Terms of Service for PhysioAI EMR

These terms cover PhysioAI EMR mobile + web + related services (Patients, SOAP, Assessments, Appointments, Home visits, Protocols, Prescriptions, Home programs, Invoices/Payments/Revenue, Communications, Alerts, Availability, Public profile, Voice intake), operated by Auraflex.

By accessing EMR you agree to these Terms and the EMR Privacy Policy. If you do not agree, do not use EMR. You must be a licensed physiotherapist (or supervised trainee where lawful) and 18+.

Single-therapist, limited, non-exclusive, non-transferable, revocable license to use EMR for your own clinical practice. One Auth user = one therapist; do not share credentials or allow cross-clinic access (RLS enforces therapist_id isolation).

• No copy, modify, distribute, sell, lease, reverse-engineer, decompile, scrape, or extract models/prompts, including voice-intake extraction logic.
• No bots/scraping, no unlawful use, no removal of proprietary notices.

You are the clinician. EMR is a documentation aid, not a decision-maker. Voice-intake transcripts/extractions can mis-hear — you must review before saving to patient record / SOAP. BBS scores, fall-risk alerts, protocol suggestions require your independent clinical judgment.

You retain full liability for diagnosis, treatment, referrals, and red-flag escalation. Auraflex is processor for patient data, never the treating clinician.

• Consent before entry (DPDP §6): free, specific, informed, unconditional consent per patient before entering data; separate recording consent for voice. Use our Patient Notice template.
• Notice (§5): show what data, purpose, rights, Board complaint path, in English / Eighth-Schedule language.
• Withdrawal: honour promptly; suppress comms within 72h best-effort; cease + cause processors to cease.
• Under-18: verifiable parental/guardian consent; no tracking/ads to children.
• Emergency/epidemic (§7(d)(e)): only lawful non-consent grounds — document the ground.

• Clinical records: care + 3 years (MCI rule). Billing/ledger: 8 years FY-end. Voice audio: 30 days unless saved. See Privacy §11.
• Export / hand over before deleting. Deletion is irreversible and does not transfer your statutory record duty to us. Details: EMR Delete Account.
• Soft-delete for patients; RESTRICT guards prevent accidental clinical/financial cascade.
• You may delete your workspace anytime via Profile/Settings → Delete Account or support@physioai.in — completed within 30 days, except legal minima + anonymised aggregates.

• Freemium; paid tiers via Apple App Store / Google Play processed by RevenueCat. We never see full card/UPI numbers.
• Billed in advance monthly/annual. Refunds case-by-case within 7 days via support@physioai.in; store-mandated / statutory rights unaffected.
• Price changes with 30 days notice; continued use = acceptance, else cancel before renewal.
• Deleting app/account alone does not cancel auto-renew — cancel in store.

Auraflex retains all IP in EMR: code, design, trademarks, exercise library snapshots, protocol templates, voice pipeline. Prescription snapshots (names/sets/reps) survive library updates but remain our IP. No trademark use without permission.

No illegal content, no third-party PHI you have no right to process, no abuse/harassment, no spam/malware, no misleading records. We may remove violating content, suspend repeat violators, cooperate with law enforcement. Report to support@physioai.in; appeals get reasons within reasonable period.

Content you publish (public profile) must be public-safe only — never patient/clinical/billing data.

• Supabase · RevenueCat · Apple / Google · Expo/EAS · Amplitude · Sentry · Intercom · LiveKit · ElevenLabs · Corti (transcription) · Fireworks / OpenRouter (extraction) · Upstash Redis — each with own terms/privacy (see EMR Privacy §8).

No liability for third-party content inaccuracies or loss from relying solely on third-party data via EMR.

• Internet required for sync; you bear data/roaming charges.
• Keep device charged, OS + app updated; no jailbreak/root; MDM remote-wipe recommended for BYOD.
• We may cease/alter EMR anytime; on termination licenses end, you must stop use + delete copies unless told otherwise.

To fullest extent permitted by law, no indirect/incidental/special/consequential/punitive damages (lost profits, data loss, interruption). Cap: amount paid in 3 months preceding claim, or minimum required by law. Free tier: minimum permitted. Full liability retained for death/personal injury by negligence, fraud, or non-excludable liability.

You indemnify Auraflex/officers/employees for claims from your breach, intentional misuse, or unlawful patient-data processing (e.g. no consent). Not for our negligence/breach. Consumer limits apply to maximum permitted extent.

Suspension on material breach with notice + 14 days to cure where curable; immediate for illegality, IP infringement, or harm to users/third parties/us. On termination your EMR access ends; statutory retention (§5) and IP/liability/law clauses survive.

Laws of India (excluding conflicts), courts in Maharashtra, without limiting mandatory consumer-court rights. EU DSA contact where applicable: support@physioai.in.

Material changes posted here with new date (+ in-app/email notice); continued use = acceptance; fresh consent where law requires. Prior versions on request. These Terms + EMR Privacy Policy = entire agreement for EMR, superseding prior understandings.