Privacy Policy

1. Who we are

Healix is a therapy practice management platform. This policy explains how we collect, use, and protect your personal information when you use our services.

2. What data we collect

• Name, email address, and phone number (provided during registration)
• Appointment history and scheduling information
• Messages exchanged with your therapist
• Invoices and payment records
• Documents uploaded to the platform

3. How we use your data

Your data is used to:

• Manage your therapy appointments and schedule
• Enable secure messaging with your therapist
• Generate and track invoices
• Send appointment reminders and notifications (email and/or WhatsApp)

4. Where your data is stored

Your data is stored using cloud services located outside of Israel, including:

• Database: Neon (PostgreSQL, cloud-hosted)
• Application hosting: Vercel
• File storage: Cloudflare R2
• Email delivery: Resend

All data is transmitted using encrypted connections (HTTPS/TLS). Access is restricted to authorized personnel only.

5. Clinical data protection

Session notes written by your therapist are private and never accessible to you through the patient portal. Only your therapist can view their clinical notes.

6. Your rights

Under Israeli privacy law (Privacy Protection Law, 5741-1981), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)

To exercise these rights, contact your therapist directly.

7. Data retention

Your data is retained for as long as your patient record is active. Archived records are preserved as required by applicable law. Audit logs are retained indefinitely for security purposes.

8. Contact

For questions about this privacy policy or your data, contact your therapist or reach us at the email address provided during onboarding.