Privacy

Deliberately very little. Positura is built to be an exercise-delivery tool, not a medical record, so your clinic can only enter:

• Your first name and last initial.
• Your timezone, so “today” means today where you are.
• The exercises your clinician prescribed, and the sets you tick off.
• If you turn on reminders: the time you chose, and an anonymous identifier for the device that should receive them.

The app has nowhere to put a diagnosis, a date of birth, a surname, or clinical notes about you — those fields do not exist. Since 2 September 2026 it has nowhere to put your phone number or email address either: we removed those fields, because reminders go to your device and never to a number or an inbox, so we had no use for them. Your clinician keeps all of that in their own records, not here.

Only to deliver your exercise program and to show your clinician whether the program is working. Concretely, that means:

• Showing you today’s exercises, and remembering the sets you have finished.
• Sending the daily reminder you asked for, if you turned reminders on.
• Showing the clinic that prescribed your program how you are getting on, so they can adjust it.
• Counting how the app is used, so we can tell whether it is actually helping people.
• Keeping the service running and secure.

We do not use your information for marketing of any kind — not ours, not your clinic’s, not anyone else’s. We do not sell it, rent it, trade it, or hand it to advertisers or data brokers, and nobody is permitted to use it to build a profile of you or to follow you around other websites. We do not use it to train machine-learning models. If that ever changes, it will not change quietly: we will say so on this page and ask you first.

• The clinic that added you — its practitioners can see your program and your progress.
• Us, only as needed to run and fix the service.
• The companies that run the service on our behalf, strictly to provide it (our database, hosting, error-monitoring and product-analytics providers). They are not permitted to use your information for their own purposes.
• Anyone you choose to show it to — your program page opens without a password, so treat the link as private.

You do not have an account with Positura. Instead your program lives at a long, randomly generated web address that only you and your clinic have. That means one less password to keep, but it also means anyone holding the link can open your program — so avoid posting it anywhere public. If you think your link has got out, ask your clinic to issue you a new one.

Program pages are marked so that search engines do not list them.

If the app breaks while you are using it, it sends us a technical report so we can fix it — what the error was, roughly where in the app it happened, what kind of phone and browser you were using, and the general area you were in, which our error-reporting provider works out from your internet connection. That last one is a town or region, never a street or an address.

A crash report does not include your name, your exercises, or a picture of your screen — and it does not include your link. The address is stripped down to a placeholder before the report leaves your phone, so a crash report cannot be used to open your program.

We need to know whether Positura actually helps — how many people open their program at all, and how many are still ticking exercises off a fortnight later. Those numbers are worked out inside our own system, from the records described above, and they are counted up before anyone looks at them.

Nothing about you is sent to an analytics company. Not your name, not a code standing in for you, not a record that you opened your program. We do use an outside analytics service, but only to understand how the clinics use the app — how long it takes a practitioner to write a program, how often they check their dashboard, and totals such as “how many of this clinic’s patients have reminders switched on”. Those totals are counts across a whole clinic. They are never a record of what any one person did, and there is no reference number, code or identifier for you in any of them.

We built it this way on purpose. An earlier version would have sent a random reference number for each patient, which is a common and perfectly ordinary way to do this — but it would have meant a third party holding a record of one person’s activity over time, and we would rather hold that ourselves and tell you plainly that we do.

Reminders are push notifications only — Positura does not send you marketing emails or text messages, because it cannot send emails or text messages at all. Reminders are off until you switch them on, they only ever say that your exercises are waiting, and you can turn them off from the bottom of your program page at any time.

Your program and your completion history are kept while you are a patient of the clinic, so that you and your clinician can see progress over time. Ask your clinic to remove you and your record goes with it.

• You can ask your clinic what is held about you, ask for it to be corrected, or ask for it to be deleted.
• You can turn reminders off without affecting anything else.
• You can simply stop opening the link — nothing is collected from a page you do not open.

Depending on where you live you may have further rights over your information. This section will be completed once this page has been reviewed by an attorney.

If we change how any of this works, we will update this page and change the date at the top.

For anything about your own record, contact the clinic that gave you your link — they hold your details and can change or delete them. For anything about Positura itself, write to privacy@positura.co.