TheraLab Privacy Policy

1. Scope

This Privacy Policy explains how Digital Motion Therapy, LLC, operating as TheraLab, collects, uses, discloses, and protects personal information when you use TheraLab.live, TheraLab accounts, free tools, educational products, clinician tools, career tools, practice/business tools, digital products, and related services that link to this Policy.

Certain TheraLab products may have additional privacy notices because they process different categories of information. A product-specific notice controls to the extent it describes a data practice specific to that product.

TheraLab does not intentionally collect, store, process, transmit, or accept protected health information (PHI) or individually identifiable patient information in any product. Do not enter patient names, dates of birth, medical record numbers, claim identifiers, identifiable clinical records, or other PHI into TheraLab. Information needed for patient care or documentation must remain in the user’s approved EMR/EHR or other authorized system. Some consumer-facing products may process limited health-related information that is not PHI; those products remain subject to applicable consumer-health privacy requirements and product-specific notices.

2. Information We Collect

Depending on the product, we may collect account information; professional or educational information; transaction information; product inputs and saved content; communications; device and usage information; and analytics or cookie information. Payment-card information is processed by our payment provider and should not be stored in ordinary TheraLab application fields.

We collect only the information reasonably necessary for the product or service being used. TheraLab product teams must not add patient identity, health information, student identity, precise location, or other sensitive information merely because it would be convenient.

3. Google and Connected Services

If you choose to connect a Google account or another third-party service, TheraLab may receive the information and permissions you authorize. TheraLab requests the minimum OAuth permissions needed for the feature and should explain the relevant permission when the reason is not obvious.

TheraLab products must not use a connected service to access, import, sync, or store PHI. Connected-service features remain limited to non-PHI information and the minimum permissions required for the feature.

4. How We Use Information

We may use personal information to create and secure accounts; provide requested tools, products, subscriptions, downloads, and services; save progress and settings; process purchases and manage entitlements; provide support and transactional communications; operate, debug, secure, and improve TheraLab; prevent fraud or abuse; understand aggregate usage; comply with legal obligations; enforce agreements; and send marketing communications where permitted and consistent with your choices.

We will not repurpose sensitive information for materially incompatible purposes without completing a legal/privacy review and providing any notice or consent required by law.

5. AI Features

Some products may use artificial intelligence to generate, organize, summarize, or transform information. AI output may be inaccurate, incomplete, or inappropriate for a particular situation. Users must review outputs before relying on them for professional, clinical, billing, legal, tax, employment, or business decisions.

All TheraLab AI features prohibit PHI. We will not offer a PHI-processing AI mode under the current product architecture. Internal vendor review must determine provider retention, training, personnel access, and subprocessor practices before a provider is approved for sensitive data.

6. Payments

TheraLab uses third-party payment processors, including Stripe where applicable. We transmit only information reasonably required to complete and administer a transaction and do not place patient diagnoses, therapy details, clinical notes, or other health information into payment metadata.

7. Cookies, Analytics, and Similar Technologies

TheraLab may use strictly necessary technologies for authentication, security, preferences, checkout, and core functionality, and analytics to understand product performance and usage. Advertising, retargeting, session-replay, or other nonessential tracking requires privacy review before deployment. Where legally required, TheraLab provides choices before activating nonessential technologies.

8. How We Disclose Information

We may disclose information to service providers and subprocessors, payment and commerce providers, hosting/authentication/analytics/communication/security providers, professional advisers, government authorities or other parties when required by law or necessary to protect rights or safety, and a successor in a merger, acquisition, financing, reorganization, or sale. We do not authorize service providers to use information for unrelated purposes.

9. Sale, Sharing, and Targeted Advertising

TheraLab’s Phase 1–2 architecture does not authorize sale of personal information for money or use of sensitive health information for behavioral advertising. If that changes, this Policy and user controls will be updated before the feature is enabled.

10. Data Retention

TheraLab retains information only as long as reasonably necessary to provide the service, maintain transaction and entitlement records, protect security, resolve disputes, enforce agreements, and meet legal obligations. Deletion may not immediately remove limited information preserved for fraud prevention, transaction records, legal compliance, backup integrity, or an active dispute.

11. Security

TheraLab uses administrative, technical, and organizational safeguards appropriate to the nature of the information and service. No system can guarantee absolute security.

12. Your Privacy Choices and Rights

Depending on where you live, applicable law may give you rights to access, correct, delete, or obtain certain personal data and to opt out of certain uses or disclosures. Submit requests to info@digitalmotiontherapy.com. We may need to verify identity and may deny or limit a request where permitted by law. Marketing emails include an unsubscribe mechanism.

13. Children

The general TheraLab platform and Phase 1–2 products are not directed to children under 13 unless a product is expressly launched with a child-specific privacy and parental-consent structure. School-oriented and clinician-facing products are for the professional account holder and do not require a child to create a general TheraLab account unless separately approved.

14. Changes to this Policy

We may update this Policy as TheraLab changes. If a change materially affects how we use previously collected personal information, we will provide notice and obtain consent where required by law.

15. Contact

Digital Motion Therapy, LLC
1429 West 110th Street
Cleveland, OH 44102
info@digitalmotiontherapy.com