Privacy
How Head Physio AI handles the data a practice puts into it. This is a description of the software, not the practice’s own privacy notice — that has to come from the practice.
What is stored
Patient names, email addresses, phone numbers, postal addresses, which location a patient belongs to, and any notes staff write on a record. For staff: name, email address, role, and the devices and addresses recent sign-ins came from.
Where it is stored
In a Postgres database hosted by Supabase in London (eu-west-2), encrypted at rest. Nothing is sent to a third party for analytics, advertising or training.
Who can see it
Each practice sees only its own records; the database enforces that on every query rather than the application asking nicely. Within a practice, anyone signed in can read the patient records and notes for that practice. The practice owner can additionally see the access trail described below.
What is recorded
Every time a patient record is opened, created, changed, archived or restored, and every time notes are read or written, the software records who did it, when, and from which address. It records which fields changed and never what they changed to, and it never records the text of a search.
Deletion
Patient records are archived, not deleted — UK guidance for adult physiotherapy records runs to roughly eight years after last contact. A request to erase a record is a matter for the practice to action, and it is not something a member of staff can do from these screens.