Privacy Policy

1The short version

• We collect what you tell us and what the program observes as you use it
• Some of what we collect is health information, covered by our separate Consumer Health Data Privacy Policy
• We never sell your personal information
• We use advertising and analytics cookies on our public website, which involves sharing limited information with Meta. You can opt out
• No third-party trackers inside the member platform. We do measure how you use the program in our own systems — that’s how your recommendations adjust
• You can ask us for your data or ask us to delete it, any time

2What we collect

You give us

We record

Curve Specific Program sessions are recorded on video, so you can review them afterward. These recordings contain discussion of your condition.

What the program records as you use it

The program measures how you’re getting on, in detail. This is how it works — it’s what lets your recommendations adjust to you.

Some of this is flagged for a person to look at. If you report certain symptoms at check-in, our support team is alerted so someone can follow up with you. If you rate a core exercise as painful or say you couldn’t do it, that’s flagged for our team too.

Collected automatically

IP address, approximate location derived from it, device and browser type, pages visited, time spent, referring site, and similar diagnostic data.

3Health information

Some of what we collect is health information about you. Where your curve sits, which positions cause you pain, how you rate each exercise, your X-ray report, your back photograph, your session recordings, and your Bone Health answers if you provide them.

It’s governed by our separate Consumer Health Data Privacy Policy, which explains what we treat as health data, what we never do with it, and the rights you have over it.

Three things worth saying here:

• It is never shared with advertising or analytics platforms. No such tracking runs inside the member platform at all
• It is never sold
• It never moves to Gardner Medical Corporation unless you ask and sign a separate authorization

The Bone Health Assessment is different, because it’s research. Before you begin, you’re shown exactly what’s collected, what’s shared, with whom, and for how long — and you give separate consent. Nothing else about your membership depends on it, and you can withdraw any time by emailing us.

4What we use it for

• Delivering your program — your ratings, your pain scores and your progress are what the program uses to decide what to show you next
• Showing you your own progress — your pain over time, your goal areas, your history and your journal are visible to you in My Progress
• Alerting our team when you report symptoms that need a person to follow up
• Running your account, your payments and your sessions
• Support
• Improving the Services, using combined figures across all members with no names attached
• Telling you about our own programs, where you’ve agreed to hear from us
• Meeting legal obligations

We do not use health information to make decisions about advertising to you.

5Cookies and tracking

On our public website

Advertising cookies involve sharing limited information with Meta. That information tells Meta that someone visited our site or completed a purchase. Under California law this counts as “sharing” for cross-context behavioral advertising — see section 10.

You can opt out through the cookie banner on our site, or through your browser settings.

Inside the member platform

We don’t use third-party advertising or analytics trackers inside the member platform. No Meta pixel, no third-party analytics, nothing that reports your activity in the program to an outside company.

We do measure how you use the program, in detail, in our own systems — see section 2. That measurement is what makes your recommendations adjust to you, and it stays with us.

It’s stored in our secure health database, used to deliver and improve your program, and never shared with advertising platforms.

6Who we share it with

We don’t sell your personal information.

Service providers who help us operate. They may only use your information to provide that service to us:

The Bone Health study funder, if you take part — and only in a form that doesn’t identify you. Your name, email and phone are never shared. The consent screen states this before you begin.

When the law requires it, or to protect someone’s safety.

If the business is sold or merged. We’ll tell you before your information moves to a different policy.

Anyone you tell us to.

7Gardner Medical Corporation

Nsite, Inc. operates consumer wellness programs. Gardner Medical Corporation is a separate medical practice providing clinical services, which may include services billed to insurance or Medicare.

They are operated separately, and your information does not move between them.

If you want clinical evaluation, ask us and we’ll explain what’s involved. Nothing is transferred unless you sign a separate written authorization naming exactly what will be shared, with whom, and why. Declining changes nothing about your membership.

Information does not flow back. What you share as a patient of Gardner Medical Corporation stays there. It isn’t used for our programs or our marketing.

8How long we keep it

Ask us to delete your data at any time and we will, except where we’re legally required to keep something.

9Your choices

Your data. Ask us for a copy any time.

Deletion. Ask us to delete it. We’ll confirm when it’s done.

Corrections. Tell us and we’ll fix it.

Marketing. Unsubscribe from any email. Reply STOP to any text. You’ll still get messages about your account and your sessions.

Cookies. See section 5.

The Bone Health study. Withdraw any time, no reason needed.

[email protected] for any of it. We don’t treat you differently for asking.

10California residents

This section is provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

What we collect, and why

Sources: directly from you, automatically from your use of the Services, and from our Scoliosis Experts.

Sensitive personal information

Health information is sensitive personal information under California law. That includes your spinal condition, your symptoms, your pain, your exercise responses, your X-ray report, your back photograph and your session recordings.

We use it only to deliver the Services you asked for. We don’t use or disclose it for any purpose that would trigger your right to limit — but you may still Limit the Use of My Sensitive Personal Information by emailing [email protected].

Selling and sharing

We do not sell personal information.

We do share personal information for cross-context behavioral advertising — specifically, identifiers and internet activity shared with Meta through advertising cookies on our public website. This does not include health information.

You can opt out: Do Not Sell or Share My Personal Information — use the cookie banner on our site, or email [email protected].

We honor Global Privacy Control signals.

Your rights

To know what we’ve collected, used, disclosed and shared in the past twelve months. To delete what we hold. To correct anything inaccurate. To opt out of sharing for advertising. To limit the use of sensitive personal information. To non-discrimination — we won’t deny you service, charge you differently, or give you less because you exercised a right.

How to ask: email [email protected], or write to the address in section 17. We’ll confirm within 10 business days and respond within 45 days, extendable once by a further 45 with notice.

We’ll verify who you are before acting, usually by confirming details already on your account.

Authorized agents may act for you with your written permission; we may ask you to confirm directly.

Appeals. If we decline a request, we’ll tell you why and how to ask us to reconsider.

11Residents of other states

Washington, Nevada and Connecticut: see our separate Consumer Health Data Privacy Policy, which provides the disclosures and rights those laws require for health information.

Virginia, Colorado, Utah, Texas, Oregon, Montana and other states with consumer privacy laws: you have rights to access, correct, delete and obtain a copy of your personal data, and to opt out of targeted advertising and the sale of personal data. We don’t sell personal data. To exercise any of these rights, email [email protected]. If we decline, you may appeal by replying to our response, and we’ll reconsider within 60 days.

12Security

We protect your information with encryption in transit and at rest, access controls limiting who can see what, and written agreements with the providers who process data for us.

No system is perfectly secure, and we can’t guarantee absolute security. If there’s a breach affecting your information, we’ll notify you as the law requires.

13Children

The Services are for adults. We don’t knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we’ll remove it.

14Where your information is held

Your information is processed in the United States. The Services are intended for people in the United States.

15Other sites

We link to other sites sometimes. Their privacy policies are theirs, not ours.

16Changes

We may update this policy. We’ll post the new version and change the date above. For material changes we’ll email you before they take effect.

17Contact us