RehabKit — Privacy Policy
RehabKit is a set of clinical tools for rehabilitation professionals: exercise timers, measurement tools, calculators, research feeds, and clinical references. We designed it to need as little of your information as possible. We do not require an account, and we do not use advertising or cross-app tracking.
HIPAA notice
RehabKit is designed to minimize collection of personal information. We do not require an account, do not collect patient or customer names or contacts, and do not intentionally collect medical record numbers, diagnoses, or other medical information. However, RehabKit is not offered as a HIPAA-compliant electronic health record, patient portal, or protected health information system, and we do not enter into Business Associate Agreements for use of the app. Do not enter protected health information into playlist names, notes, videos, photos, or shared content if your use requires HIPAA-regulated handling.
Summary
- We don’t collect personal information such as your name, email, or contacts.
- Your timer settings, saved playlists, measurements, calculator inputs, and Motion Analysis sessions are stored on your device.
- Exercise videos, photos, and Motion Analysis videos are stored on your device in encrypted form. They leave your device only if you turn on Sync Videos & Photos or choose to share a playlist or export a video.
- If you turn on Playlist iCloud Sync, playlists are stored in your own private iCloud storage, which is run by Apple and does not use our servers.
- Article summaries in RSS Feeds are generated on your device.
- Push notifications are delivered by OneSignal. Subscription purchases are processed by Apple and validated by RevenueCat.
- There are no ads and no advertising or cross-app tracking SDKs in the app.
Information the app uses
- Camera. Used to record exercise demonstration videos, to record and analyze movement in Motion Analysis, and to scan QR codes for importing a shared playlist. Video is processed and stored on your device.
- Photo library and Files. Used only when you choose to import a video or photo, or to pick an image containing a playlist QR code.
- Microphone. Used for audio in recorded videos and for Stride Coach. Stride Coach analyzes sound on your device to detect foot strikes and does not record or store audio.
- Motion sensors. Used by the Inclinometer, Rotation, and Cadence tools, and by compatible AirPods when you choose to use them as a sensor. Sensor data is used to compute the measurement shown on screen.
- Measurement history. Inclinometer and Rotation measurements are saved on your device until you clear them. They are not linked to a patient record and are not uploaded to our servers.
- Location. RehabKit’s Info.plist declares a when-in-use location permission whose system description reads “Used by OneSignal Push tracking”. It exists only to satisfy the push-notification SDK and is not used by any RehabKit tool.
- Playlist iCloud Sync. If you turn it on, playlist names, step order, timing settings, and circuit structure (and, if you also turn on Sync Videos & Photos, the encrypted videos and photos) are stored in your private iCloud storage using Apple CloudKit. This data does not pass through our servers.
- Research feeds. Article lists and article pages are loaded directly from each journal’s publisher. The publisher may receive standard request information such as your IP address, under its own privacy policy.
Push notifications (OneSignal)
Push notifications are delivered through OneSignal, a third-party push service. OneSignal receives a push token, standard delivery metadata, and basic tags such as platform. It does not receive your playlists, measurements, videos, or photos.
Subscriptions (RevenueCat)
RehabKit purchases (monthly, annual, or lifetime) are handled by Apple’s in-app purchase system. The app uses RevenueCat to validate receipts, restore purchases, and check whether your entitlement is active. RevenueCat receives purchase and device identifiers needed to do so, under its own privacy policy.
What we do not do
- We do not require an account or collect your name, email, contacts, or address book.
- We do not store your playlist videos, photos, measurements, or Motion Analysis videos on our servers.
- We do not sell or share your information.
- We do not use advertising, ad networks, or cross-app/cross-site tracking technologies. Aside from OneSignal’s standard push-delivery data and RevenueCat’s purchase validation, we do not use analytics or crash-tracking SDKs.
Data retention and your choices
- On-device data: your playlists, settings, measurements, and encrypted videos and photos remain on your device until you change or delete them in the app, or delete the app. Deleting RehabKit removes locally stored data associated with the app.
- iCloud data: if you enable sync, synced playlist data remains in your private iCloud storage until you delete it. Turning sync off does not delete your playlists, locally or in iCloud.
- Permissions: you can grant or revoke camera, photo library, microphone, motion, and notification access at any time in iOS Settings.
Children’s privacy
RehabKit is a professional tool and is not directed to children under 13. We do not knowingly collect personal information from children.
International users
OneSignal, RevenueCat, and Apple’s services may process requests on servers located in the United States or elsewhere. By using features that rely on these services, you understand that the limited data described above is transmitted to and processed in those locations.
Changes to this policy
We may update this policy from time to time. Material changes will be posted here with an updated effective date.
Contact
Questions? Contact Schumacher PT & Performance LLC at support@SchumacherPT.com.