Privacy Policy

This Privacy Policy explains how Rehabence (SMC-Private) Limited("Rehabence", "we", "us") collects, uses, and protects information when you use our platform, whether as a subscriber (a physiotherapist, clinic, or rehab center) or as a visitor to this website.

Account information: name, email address, clinic name, and authentication details when you sign up.

Billing information: handled directly by our payment processor. We receive confirmation of your subscription status but never see or store your full card details.

Clinical/patient data:information you or your practice enters into the platform, such as patient records, SOAP notes, and rehab plans. You control this data; see "Your role as controller" below.

Usage data: standard technical data such as IP address, browser type, and pages visited, collected automatically to operate and improve the platform.

We use collected information to: provide and maintain the platform; process payments and manage subscriptions; send service-related emails (e.g. billing receipts, account notifications); respond to support requests; and improve platform reliability and features.

We do not sell your personal data or your patients' data.

For any patient or clinical data you enter into Rehabence, you (or the clinic/practice you represent) act as the data controller, and Rehabence acts as a data processor — we process that data only to provide the service to you, under your instructions, and do not use it for any other purpose. You are responsible for ensuring you have the appropriate legal basis and, where required, patient consent to store that data with us.

We share information with the following categories of third-party providers, only as needed to operate the platform:

• Payment processing and subscription billing (acting as merchant of record).
• Supabase — database hosting and authentication infrastructure.
• Email delivery providers — sending transactional emails such as receipts and account notifications.

These providers are contractually restricted from using your data for any purpose other than providing their service to us.

We use industry-standard security practices, including encryption in transit and at rest, to protect the data stored on the platform. No system is 100% secure, but we take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse.

We retain account and clinical data for as long as your subscription is active, and for a reasonable period afterward to allow account recovery, unless you request earlier deletion or longer retention is required by law.

Depending on your location, you may have rights to access, correct, export, or request deletion of your personal data. To exercise any of these rights, contact us at support@rehabence.com.

We use a minimal set of cookies necessary for authentication and basic site functionality. We do not use third-party advertising cookies.

Our infrastructure providers may process and store data in countries other than your own. Where this occurs, we rely on those providers' own safeguards and contractual protections for cross-border data transfer.

Rehabence is a professional practice-management tool and is not directed at, or intended for use by, individuals under 16.

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do, and material changes will be communicated to active subscribers by email. See also our Terms of Service.

Questions about this Privacy Policy or your data can be sent to support@rehabence.com.