Legal

Privacy Policy

Last updated November 8, 2026

1. Who we are

Empower Your Practice ("we", "us") makes Empower Practice OS, a practice dashboard for chiropractic and wellness clinics. We're based in Texas and run by the team behind Empower Chiropractic. This policy covers our website, empoweryourpractice.co, and our app at empowerpracticedashboard.com (together, the "Service").

Questions? Email hello@empoweryourpractice.co.

2. Information we collect

On our website

• What you send us: your name and email when you request the free checkup, book a demo or email us.
• Basic technical data: our hosting provider keeps standard server logs (IP address, browser type, pages requested) to deliver the site and stop abuse.
• We don't use advertising trackers or analytics cookies on the website. If you play an embedded demo video, the video provider (for example YouTube, Vimeo or Loom) may set its own cookies under its own policy.

In the app

• Account information: your name, email, practice name and password (stored only as a secure hash).
• Practice data your team enters: daily stats, visit and collection numbers, goals, financial figures, staff and provider names, timesheets and settings.
• Patient information your team enters: for example patient names, care plan details, visit status and notes. We call this "Patient Data." Some of it is protected health information (PHI) under HIPAA.
• Usage data: sign-in times and basic activity, used to keep accounts secure and to support you.

3. How we use information

• To provide, maintain and secure the Service, and to support your practice.
• To send account emails such as sign-up confirmations, password resets and service notices.
• To send the resources you ask for. If you join our email list, you can unsubscribe any time.
• To improve the Service. When we look at trends across practices, we use data that has been combined and stripped of anything that identifies a practice or a patient.

We never sell personal information, never use Patient Data for marketing, and never share your practice's numbers with another practice.

4. Patient Data and HIPAA

When a practice that is a HIPAA covered entity uses the app, the practice controls its Patient Data and we process it on the practice's behalf as a business associate. We use and disclose Patient Data only to provide the Service and as our Business Associate Agreement (BAA) and the law allow. Practices that need a BAA can request one at hello@empoweryourpractice.co before entering Patient Data.

If you're a patient of a practice that uses our app, please contact that practice about your information. We'll help them respond.

5. Who we share information with

We share information only with service providers that help us run the Service, under contracts that require them to protect it:

• Supabase: database, sign-in and account emails.
• Cloudflare: website and app hosting and security.
• Google Fonts: loads the website's fonts, which shares your IP address with Google.
• Stripe: handles subscriptions and payments. Card details go straight to Stripe; we never see or store full card numbers.

Integrations you choose to turn on send data where you direct it. For example, the GoHighLevel integration sends patient events to your own GoHighLevel account, and the Claude Connector lets Claude (by Anthropic) read your practice's numbers when you ask it a question. Those services handle data under their own terms.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of our business, in which case this policy and any BAA continue to apply.

6. Security

• Data is encrypted in transit (HTTPS) and at rest.
• Every practice's data is kept separate at the database level, so one practice can never see another's.
• The app signs out automatically after 30 minutes of inactivity and clears its offline copy of daily entries from the device when you sign out.
• Only a small number of our team can access customer data, and only to support you or keep the Service running.

No system is perfectly secure. If we learn of a breach affecting your data, we'll notify you as the law and any BAA require.

7. How long we keep information

We keep your account and practice data while your account is active. If you cancel, you can export your data, and we'll delete it within 60 days of a written request, except where the law requires us to keep it. Backups roll off on their normal schedule. Website signups stay on our list until you unsubscribe or ask us to delete them.

8. Your choices and rights

You can ask to see, correct, export or delete your personal information, or to stop marketing emails, by emailing us. Depending on where you live (for example Texas or California), you may have additional rights under state law. We won't treat you differently for using them. We'll confirm your identity before acting on a request.

9. Children

The Service is built for practice owners and their staff, not for children, and we don't knowingly collect personal information directly from children. Practices may enter information about patients who are minors. That information is Patient Data controlled by the practice and protected as described above.

10. Changes to this policy

If we make important changes, we'll update the date above and let account owners know by email or in the app before the changes take effect.

11. Contact

Empower Your Practice · Texas, USA · hello@empoweryourpractice.co