🏥  Clinic Portal Features: Manage appointment slots, receive clinic-visit requests from patients in your area, showcase your team, and track revenue.
💳  After 30 days — Clinic Plan ₹1,599/mo (includes up to 10 physio seats)
🔒  Note: Clinic accounts do not receive home visit requests. Home visits are ring-fenced for individual physios.

1. Who We Are

PhysioKer is a physiotherapy marketplace platform connecting patients with registered physiotherapists in Kerala. "We", "us", or "our" refers to PhysioKer. "You" refers to any patient, physiotherapist, or clinic using this platform.

2. What Data We Collect

Patients: Full name, phone number, district, locality, health complaint description, preferred visit time, session ratings you submit voluntarily, and — only if you tap "Locate Me" when submitting a home-visit request — your precise location at that moment, used to show you accurate distances to nearby physiotherapists.

Physiotherapists: Full name, phone number, district, locality, professional registration ID (KAPC/IAP/NCAHP), KUHS roll number (for fresh graduates), specialisation, years of experience, clinic name, registered work-location coordinates (captured the same way, for the same distance-display purpose — see Section 6), and subscription status.

Clinics: Clinic name, registration number, contact person, phone, district, locality, physiotherapist count, services offered, and subscription status.

Technical data: Device fingerprint hash (for fraud prevention only — not linked to identity), session logs, and audit events.

What we do NOT collect: continuous or background location tracking, payment card details (handled by Razorpay directly), or any biometric data. Every location we do capture is tied to a specific action you or your physiotherapist takes — see Section 6 for exactly when and why.

Browser storage: This app uses your browser's localStorage and sessionStorage to remember your session state, improve performance, and (for physiotherapists and clinics) store earnings and revenue data locally for cross-device sync. A one-way hashed device fingerprint is stored for fraud prevention. You can clear this data at any time by clearing your browser data or signing out.

3. Why We Collect It (Purpose)

We collect only what is necessary to:

• Match patients with physiotherapists nearby, and show accurate distances when you choose to share your precise location
• Verify physiotherapist professional credentials before allowing patient-facing profiles
• Process subscription payments for physiotherapist and clinic plans
• Detect and prevent fraudulent account creation
• Comply with applicable law

4. How We Protect Your Data

All data is transmitted over TLS 1.3. Our database provider (Supabase) applies AES-256 encryption at the infrastructure level — your data is encrypted at rest on Supabase-managed servers. Database access is further protected by Row-Level Security (RLS) policies — physiotherapists can only access data for their own assigned patients, not any other patient's data. Patient PINs are stored as one-way SHA-256 hashes and are never recoverable.

Clinical notes (SOAP format) are stored in a restricted table and are accessible only to the physiotherapist who created them. Patients cannot access clinical notes.

5. Who We Share Data With

We share the minimum necessary data with:

• Supabase (database hosting — data is stored on Supabase-secured infrastructure; Supabase is SOC 2 Type II certified)
• Razorpay (payment processing — they receive only what is required to process your subscription, never your health data)
• SMS / OTP provider (when OTP verification is enabled — they receive only your phone number for the duration of the verification. The specific provider will be named here when this feature is active.)
• Assigned physiotherapist — when you submit a request, your name, district, locality, and health complaint are shared with the physio who accepts your case
• A physiotherapist's own emergency contact — only if that physiotherapist presses the in-app SOS button, their location and the time are sent to the contact they've designated, so help can reach them quickly

We never sell your data. We never share your data with advertisers.

6. Location Data

PhysioKer never tracks your location in the background. Every location capture is tied to a specific action you or your physiotherapist takes:

Finding you a physio, and showing distance: Which physiotherapists get notified about your request is based on your pincode, taluk, and district — not exact coordinates. Separately, if you tap "Locate Me" when submitting a home-visit request, your browser may share your precise location with us. We only keep this reading if it falls inside Kerala and is accurate enough to trust; otherwise we fall back to the centre-point of the pincode you typed, and discard the untrustworthy reading entirely. Either way, this location is used solely to show you real distances to physiotherapists who show interest in your case (e.g. "2.3 km away"), is never shared outside PhysioKer, and is always optional — the app works fine from a typed pincode alone. Physiotherapists' registered work location is captured and used the same way.

After a physiotherapist accepts your case: you may separately choose to share your live location directly with them via Google Maps (a temporary link that expires — this never touches PhysioKer servers).

