We do not sell, rent, or trade your information, and we do not share it with anyone for advertising.

A small number of service providers handle data on our behalf, strictly to make the app work, and may not use it for their own purposes:

• Google Cloud — hosts the app's backend and the database that holds your record, as our storage provider.
• Twilio — sends the SMS sign-in code and, if you opt in to text messages, appointment confirmations and reminders. Those messages contain your name, the appointment date and time, the practitioner and the clinic address, and Twilio receives any reply you text back.
• Our email delivery provider — sends appointment confirmations and reminders when you have an email address on file.
• SendGrid — sends clinic news by email only if you turn that on in Settings. It is never used for appointment or health information.
• Google and Apple — deliver push notifications to your device. They receive a notification identifier; a reminder push carries only the appointment time and clinic name.
• Expo — delivers app updates. It receives an installation identifier and your app version.

Your clinical record itself is never shared with any of them. The messaging providers receive only the appointment details needed to send you that message.

Stripe takes the payment when you buy a treatment package in the app. It is listed separately, like Google below, because we have no agreement with Stripe limiting what it may do with what it receives. You type your card number into Stripe's own payment sheet, so the card number reaches Stripe and never reaches us: the clinic does not see it and does not store it. Along with the payment, our servers send Stripe the amount, the name of the package you are buying, the internal reference number we use for your record — and for the booking, if you are paying for a visit — and your email address if we have one, so it can send you a receipt. We do not send your name and we do not send your treatment notes. Stripe's payment sheet also collects device and network details to check for fraud, under Stripe's own terms rather than ours.

Google (Gemini) writes the replies you see in the app's scheduling assistant. We call it from our own servers, not from your phone. It is listed separately because we use Google's ordinary Gemini developer service, and we have no agreement with Google limiting what it may do with what we send — so what we send is kept to the minimum the assistant needs to answer you:

• the message you type, and the last few turns of that same conversation;
• the results of whatever the assistant looks up for you. That is public clinic information — opening hours, branches, practitioners, open appointment times, current promotions and the package price list — and, when you ask about your own account, your points balance and recent points entries, your package names and remaining sessions, and the date, time, clinic and practitioner of your own appointment.

Text that looks like symptoms, a diagnosis or medication is stopped before it reaches Google, and you are asked to phone the clinic instead. We never send your treatment notes, and the assistant is never told about anyone else's appointments or packages.

You can delete your GoTCMHUB account at any time: in the app, Settings → Delete account, or from our account deletion page — no app and no sign-in needed.

Your sign-in, all sessions on every device, your notification tokens, your member code, and your marketing permissions are removed and cannot be restored. Your medical record is retained as described above; we do not use it to contact you.