Typing-in data (such as when you register for our Services, or type an order, a message to send to us or another user, or complete a form).
• Uploading a document, image or other data file.
Engagement Tools and Data: Unless you choose not to allow, our Service also gathers information whenever you visit, log in or otherwise interact with them. As with other websites and interactive services, whenever you interact with our Service, your computer, mobile phone or tablet (a “Device”) and its software transmits a “request” to us. That request includes non-personal information received from your Device (and its software) necessary for us to identify and appropriately route the information your Device is requesting. These “requests” and “replies” are the backbone of all websites and Internet services. Therefore, whenever you:
• Visit and navigate through our Services
• Open a web-enabled memo
In addition to managing the appropriate routing of information, we use so-called “server logs” and other Engagement Tools to enhance the quality of the service and content you receive. For example, we use Engagement Tools to:
• Save user preferences;
• Preserve session settings and activity;
• Help authenticate users; and
• Analyze the performance of our Services and its various features and content.
When a user has registered with us, our Engagement Tools automatically receive information about your Device. We call such data “Engagement Data.”
Engagement Data often includes elements such as the date and time a “request” is made. You have the ability to control how certain Engagement Tools operate by modifying the settings on your Device or its software. For example, devices will allow you to disable the sending of location information. To learn more about Engagement Tools and how we use Engagement Data please see our Engagement Tools sections below entitled “Engagement Tools” and “How Information is Used.”
3. Engagement Tools
Our Services use engagement tools described below to deliver and enhance the quality of the services and content you receive. This information is intended to help you understand more about these tools and how they are used. Server Logs: We may automatically collect and store certain information in server logs when you attempt to access or use our Services. These server logs will typically include the following information:
• Date and time your Device accesses our Services
• Your Device type
• Device GPS location (if you have granted GPS access on your Device) and
• Task information
We ask your permission to collect data from HealthKit, which includes heart rate, sleep, steps, walking+running distance, workouts. Pt Pal reads the following data for the purpose of sharing with your healthcare team: Activity, exercise minutes, heart rate, sleep, stand minutes, steps, walking+running distance and workouts.
We will not share this information with third parties for any purpose and will only use this information for the sole purpose of fulfilling your request.
4. How Information is Used
We use personal and non-personal information (including Engagement Data) for the following purposes:
• Operating, maintaining, managing and administering our Services, including processing registrations, and providing customer support;
• Responding to questions and communications, which we retain in the ordinary course of business;
We use non-personal information for the following purposes:
• Auditing, research, measurement and analysis in order to maintain, administer, enhance and protect our Services, including analyzing usage trends and patterns and measuring the effectiveness of content, features or services;
• Other purposes described in this Policy or by your Provider.
5. Consents and Authorizations
From time to time, the Provider may request your consent or authorization (your “consent”) in compliance with applicable law or regulations. In other instances, such consent will be for informational purposes. In the latter case, the request to obtain your consent should not be interpreted as narrowing the scope or applicability of consent to this Policy – by agreeing to this Policy you have accepted and agreed to our the use of our Pt Pal Application services and information handling practices in the manner described in this Policy.
6. How our Services Allow Users to Share Information
Our Services can be used to facilitate one-on-one communications between both Healthcare Provider and Patient users.
In any one-on-one communication, users are sending information to one another. Depending on the message, this could include contact and other personal information. See also “Service Emails and other Communication” below.
You should be aware that this Policy covers only the information you submit through our Services. If you contact or exchange information with another user in person or through a means other than our Services, such activity is not covered by this Policy.
Confidentiality of Health Information: Our users – such as healthcare providers – are subject to laws and regulations governing the use and disclosure of health information they create or receive. Included among them is the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the Health Information Technology for Economic and Clinical Health of 2009 (“HITECH”), and the regulations adopted thereunder. When we store, process or transmit “individually identifiable health information” (as such term is defined by HIPAA) on behalf of a health care provider who has entered a Healthcare Provider User Agreement, we do so as its “business associate” (as also defined by HIPAA). Under this agreement, we are prohibited from, among other things, using individually identifiable health information in a manner that the provider itself may not. We are also required to, among other things, apply reasonable and appropriate measures to safeguard the confidentiality, integrity and availability of individually identifiable health information we store and process on behalf of such providers. We are also subject to laws and regulations governing the use and information of certain personal and health information, including HIPAA, when we operate as a business associate of a healthcare provider.
