Privacy Policy

Last updated May 3, 2026

This Privacy Notice for Physiohub ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit the PhysioHub website or any website of ours that links to this Privacy Notice
• Use PhysioHub. PhysioHub is a free web-based flashcard study application designed for physiotherapy students and clinicians. It provides spaced-repetition flashcard decks covering topics including orthopaedics, neurology, spinal pathology, paediatric orthopaedics, general medicine, cervical spine, knee fundamentals, carpal tunnel syndrome, and peripheral joint mobilization. Users can create an account to track their study progress and sync across devices. The app is intended for educational purposes only and does not constitute medical advice.
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have questions, please contact us at physiohub.io@proton.me.

Summary of Key Points

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register, express interest in our Services, participate in activities, or contact us. This may include:

• Names
• Email addresses

We do not process sensitive information.

We may provide you with the option to register using your existing social media account (such as Google). If you choose to do so, we will collect certain profile information from that provider, as described in section 7.

Information automatically collected

We automatically collect certain information when you visit or use the Services, including device and usage information such as your IP address, browser type, operating system, language preferences, and information about how and when you use our Services.

• Log and Usage Data. Includes IP address, device info, browser type, date/time stamps, pages viewed, and features used.
• Device Data. Includes information about your computer, phone, or tablet used to access the Services.

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. How Do We Process Your Information?

We process your personal information for the following reasons:

• To facilitate account creation, authentication, and account management
• To deliver and facilitate the delivery of services to you
• To respond to your inquiries and offer support
• To send administrative information such as policy updates
• To request feedback about your use of our Services
• To protect our Services through fraud monitoring and prevention
• To identify usage trends and improve our Services
• To save or protect an individual's vital interest when necessary

3. What Legal Bases Do We Rely On?

If you are located in the EU or UK, the GDPR and UK GDPR require us to explain our legal bases for processing your personal information:

• Consent. With your permission for a specific purpose. You may withdraw consent at any time.
• Performance of a Contract. When necessary to fulfil our contractual obligations to you.
• Legitimate Interests. To analyse usage, diagnose problems, prevent fraud, and improve user experience, where these interests do not override your rights.
• Legal Obligations. Where required by law or regulatory authority.
• Vital Interests. Where necessary to protect your safety or that of a third party.

4. When and With Whom Do We Share Your Information?

We may share your personal information in the following situations:

• Business Transfers. In connection with any merger, sale of company assets, financing, or acquisition of all or part of our business.
• Advertising and Analytics Partners. We allow selected third-party advertising and analytics providers, including Google AdSense and Google Analytics, to receive limited information (such as your IP address, device and browser data, and pages viewed) via cookies and similar technologies in order to serve and measure ads and to analyse usage of the Services. These partners do not receive your name, email address, or any data you store inside your study decks. See section 5 for more detail and opt-out options.

5. Do We Use Cookies and Other Tracking Technologies?

We use cookies, web beacons, pixels, and similar tracking technologies to gather information when you interact with our Services. These technologies help us run the site, remember your preferences, analyse traffic, and serve advertising. You can control cookies through your browser settings; disabling cookies may affect the functionality of the Services.

Analytics

We use Google Analytics to understand how visitors use the Services so we can improve them. Google Analytics may set cookies on your device to collect information such as pages visited, time on page, referrer, and approximate location derived from IP address. To opt out of Google Analytics tracking across all sites, install the Google Analytics Opt-out Browser Add-on.

Third-Party Advertising and Google AdSense

We use third-party advertising companies, including Google, to serve ads when you visit our Services. As a third-party vendor, Google uses cookies (including the DoubleClick DART cookie) and similar technologies to serve ads to you based on your prior visits to our Services and other websites on the internet.

Google and its partner networks may use information about your visits to this and other websites (but not your name, email address, or other personally identifying information) to provide advertisements about goods and services that may interest you. This is sometimes called "interest-based" or "personalised" advertising.

You have the following choices:

• You can opt out of personalised advertising from Google by visiting Google Ads Settings.
• You can opt out of personalised advertising from many third-party vendors at www.aboutads.info/choices (Digital Advertising Alliance) or www.youronlinechoices.eu (European Interactive Digital Advertising Alliance).
• You can review Google's policies governing how their advertising partners handle your data at policies.google.com/technologies/partner-sites and the Google Privacy and Terms page.
• Most browsers allow you to block or delete cookies through their settings. Doing so may stop personalised ads from being served but will not stop ads being shown altogether.

Third-party vendors, including Google, may also use remarketing pixels and similar technologies to show ads on third-party sites based on your past visits to our Services. We do not control these third parties' tracking technologies or how they may be used; please review their privacy policies for more information.

6. Do We Offer AI-Based Products?

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies ("AI Products") through third-party providers including Anthropic, OpenAI, and xAI. Your input, output, and personal information may be shared with these providers as necessary to enable AI features. You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

7. How Do We Handle Your Social Logins?

Our Services offer you the ability to register and log in using your Google account. When you do this, we receive certain profile information including your name and email address. We use this information only as described in this Privacy Notice. We are not responsible for other uses of your information by Google and recommend reviewing their privacy policy.

8. How Long Do We Keep Your Information?

We keep your personal information only for as long as necessary for the purposes set out in this notice, or as required by law. When you delete your account, we will delete or anonymise your information, unless it needs to be retained for legal purposes.

9. How Do We Keep Your Information Safe?

We have implemented appropriate technical and organisational security measures to protect your personal information. However, no electronic transmission over the internet can be guaranteed 100% secure. You should only access the Services within a secure environment.

10. Do We Collect Information From Minors?

We do not knowingly collect data from or market to children under 18 years of age. By using the Services, you confirm that you are at least 18, or that you are the parent or guardian of a minor who has consented to their use. If you believe we have collected data from a child under 18, contact us at physiohub.io@proton.me.

11. What Are Your Privacy Rights?

If you are located in the EEA, UK, or Switzerland, you have the right to access, correct, erase, restrict, or port your personal information, and to object to its processing. To exercise these rights, contact us at physiohub.io@proton.me.

If you believe we are unlawfully processing your information, you have the right to complain to your local data protection authority (in the UK, the ICO).

Account Information

You may review or update your account information at any time via your account settings. Upon requesting account deletion, we will deactivate your account and remove your data from active databases, subject to any legal retention requirements.

12. Controls for Do-Not-Track Features

We do not currently respond to Do-Not-Track browser signals, as no uniform standard has been adopted. If a standard is adopted in future, we will update this notice accordingly.

13. Do United States Residents Have Specific Privacy Rights?

If you are a resident of California or other applicable US states, you may have the right to access, correct, delete, or obtain a copy of your personal information, and to opt out of the sale of personal data. We do not sell personal information.

To exercise your rights, contact us at physiohub.io@proton.me or visit PhysioHub. To appeal a decision, email us and we will respond in writing.

14. Do We Make Updates to This Notice?

We may update this Privacy Notice from time to time. The updated version will be indicated by the "Last updated" date at the top. We encourage you to review this notice periodically.

15. How Can You Contact Us?

If you have questions or comments about this notice, email us at physiohub.io@proton.me or write to:

Physiohub
United Kingdom

16. How Can You Review, Update, or Delete Your Data?

Based on applicable laws, you may have the right to request access to, correct, or delete your personal information. To submit a request, visit PhysioHub or email physiohub.io@proton.me.