Last Updated: 25 August 2026
PhysioDesk ("PhysioDesk", "we", "us", or "our") is a physiotherapy clinic management application developed and operated by Jaimeen Patel.
This Privacy Policy explains how PhysioDesk collects, uses, stores, protects, and deletes information when you use the PhysioDesk mobile application and related services.
PhysioDesk is intended for use in India.
By creating an account or using PhysioDesk, you acknowledge that you have read and understood this Privacy Policy.
Depending on how you use PhysioDesk, we may collect and process the following information.
When you create an account, we may collect:
Passwords are handled through Supabase Authentication and are not stored by PhysioDesk as plain-text passwords.
PhysioDesk provides an optional "Sign in with Google" authentication method. When you choose to sign in using your Google Account, Google may provide PhysioDesk with basic profile information associated with your Google Account, subject to your authorization.
The Google user data received through Sign in with Google may include:
PhysioDesk uses this Google user data only to create or authenticate your PhysioDesk account, associate your Google identity with your account, display your account profile information, and provide account-management and authentication functionality.
PhysioDesk does not request access to Google Drive, Gmail, Google Calendar, Google Photos, Google Contacts, or other Google services through the authentication process described in this Privacy Policy.
Google user data received through Sign in with Google may be stored as part of your PhysioDesk account and processed through our backend service provider, Supabase, for authentication, account management, and application functionality.
We do not sell Google user data. We do not use Google user data for advertising, targeted advertising, personalized advertising, or other unrelated purposes. We do not transfer Google user data to third parties except where necessary to provide PhysioDesk functionality, comply with applicable law, or as otherwise disclosed in this Privacy Policy.
Google user data is protected using the security measures described in this Privacy Policy, including authentication, access controls, Row Level Security (RLS), storage access policies, and encrypted network communication.
Google user data is retained as part of your PhysioDesk account according to the data retention and account deletion practices described in this Privacy Policy. When you delete your PhysioDesk account, the associated account data is intended to be deleted, subject to applicable legal retention requirements.
PhysioDesk's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
PhysioDesk allows doctors and other authorized users to create and manage patient records.
Patient information entered into the application may include:
Some of this information may constitute health or sensitive personal information. PhysioDesk does not independently collect this information from patients. It is entered by the user as part of clinic-management functionality.
PhysioDesk allows users to upload and manage patient-related documents and media, including:
Uploaded files are stored using Supabase Storage.
Users are responsible for ensuring that they have the appropriate authorization and lawful basis to upload and manage patient information and medical documents.
PhysioDesk provides payment record-keeping functionality.
Users may record:
PhysioDesk does not currently process online payments.
The payment-management functionality does not require users to provide: Credit/debit card numbers, CVV numbers, UPI PINs, Online banking passwords, or Payment gateway credentials.
We use information to provide and operate PhysioDesk, including to:
We do not use patient information for advertising or targeted advertising.
PhysioDesk uses Supabase as its backend service provider.
Supabase may process information on our behalf for purposes including:
Supabase is currently the only third-party service provider used by PhysioDesk for the backend processing described in this Privacy Policy.
We do not sell patient information or user information to third parties.
We do not share patient information with advertisers or data brokers.
Information may be disclosed where required by applicable law, legal process, court order, or valid governmental request.
PhysioDesk uses security mechanisms including:
We take reasonable measures to protect information from unauthorized access, alteration, disclosure, or destruction.
However, no internet-based service can guarantee absolute security.
Users are responsible for maintaining the confidentiality of their account credentials and device.
PhysioDesk is designed to collect information necessary for its intended clinic-management functionality.
We do not intentionally collect unrelated information such as:
— unless a future feature requires such information and this Privacy Policy is updated accordingly.
If the application requests access to the camera, photos, files, or device media, that access is used to support functionality such as uploading profile images or patient documents/media.
We do not use camera or file access for advertising or unrelated purposes.
Users can control these permissions through their device settings.
We do not sell, rent, or trade personal information.
We do not share patient information with:
Supabase is used as the backend service provider necessary to operate the Service.
Information may also be disclosed where required by applicable law or valid legal process.
PhysioDesk does not currently apply an automatic inactivity-based deletion period.
Data is generally retained until the doctor deletes the relevant information or the account is deleted.
This may include:
Information may be retained where necessary to comply with applicable legal obligations.
Doctors are responsible for determining how long they are legally required to retain patient records under applicable professional, healthcare, tax, or other obligations.
PhysioDesk provides an account deletion option within the application.
When a doctor requests account deletion, the account and associated data are intended to be deleted, including associated:
This is subject to applicable legal retention requirements.
Account deletion may be permanent and irreversible.
Users should retain any information they are legally required to maintain before deleting their account.
Depending on applicable Indian law, users may have rights relating to:
To make a privacy-related request, contact:
Jaimeen Patel
Email: jaimeenpatel2017@gmail.com
We may need to verify your identity before processing certain requests.
PhysioDesk is designed as a professional clinic-management application for doctors and healthcare professionals.
The application is not intended for children to create their own accounts.
Doctors may enter information about pediatric patients where necessary for legitimate healthcare and clinic-management purposes and where the doctor has appropriate authority to do so.
PhysioDesk is intended for users in India.
Because PhysioDesk uses Supabase infrastructure, information may be processed or stored using infrastructure located outside India depending on the configuration and services used by the Supabase project.
Users should not assume that all information is physically stored within India unless the applicable infrastructure configuration specifically provides this.
We may update this Privacy Policy when:
When material changes are made, we may provide appropriate notice through the application or other reasonable means.
The "Last Updated" date at the beginning of this policy will indicate when the policy was most recently revised.
PhysioDesk is a clinic-management and record-keeping application.
PhysioDesk does not independently diagnose medical conditions, prescribe treatment, or replace the professional judgment of a qualified healthcare professional.
Information stored within PhysioDesk should be reviewed and interpreted by the responsible healthcare professional.
PhysioDesk should not be relied upon as a substitute for professional medical advice, diagnosis, or treatment.
If you have questions, concerns, or requests relating to privacy or your information, contact:
Developer / Data Controller: Jaimeen Patel
Email: jaimeenpatel2017@gmail.com
Country: India