Communications received from Your Provider and our administrative announcements are often transactional or relationship messages, such as task reminders and message notifications, or other service notifications. You may opt out of receiving certain messages.
7. Sharing of Information: We will not share personal information you submit except under the following circumstances
• When you choose to share such information through our Services. Under certain circumstances this may require a specialized consent before our Services complete certain such transmissions;
• When we have your express consent.
8. Security
The security of our Services and the information they store, process and transmit is a top priority. To prevent unauthorized access, maintain data accuracy, and ensure the appropriate use of the information we collect, we deploy a wide range of technical, physical and administrative safeguards, including: Secure Socket Layer (SSL) encryption, firewalls, system alerts and other information system security technologies; housing health data in secure facilities that restrict physical and network access; and regular evaluation and enhancement of our information technology systems, facilities, and information collection, storage and processing practices. Under our Healthcare Provider User Agreement and applicable law, we are required to apply reasonable and appropriate measures to safeguard the confidentiality, integrity and availability of individually identifiable health information (as such term is defined by HIPAA) residing on and processed by our Services.
9. Children under 18
BY ACCESSING THIS APP OR SITE, YOU AND, IF APPLICABLE, YOU, ON BEHALF OF YOUR CHILD, (COLLECTIVELY, “YOU”, “YOUR”) ACKNOWLEDGE AND AGREE TO BE BOUND BY ALL OF THE TERMS AND CONDITIONS OF THESE TERMS. Such users assume full responsibility over their submission, use and transmission of such information.
10. Third Party Services
This Policy applies only to our Services. It does not apply to services offered by third parties, including websites and other online services that our Services may display links to.
The following identifies the third party tools that we use in connection with our Services. Each of our third party tool providers has its own privacy policy that describes its information collection and handling practices. These providers may use cookies, web beacons, pixel tags, or similar technologies in order to collect information. For links to their privacy policies, see below. This information may change over time. We will try to keep this information updated.
• Google PlayStore Analytics
• Apple Store Analytics
• YouTube, by Google
11. THIS APPLICATION DOES NOT PROVIDE MEDICAL ADVICE.
The contents of the Application, such as text, graphics, images, data, graphs, audio, videos, computer programs and other material and information (collectively the "Content"), are for informational purposes only. THE CONTENT PROVIDED IN THIS APPLICATION IS NOT A SUBSTITUTE FOR THE ADVICE OF YOUR PROFESSIONAL PHYSICIAN OR OTHER QUALIFIED HEALTH CARE PROFESSIONAL. ALWAYS SEEK THE ADVICE OF YOUR PHYSICIAN OR OTHER QUALIFIED HEALTH CARE PROFESSIONAL WITH ANY QUESTIONS YOU MAY HAVE REGARDING A MEDICAL SYMPTOM OR A MEDICAL CONDITION. NEVER DISREGARD PROFESSIONAL MEDICAL ADVICE OR DELAY IN SEEKING IT BECAUSE OF SOMETHING YOU HAVE READ OR SEEN IN THIS APPLICATION. IF YOU THINK YOU HAVE A MEDICAL OR PSYCHIATRIC EMERGENCY, CALL 911 OR GO TO THE NEAREST HOSPITAL.
12. Changes to this Policy
We work hard to continuously improve and enhance our Services. Some of these improvements and enhancements may result in changes to this Policy. We will post such changes along with their effective date on this page, and if the changes are significant, we will provide a more prominent notice. Because our Policy can change at any time, we encourage you to reread it periodically to see if there have been any changes that affect you. If you disagree with any changes to this Policy and do not wish your information to be subject to the revised Policy, you will need to deactivate your account before the new Policy becomes effective. Your use of our Services following any such change constitutes your agreement that all information collected from or about you through our Services after the revised Policy is posted will be subject to the terms of the revised Policy.
13. Viewing, Updating and Deactivating Information
Our Services aim to provide you with access to the personal information you submit and the means to update it. This can be accomplished by logging into our Services or contacting us using the contact information below. Under certain circumstances, we may ask you to verify your identity before your request is processed.