Physiotherapist SOS button: if a physiotherapist presses the in-app emergency SOS button, we attempt to capture their GPS coordinates at that moment and log them — along with the time and their emergency contact's number — to our internal safety audit log, and send that location to their emergency contact on WhatsApp. This exists solely to create a verifiable record of where and when a genuine emergency was triggered, and to get help to the physiotherapist as fast as possible. It only fires when a physiotherapist actively presses SOS.

7. Your Rights Under DPDP Act 2023

As a data principal under India's DPDP Act, you have the right to:

• Access — request a copy of all personal data we hold about you
• Correction — request correction of inaccurate personal data
• Erasure (Right to Delete) — request deletion of your account and all associated personal data. To exercise this right, contact us at the address below. We will complete deletion within 30 days.
• Grievance redressal — lodge a complaint if you believe your data has been mishandled

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law (e.g. transaction records for GST compliance, which are retained for 7 years per Indian tax law).

9. Children

PhysioKer is not intended for use by persons under the age of 18. If a parent or guardian is booking on behalf of a minor for paediatric physiotherapy, the adult's account is used and the adult is the data principal.

10. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be communicated via email to registered users at least 7 days before taking effect.

11. Contact / Grievance Officer

For data requests, deletion requests, or complaints:

1. What PhysioKer Is

PhysioKer is a marketplace platform that connects patients seeking physiotherapy with registered physiotherapists and clinics in Kerala, India. PhysioKer is a technology intermediary — we facilitate the connection but we are not a healthcare provider, and we do not employ physiotherapists.

2. Eligibility

You must be 18 years or older to register an account. By registering you confirm that all information you provide is accurate and truthful. Creating an account with false professional credentials is grounds for immediate permanent ban and may constitute fraud under applicable Indian law.

3. Physiotherapist Obligations

By registering as a physiotherapist you confirm that:

• You hold a valid BPT/MPT degree from a recognised university
• You are registered with KAPC, IAP, NCAHP, or equivalent state council (or are a verified KUHS fresh graduate awaiting registration)
• You will only accept cases within your scope of competence
• You will maintain professional conduct with patients at all times
• You are solely responsible for the clinical care you provide — PhysioKer bears no clinical liability
• You will not share patient data obtained through PhysioKer with third parties
• You are an independent professional, not an employee, agent, or representative of PhysioKer, and you agree to indemnify and hold PhysioKer harmless from claims, damages, or liabilities arising from the physiotherapy services you deliver

PhysioKer reserves the right to suspend or terminate any physiotherapist account where patient complaints are substantiated or credentials are found to be fraudulent.

4. Clinic Obligations

By registering as a clinic you confirm that:

• Your clinic registration number and business details are accurate and current
• You are responsible for verifying and supervising the conduct of every physiotherapist and staff member operating at your premises, in addition to any verification PhysioKer independently performs
• You will maintain a safe, appropriately equipped physical premises for patient care
• You are solely responsible for the clinical care provided at your premises, the conduct of your staff, and the safety and condition of your facility — PhysioKer bears no liability for any of these
• You are an independent business, not an employee, agent, or representative of PhysioKer, and you agree to indemnify and hold PhysioKer harmless from claims, damages, or liabilities arising from services delivered, or conditions present, at your premises

PhysioKer reserves the right to suspend or terminate any clinic account where patient complaints are substantiated or registration details are found to be fraudulent.

5. Patient Obligations

Patients agree to provide accurate health information, to treat physiotherapists with respect, and to confirm appointments once accepted. Repeated no-shows may result in account suspension.

6. Subscriptions, Cancellation and Refunds

Physiotherapist and clinic plans are subscription-based, billed monthly via Razorpay. A 30-day free trial is provided with no payment information required.

Cancellation: You may cancel your subscription at any time from your dashboard (Subscription tab → Cancel Plan). Cancellation takes effect at the end of your current billing cycle. You retain full access until that date. No partial-month refunds are issued after a billing cycle has started.

Refunds: If you are charged in error (e.g. after cancelling before renewal), contact us within 7 days at support@physioker.in and we will refund the incorrect charge within 5–7 business days. Trial periods that are unused do not qualify for refunds as no payment is taken during the trial.

Account suspension: If your account is suspended for Terms violations, no refund is issued for the remaining subscription period.

7. PhysioKer Is Not a Medical Service

PhysioKer does not provide medical advice, diagnosis, or treatment. The platform is a technology intermediary only. All clinical decisions are made solely by the registered physiotherapist you engage. See our Medical Disclaimer for full details.

