On this page
This policy explains how we handle consumer health data — information that identifies your past, present or future physical or mental health status.
This is separate from our general Privacy Policy, which covers everything else we collect.
The Scoliosis Solution is a program of Nsite, Inc., a Delaware corporation headquartered in California and qualified to do business in California as a foreign corporation, doing business as MyBackHub (“we,” “us,” “our”).
It applies to everyone who uses our programs. For residents of Washington, Nevada and Connecticut, it provides the specific disclosures those states require.
1What we treat as consumer health data
Not everything we collect is health data. These are the categories that are:
| Category | What it includes |
|---|---|
| Your spinal condition | That you have scoliosis or another spine condition. Your curve type, where your convexities and concavities sit, and your curve degree where you tell us |
| Pain and symptoms | Which positions cause you pain. Descriptions of your pain or mobility limits. Pain ratings |
| Position tolerance | Which positions — standing, sitting, lying down, supine, hanging — you can comfortably tolerate |
| Exercise response | Which exercises you started and completed, how long you watched, how each felt immediately afterward — Good, Okay, Painful, or couldn’t do it, with the reason — what you chose to do next after a painful rating, and how you felt the following morning, including what you think caused it |
| Pain measurements | A pain rating before each session and again after it. On days you report high pain, whether you chose a gentler session, the session as planned, or rest. Every two weeks, a rating for each of your goal areas and your back pain on average and at its worst over the previous seven days |
| Symptoms you report | Anything you tell us at check-in, including symptoms that prompt our team to follow up with you |
| Adherence | Practice days against planned days, days missed, and which routine you follow |
| Journal | Anything you write in your journal |
| Program stage | Which stage of the program you’re in, and when you moved up |
| Medical records you give us | X-ray reports and images. Surgical history, including spinal fusion. Other conditions you tell us about, such as osteoporosis |
| Body images | Photographs of your back, which you provide for the Curve Specific Program |
| Session recordings | Video recordings of one-to-one coaching sessions, in which you and your Scoliosis Expert discuss your condition |
| Session notes | What your Scoliosis Expert records about your program |
| Bone health research responses | Your answers to the Bone Health Assessment, if you choose to take part |
| Inferences | Which exercises our programs select for you, which reflects what we’ve learned about your body |
We do not collect: precise location data, biometric identifiers for identification purposes, genetic data, or data about reproductive health, gender-affirming care, or substance use.
2Where it comes from
- Directly from you — what you enter, upload, say on a call, or write in the community
- From your use of our programs — which exercises you complete and how you rate them
- From our Scoliosis Experts — notes from your sessions
- From a healthcare provider, only when you give it to us or ask them to send it
We do not buy consumer health data, and we do not obtain it from data brokers or advertising platforms.
3What we use it for
To deliver the program you bought. Your ratings, pain scores and progress are what the program uses to decide what to show you next. It also builds your Curve Specific Program and prepares your Scoliosis Expert for your sessions.
To show you your own progress. Your pain over time, your goal areas, your history and your journal are visible to you in My Progress.
To alert our team when something needs attention. If you report certain symptoms at check-in, our support team is notified so someone can follow up with you. If you rate a core exercise as painful or say you couldn’t do it, that’s flagged for our team as well.
To support you. Answering your questions, helping when something isn’t working.
To improve our programs, using combined figures across all members with no names attached.
For the Bone Health research study, only if you’ve given separate written consent for that specific purpose.
That’s the complete list.
4What we never do with it
We never sell consumer health data. Not to anyone, for any price or other valuable consideration.
We never share consumer health data with advertising or analytics platforms. No third-party advertising or analytics trackers run inside our member platform — no Meta pixel, no third-party analytics, nothing that reports your activity to an outside company.
We do measure how you use the program in our own systems, in the detail set out in section 1. That measurement is what makes the program adapt to you. It is stored in our secure health database and never leaves it for advertising purposes.
We never use it to make decisions about your membership, your pricing, or what we offer you commercially.
We never share it with employers, insurers or credit agencies.
6Gardner Medical Corporation — the separation
Nsite, Inc. operates consumer wellness programs. It does not provide medical care.
Gardner Medical Corporation is a separate medical practice that provides clinical services, including services that may be billed to insurance or Medicare.
The two are operated separately, and your consumer health data does not move between them.
If you want clinical evaluation, you can ask us, and we’ll explain what’s involved. Nothing is transferred unless you sign a separate written authorization that names exactly what information will be shared, with whom, and for what purpose. You can decline, and declining changes nothing about your membership.
Information does not flow back. Anything you share with Gardner Medical Corporation as a patient stays there. It isn’t used for our programs, our marketing, or anything else.
7Your rights
Everyone who uses our programs has these rights, regardless of where you live:
Know what we hold. Ask for a list of the consumer health data we have about you, and a list of everyone we’ve shared it with. We’ll respond within 45 days.
Delete it. Ask us to delete your consumer health data and we will — including from our backups, within the timeframe the law allows — and we’ll tell our service providers to do the same. We’ll confirm when it’s done.
Withdraw consent. You can withdraw consent for any collection or sharing you previously agreed to, including the Bone Health study, at any time and without giving a reason.
No retaliation. We won’t deny you service, charge you differently, or reduce what you get because you exercised any of these rights.
How to ask: email [email protected], or write to us at the address in section 11. If you ask someone to act for you, we’ll need written confirmation that you authorized them.
If we decline a request, we’ll tell you why, and you may ask us to reconsider by replying to our response. We’ll review and respond within 45 days.
8How long we keep it
| Program answers, exercise ratings and pain measurements | While your account is active, then 3 years |
|---|---|
| Journal entries | While your account is active, then 3 years |
| X-ray reports and back photographs | 3 years |
| Session recordings and notes | 3 years |
| Bone Health responses | Until the date on the consent screen, then deleted |
You can ask us to delete any of it sooner.
9How we protect it
Encryption in transit and at rest. Access limited to people who need it to deliver your program. Written agreements with every provider who processes it for us, restricting what they may do with it.
If there’s a breach affecting your consumer health data, we’ll notify you as the law requires.
10State-specific rights
Washington residents
This section is provided under the My Health My Data Act.
You have all the rights in section 7. In addition:
We will not collect or share your consumer health data beyond what’s necessary to provide the service you asked for without your consent.
We will never sell your consumer health data. If that ever changed, it would require your separate, specific written authorization, and we would have to tell you exactly what was being sold and to whom.
To exercise your rights: email [email protected], or write to the address in section 11.
If you believe we’ve violated this Act, you may contact the Washington Attorney General at atg.wa.gov.
Nevada residents
Under Nevada law, you have the right to know what consumer health data we collect, to have it deleted, and to withdraw consent for its collection or sharing. We do not sell consumer health data, and would not do so without your separate written authorization.
To exercise these rights, email [email protected].
Connecticut residents
Under the Connecticut Data Privacy Act, you have the right to access, correct, delete and obtain a copy of your consumer health data, and to opt out of its processing for targeted advertising, sale or profiling. We do not sell consumer health data and do not use it for targeted advertising.
To exercise these rights, email [email protected]. If we decline, you may appeal by replying to our response, and we’ll reconsider within 60 days.
11Contact
Email: [email protected]
Post: Nsite, Inc.
1259 El Camino Real, Unit #1066
Menlo Park, CA 94025
Phone: (650) 385-8859
12Changes
We’ll post any updated version here and change the date above. If a change materially affects how we handle your consumer health data, we’ll email you before it takes effect, and where the law requires consent, we’ll ask for it rather than assume it.