14. Contact Us
You may contact us at:
info@ptpal.com
Phone: 877-55-PTPAL (78725)
Updated: December 2025
Privacy Policy - UK GDPR
Last updated: 12/31/2025
1. Who We Are
Pt Pal is a digital rehabilitation and patient-engagement platform developed by Health Tech Pal Corp (“we”, “us”, “our”). Pt Pal is provided to patients under licence by healthcare providers. In most deployments, the healthcare provider acts as the Data Controller, and Health Tech Pal Corp acts as a Data Processor, unless otherwise stated.
Data Protection Contact: R Augenti
Data Protection Lead Email: support@ptpal.com
2. Scope of This Policy
This Privacy Policy explains how personal data is collected, used, shared, stored, and protected when using Pt Pal mobile applications (iOS and Android) and the Pt Pal web application. This policy complies with UK GDPR and GDPR.
3. Personal Data We Collect
Pt Pal primarily processes personal and health data that is provided by healthcare organisations as part of clinical care delivery.
In most cases, personal and clinical data displayed within Pt Pal is:
Sourced from the healthcare provider’s electronic medical record (EMR) or other clinical systems, and/or
Entered by clinicians or authorised registration staff acting on behalf of the healthcare provider
This data may include:
Patient identifiers and contact details
Clinical context relevant to rehabilitation
Treatment plans, activities, and outcome measures
Pt Pal does not collect this information directly from patients through the application.
Limited Patient Interaction Data
Patients may interact with the application by:
Viewing assigned activities or content
Completing tasks or exercises
Engaging with rehabilitation programmes
Any data generated through these interactions is contextual to care delivery and is made available to the patient’s authorised clinician as part of treatment monitoring.
Technical & Usage Data
Pt Pal processes limited technical and usage data, including:
Session identifiers
App navigation and feature usage
Health & Wellness Data: rehabilitation activity, exercise data, patient-reported outcome measures, engagement data.
Technical & Usage Data: device identifiers, IP address, app usage, log and performance data.
Connected Services (Optional): Apple Health and Google Fit where enabled.
This data is used solely for security, performance monitoring, and user experience improvement, and not for advertising or marketing.
4. How Personal Data Is Collected
Data is collected directly from users, automatically through use of the service, from connected devices or services where permission is granted, and from healthcare providers where lawfully shared.
5. How We Use Personal Data
To deliver and operate the Pt Pal service, support rehabilitation programmes, enable clinician monitoring, send service-related notifications, maintain security and performance, and analyse in-app usage for usability improvements. We do not sell data or use it for advertising.
6. Legal Basis for Processing
Processing is based on performance of a contract, consent where required, legal obligation, public interest in healthcare, or legitimate interests.
7. Automatic Data Sharing with Clinicians
Data entered into Pt Pal is automatically shared with the patient’s assigned clinician or healthcare provider as part of care delivery. This occurs without repeated manual action and is limited strictly to the patient and their authorised provider.
8. Consent Through Use of the Service
By creating an account and accepting this Privacy Policy and Terms of Use, users consent to automatic transmission of their data to their clinician. This processing is essential and cannot be disabled without discontinuing use of the platform.
9. Cookies, Session Tokens, and Usage Analytics
Pt Pal does not use cookies on its mobile or web platforms. We do not use cookies for advertising, profiling, or tracking.
Secure session tokens are used for authentication and session management. In-app usage and navigation data is collected solely for internal service improvement and user experience optimisation.
10. Data Storage & Security
We apply encrypted data transmission, secure cloud infrastructure, role-based access controls, and ongoing security monitoring.
11. Data Retention
Data is retained only as long as necessary to provide the service, meet legal obligations, or comply with healthcare provider requirements, and is securely deleted or anonymised when no longer required.
12. Data Breaches
We maintain procedures to identify, investigate, and report data protection incidents in accordance with applicable law.
13. Your Rights
Users have rights to access, rectify, delete, restrict, object, request portability, withdraw consent, and avoid automated-only decisions. Requests can be made to info@ptpal.com and will be responded to within 30 days.
14. Opt-Outs & Essential Processing
Some processing is essential to the operation of Pt Pal and cannot be opted out of. Optional processing can be managed via app or device settings.
15. Children
Pt Pal is not intended for use by children without appropriate consent. Concerns can be reported to info@ptpal.com.
16. Policy Updates
If how personal data is used changes, users will be informed and consent re-obtained where required.
17. Third-Party Links
Links to third-party services are governed by their own privacy policies.
Contact Us
You may contact us at:
info@ptpal.com
Phone: 877-55-PTPAL (78725)