8. Responsibility for Clinical Care and Limitation of Liability

8.1 Clinical care. Clinical care is the sole responsibility of the treating physiotherapist and, where applicable, the clinic at which care is delivered. PhysioKer is a technology intermediary that facilitates the connection between patients and independent physiotherapists and clinics; PhysioKer does not itself provide, supervise, or control the clinical care delivered, and is not a party to the clinical relationship between a patient and their treating physiotherapist or clinic. PhysioKer bears no liability for any clinical outcome, injury, or harm arising from physiotherapy services delivered by a physiotherapist or clinic through the platform, or for the safety or condition of any clinic's premises.

8.2 PhysioKer's own liability. For matters that are PhysioKer's own responsibility as a platform operator — including errors in the operation of the platform itself, or a breach of PhysioKer's data security obligations under these Terms and our Privacy Policy — PhysioKer's liability to any user is limited to the greater of ₹10,000 or the amount paid by that user to PhysioKer in the 3 months preceding the claim. This limitation does not apply to harm caused by PhysioKer's own fraud, gross negligence, or wilful misconduct.

9. Prohibited Conduct

Users must not: create fake accounts, impersonate another person, submit false health information, harass other users, attempt to bypass the platform to avoid subscription fees after being matched, or use the platform for any purpose other than legitimate physiotherapy service delivery.

10. Termination

You may delete your account at any time. PhysioKer may terminate accounts that violate these Terms with or without notice. Upon termination, your data is handled per the Privacy Policy.

11. Governing Law

These Terms are governed by the laws of India. Any disputes shall be subject to the jurisdiction of courts in Palakkad, Kerala.

12. Contact

1. PhysioKer Is a Technology Platform, Not a Medical Service

PhysioKer is a digital marketplace that connects patients with registered physiotherapists. PhysioKer does not provide medical advice, diagnoses, prescriptions, or treatment of any kind. The information you enter into this platform (health complaint, symptoms, history) is used solely to match you with an appropriate physiotherapist — it is not reviewed or interpreted by PhysioKer.

2. No Doctor-Patient Relationship

Using PhysioKer does not create a doctor-patient relationship between you and PhysioKer. A professional relationship is established only between you and the physiotherapist you engage through the platform — and only from the point that the physiotherapist accepts your case and makes direct contact with you.

3. Physiotherapy Is Not a Substitute for Medical Diagnosis

Physiotherapy is a regulated health profession. However, for certain conditions — including but not limited to unexplained pain, neurological symptoms, post-surgical complications, or conditions involving internal organs — physiotherapy should be undertaken only after a proper medical diagnosis by a qualified doctor (MBBS or equivalent). If you are unsure whether your condition requires medical diagnosis before physiotherapy, please consult a doctor first.

Physiotherapists registered on PhysioKer are responsible for assessing whether physiotherapy is appropriate for your condition and referring you to medical care if necessary.

4. Individual Results Vary

Physiotherapy outcomes depend on many factors including the nature and severity of the condition, patient compliance with prescribed exercises, underlying health conditions, and individual physiology. PhysioKer makes no guarantee regarding treatment outcomes. Ratings and reviews on the platform reflect patient experience and should not be interpreted as medical endorsements.

5. Verification of Credentials

PhysioKer takes reasonable steps to verify that physiotherapists registered on the platform hold the credentials they claim. However, PhysioKer cannot guarantee the accuracy of all submitted credentials. Patients are encouraged to ask physiotherapists to present their registration ID/certificate at the first session. If you suspect a physiotherapist has provided false credentials, report it immediately via the platform's complaint mechanism.

6. Clinical Notes Confidentiality

Clinical notes created by physiotherapists during your treatment are encrypted and visible only to your physiotherapist. They may be transferred to a new physiotherapist if your case is transferred, with audit logging of the transfer. Patients do not have direct access to clinical notes — this is consistent with standard healthcare practice and is for your protection.

7. The Urgent Flag

The 🚨 Urgent flag on the patient registration form is intended for acute pain, immediate post-surgical situations, or mobility emergencies requiring prompt physiotherapy assessment. It is not a substitute for emergency medical care. If you are in acute distress, call 112 or visit your nearest hospital before booking a physiotherapist.

8. Acceptance

At registration, you separately confirm — via a dedicated checkbox distinct from the general data-consent statement — that you understand the physiotherapist or clinic you choose, not PhysioKer, is solely responsible for your treatment. That confirmation, together with your use of PhysioKer, constitutes acceptance of this Medical Disclaimer in full.