Privacy policy
Last updated 17 October 2026.
This policy explains what Health Studio (“Health Studio”, “we”) collects, why, and what you can ask us to do with it. Health Studio builds and hosts websites and booking software for health practices such as massage, chiropractic and physiotherapy clinics.
Two kinds of information
About our customers. When you, a practice owner, sign up or talk to us, we hold your name, business details, email, phone, billing details and how you use the service. We are responsible for this information.
About your clients. When your clients book, fill in an intake form or sign a waiver on your site, that information belongs to your practice. We store and process it only to run the service for you, on your instructions. Your practice is responsible for telling clients how it uses their information and for having a lawful basis to collect it.
What we use your information for
- Building, hosting and supporting your website and booking desk.
- Billing your subscription and any domain you buy through us.
- Service emails, such as receipts, account notices and sign-in links.
- Business emails to practices we think may want a website. Every one says who we are and has a one-click unsubscribe, and we stop as soon as you ask.
- Keeping the service secure and fixing problems.
We do not sell personal information, and we do not use your clients’ information for our own marketing.
Who helps us run the service
We use these providers, each bound to protect the information and use it only for us: Vercel (hosting), Supabase (database and sign-in), Stripe (payments), Resend (service email), Google Workspace (our own email), Anthropic (the optional AI assistant, only when you use it) and Twilio (text reminders, only if your practice turns them on). Some of them store data outside Canada, including in the United States and the European Union.
How long we keep it
We keep your account information while you are a customer and for as long as tax and accounting rules require afterwards. Your clients’ records stay in your account until you delete them or close your account; after closing we delete them within 90 days unless you ask us to export them first. Signed forms are kept unchanged on purpose, so they can serve as a record.
Security
Data is encrypted in transit and at rest, access is limited to the people who need it, and every practice’s data is separated from every other practice’s at the database level.
Your choices
You can ask to see, correct, export or delete your information, or to stop receiving our emails, at any time. Clients of a practice should contact that practice first; we will help the practice respond.
Contact
Health Studio. Email hello@healthstudio.dev.
We will post any change to this policy on this page and tell customers by email when it matters.