Privacy Policy
Effective September 9, 2026
MamaBPT supports practitioner-directed exercise care. This policy explains the information handled by the service, why it is used, who may receive it, and the choices available to users. MamaBPT does not use personal information for advertising or cross-app tracking and does not sell it.
Who this applies to
This policy covers patients and practitioners who use MamaBPT. A clinic ordinarily decides why care information is entered and how it is used for treatment. MamaBPT handles that information to operate the service for the clinic. Depending on applicable law and the parties’ agreements, the clinic may be the controller or regulated healthcare entity and the service operator may act as its processor or service provider. For limited activities such as account security, service integrity, legal compliance, and responding to direct support requests, responsibility may be determined separately. Ask your clinic if you need to know which organization controls a particular record.
Information and how it is collected
- Account and contact information: name, email address, phone number when supplied by you or your clinic, account identifiers, clinic membership, and sign-in events.
- Care and activity information: assigned exercise plans and instructions, related care context, and completion dates and counts entered by practitioners or patients. Records of program details being opened or closed and exercise sessions being started or finished are shared with the patient’s authorized care team to show exercise progress.
- Private messages and safety reports: message text, sender, time, care-plan context, read state, and reports or blocks submitted through the closed care-team channel.
- Device and service information: an app installation identifier, an opaque push-registration handle, authentication events, request identifiers, and limited security or reliability diagnostics. Notification content is designed to be generic rather than reveal patient or message details.
Why information is used
Information is used to authenticate and protect accounts; connect patients with their clinic and assigned practitioner; provide exercise plans, progress views, and messages; send enabled service notifications; investigate reports; keep security and access records; troubleshoot reliability; and respond to applicable legal obligations.
Who may receive information
Care information is made available through role-based access to the patient, authorized practitioners involved in that patient’s care, and authorized clinic administrators for access, safety, or audit review. Vendors may process limited information to provide infrastructure described on the service-provider page. Information may also be disclosed when legally required. MamaBPT does not claim that every vendor has signed a particular healthcare or international-transfer agreement; clinics should obtain the contractual terms applicable to their deployment before using the service with regulated data.
Storage and security
Network requests use encrypted transport. The iOS app uses platform-protected storage for session secrets and may keep device-local plan data, thumbnails, and pending completion or message operations so workflows can recover from a temporary connection loss. No system can guarantee absolute security. See the retention notice for how long information may remain.
Your choices and rights
You can control notifications in device settings, sign out, withdraw optional messaging consent from a conversation, and request account deletion by contacting support. The in-app deletion workflow is not yet available on the current hosted service. Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or review of certain automated decisions, and to complain to a privacy regulator. Not every right applies in every situation, and clinical-record duties may limit deletion. Contact your clinic first for care-record requests or email access@mamabpt.com. Identity verification may be required.
Children and territorial notices
MamaBPT accounts are created or invited through a clinic. A parent, guardian, or other authorized representative should act where required by age or local law. Privacy rights and healthcare-record rules vary by state and country; this notice does not claim a registration, certification, representative, or legal basis that has not been confirmed for your clinic’s territory.
Account deletion
Contact support to request account deletion. Sending a request does not automatically disable access or erase records; support must confirm the actions taken. Read the account-deletion explanation for status and retained-record details.
Changes and contact
Material changes will be posted with a new effective date. Questions, rights requests, and privacy concerns may be sent to access@mamabpt.com. Do not include sensitive medical details in ordinary email.