Physioly is committed to protecting your personal data in accordance with the data protection laws that apply to you.
1. Data controller
The controller of your data is Physioly, reachable at contato@fisioly.com.br. Privacy questions can be sent to this address.
2. Data we collect
We collect: name, email and phone number to create your account; patient data entered by the professional; usage and navigation data to improve the system; and payment data handled by a secure payment processor (we do not store card details). In the mobile app, the camera and photo library are used only when you choose to attach a photo, and a device token is stored to deliver the notifications you enable.
3. Why we use it
Your data is used to: provide and improve the service; send essential communications (system notifications, security alerts); meet legal obligations; and, with your consent, send news and relevant content.
4. Legal basis
We process data to perform our contract with you (data needed to provide the service), for our legitimate interest (security and service improvement) and with your consent (marketing communications).
5. Patient and health data
Patient records you enter belong to you and your clinic. You are responsible for having a legal basis to record them, and we process them only on your instructions, to provide the service. We never use patient data for advertising.
6. Sharing
We do not sell your data. We may share it with: infrastructure providers (cloud hosting, database) under confidentiality agreements; payment processors for billing; and competent authorities when required by law.
7. Security
We use TLS encryption in transit, encryption at rest, daily backups and role-based access control, and follow information-security best practices to protect clinical data.
8. Retention
We keep your data for as long as needed to provide the service and for the minimum period required by applicable law. After cancellation, some data may be kept for up to 5 years for legal purposes.
9. Deleting your account
This applies to the Physioly app (Google Play and App Store) and to the system at physioly.io, developed by Physioly. It is the same account in all of them: deleting it in one deletes it everywhere.
In the app or on the web: sign in, open My Profile → Privacy and closing your account, optionally tap Download my data to keep a copy, then tap Delete my account, confirm the warnings, enter the account email and password, and confirm. Deletion is immediate and cannot be undone, not even by support.
Without access to the account: email contato@fisioly.com.br from the account's address with the subject "Delete my account". We confirm the request is yours and delete the account within 15 business days, letting you know by email when it is done.
What is deleted: your profile (name, email, phone, photo and password); the patients, diary, assessments, records, progress notes, files and finances stored in the account; your team members' accounts; and the devices registered for notifications. If yours is a staff account in a clinic, what is under your name stays with the clinic owner; your access and personal data are deleted.
What is kept: only the payment records that the law requires us to keep (tax and billing data), without data that identifies you, for the legal period. Backups that still contain account data are overwritten in the normal backup cycle and are not used for any other purpose. Your professional record-keeping obligations for patient files are yours, so download a copy before deleting.
Deleting some data without closing the account: inside Physioly (app or web) you can delete appointments (open the appointment in the Diary), assessments and progress notes (open the record in the patient file), files and photos (tap the file) and financial entries (open the entry in Finances). To delete any other data, such as all data of one patient or your personal data without closing the account, email contato@fisioly.com.br from the account's address with the subject "Delete data", saying what should be deleted. We do it within 15 business days and confirm by email. If you are a patient of a professional who uses Physioly, your data belongs to their records: ask them or their clinic for deletion, or write to us and we will forward the request.
10. Your rights
You have the right to: confirm whether we process your data; access it; correct inaccurate data; request anonymization, restriction or deletion; data portability; withdraw consent; and be informed about sharing. Exercise these rights at contato@fisioly.com.br.
11. Cookies and tracking
Our website uses essential cookies, analytics cookies (Google Analytics) and marketing cookies (Meta Pixel). You can manage your cookie preferences at any time through the banner shown on the site. The mobile app does not use advertising trackers.
12. Contact
Our Data Protection Officer (DPO) can be reached at contato@fisioly.com.br. We reply to requests within 15 business days.
This is the same policy shown when you create an account. The terms of the service are in our Terms of Use.