Privacy policy

Who handles your data

Data controller: [TO CONFIRM — full name of the therapist or the entity, tax ID, address and contact email]. For any question about your data, use that contact.

What data we collect

• Identification and contact: name, email and, if you provide it, phone number.
• Health data: what you write when booking a session, and the clinical notes the therapist records about your care. This is special category data (Article 9 GDPR) and therefore has reinforced protection.
• Bookings and payments: dates, service, amount and payment status. Card details never pass through us — they're handled directly by Stripe.

Legal basis

• Explicit consent (Article 9(2)(a)) for processing health data — this is what you accept when creating an account, and you can withdraw it at any time.
• Performance of a contract (Article 6(1)(b)) to book, charge for and carry out sessions.
• Legal obligation (Article 6(1)(c)) to keep clinical records and tax documents for the required periods.

Who else has access

We use processors to run the service. Each only accesses what it needs:

• Google (Firebase) — database, authentication and server functions. Clinical and appointment data is hosted in the European Union (Belgium). Authentication data (email, phone) is processed on Google infrastructure outside the EU, under the European Commission's standard contractual clauses.
• Stripe — payment processing (entity in Ireland).
• Daily.co — video calls for sessions. Calls are not recorded.
• Resend — sending confirmation, reminder and cancellation emails.
• OVHcloud — hosting for the site's pages (France). Does not receive user data.

We do not sell or share your data for advertising purposes.

How long we keep it

Clinical records: [TO CONFIRM — retention period applicable to speech therapy records in Portugal]. Billing documents: 10 years, under tax obligations. Account data with no associated bookings: deleted on request, with no minimum retention period.

Your rights

You can request access, correction, erasure, restriction or portability of your data, and withdraw consent at any time — without affecting the lawfulness of processing already carried out. To exercise any of these rights, write to the contact above; we respond within one month.

If you believe your data is not being handled as it should be, you can complain to the Portuguese Data Protection Authority (CNPD).

Cookies

This site does not use advertising or traffic-analytics cookies. To keep you signed in, some technical information is stored in your browser — without it, signing in to your account area would not be possible.