Privacy Policy — Bio-Logic for Practitioners

Last Updated: June 24, 2026

Resonant Consulting, LLC ("Company," "we," "us," or "our") respects your privacy and the privacy of the people you serve. This Privacy Policy explains how we collect, use, share, and protect information when you use Bio-Logic for Practitioners (the "Service").

By using the Service, you acknowledge the practices described in this Policy. If you do not agree, do not use the Service.

1. Two Categories of Information — A Critical Distinction

Because the Service is a professional tool, the information involved falls into two very different categories:

Category A — Practitioner Account Information. Information about you, the Practitioner, as the user of the Service. You are the data subject for this information.

Category B — Conversation Content About Your Clients. Information you input describing the people you work with. You are required by our Terms of Service to de-identify this content before submitting it. Our handling of Category B is built on the assumption that you have done so.

This distinction governs how we apply this Policy. Where the law and your obligations create different roles — for example, where you are the "controller" of client information and we are a "service provider" or "processor" — your client-related notice and consent obligations to your clients remain your responsibility, not ours.

2. Information We Collect

2.1 Information You Provide (Category A — about you)

  • Account Information. Name, email address, password, professional description, and any optional profile information you provide.
  • Communications. Information you provide when contacting support, providing feedback, or completing surveys.
  • Payment Information (if applicable). Processed by our third-party payment processors; we do not store full payment card details.

2.2 Conversation Content (Category B — about your clients, in de-identified form)

  • De-identified Descriptions, Reflections, and Inputs you submit while using the Service. Under our Terms, this content must not identify any specific individual.

2.3 Information Collected Automatically (Category A)

  • Usage Data. If and when analytics are enabled, information such as features used, session duration, and similar usage metrics tied to your account.
  • Device and Technical Data. IP address, browser type, operating system, device identifiers, and similar information.
  • Cookies and Similar Technologies. See Section 7 below.

2.4 Information from Third Parties

We may receive information from third-party services if you connect them (e.g., authentication providers), and from analytics or fraud-prevention vendors.

3. Your Obligations Regarding Your Clients

You are responsible for:

  • Properly de-identifying all client-related content before inputting it, as required by our Terms;
  • Obtaining whatever consents your professional, ethical, or legal obligations require from your clients regarding your use of AI tools to support your work;
  • Providing your own privacy notice to your clients about your use of third-party tools as part of your practice;
  • Honoring any client requests directed to you concerning data they believe you have shared with us.

We are not in a direct relationship with your clients and do not undertake any obligation to them through this Policy.

4. How We Use Information

We use information to:

  • Provide, maintain, and operate the Service;
  • Generate AI responses to your inputs;
  • Communicate with you about the Service, including updates, security notices, and support;
  • Improve the Service through analysis of aggregated, anonymized usage metrics (NOT through use of conversation content — see Section 5);
  • Monitor and analyze usage and trends;
  • Detect, prevent, and address fraud, abuse, security issues, and violations of our Terms, including violations of the de-identification requirement;
  • Comply with legal obligations and enforce our agreements.

5. AI Model Training — We Do NOT Train on Your Content

We do NOT use any conversation content you input — whether Category A or Category B — to train, fine-tune, or otherwise improve AI models. This applies regardless of how the content is framed.

We may use aggregated, anonymized usage metrics (e.g., session counts, feature engagement, error rates) to improve the Service. Such metrics do not include the substance of your conversations.

No opt-in toggle is provided for AI training, because you are not in a position to authorize training on content that may concern your clients.

6. How We Share Information

We do NOT sell your personal information. We share information only as described below:

  • Service Providers. Hosting, cloud infrastructure, AI model providers, analytics, customer support, and payment processors that perform services on our behalf under contractual confidentiality and data protection obligations.
  • AI Model Providers. Your conversation inputs are processed by Anthropic to generate responses. Anthropic processes inputs under its applicable terms; we do not authorize Anthropic to use your inputs for its own model training where opt-out is available. You acknowledge that even de-identified content you input passes through Anthropic's infrastructure for the purpose of generating responses.
  • Legal and Safety. When required by law, legal process, or to protect the rights, property, or safety of the Company, users, or others.
  • Business Transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, with appropriate confidentiality protections.
  • With Your Consent. Any other sharing with your direction or consent.

7. Data Retention

We retain account information and conversation content indefinitely, subject to your right to request deletion at any time as described in Section 9. You may also delete specific conversations from within the Service at any time. We may retain certain information longer than otherwise required to comply with legal obligations, resolve disputes, or enforce our agreements.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication and security, and may use them for preferences and analytics. You can control cookies through your browser settings, but disabling them may affect functionality. We DO NOT respond to Do Not Track signals.

9. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect information, including encryption in transit (TLS), encryption at rest, access controls, and monitoring. No system is perfectly secure, however, and we cannot guarantee absolute security. The Service is not configured for, and you must not use it to handle, Protected Health Information (PHI) under HIPAA.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your personal information;
  • Restrict or object to certain processing;
  • Receive your information in a portable format;
  • Withdraw consent;
  • Lodge a complaint with a data protection authority.

To exercise these rights as a Practitioner, contact us at resonantconsulting@protonmail.com.

Requests From Your Clients. If a person who believes they have been described in your account contacts us directly with a rights request, we will generally direct them to you, as the party who controls what was input and who has the direct relationship with them. You agree to respond to such situations in good faith.

California Residents. Under the CCPA/CPRA, you have additional rights including the right to know specific pieces of information collected and the right to non-discrimination for exercising your rights.

EU/UK/EEA Residents. Our lawful bases include consent, contract performance, legitimate interests, and legal obligations. Where we transfer data outside your region, we use Standard Contractual Clauses or other appropriate safeguards.

11. No Use by Minors

The Service is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. The Service must not be used to discuss minors, even in de-identified form, except in the limited context where a Practitioner's professional practice serves families and the de-identified content concerns generalized patterns rather than specific minors.

12. International Transfers

The Service is operated from the United States. If you are located outside the U.S., your information will be transferred to and processed in the U.S. and other countries, which may have different data protection laws. By using the Service, you consent to such transfers.

13. Third-Party Services

The Service may contain links to third-party sites or integrate with third-party services. We are not responsible for their privacy practices. Review their privacy policies before providing information.

14. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated by posting the updated Policy with a new "Last Updated" date or by other reasonable means. Your continued use after changes constitutes acceptance.

15. Contact Us

For privacy questions or to exercise your rights:

Resonant Consulting, LLC
Attn: Privacy
123 Main St., Columbus, Ohio 43210
resonantconsulting@protonmail.com