Privacy Policy

No patient records

Launchpad is not a patient record system. We do not store patient names, email addresses, phone numbers, or any other patient-identifying information on our servers, ever. When you send a patient an aftercare page, the contact address you type stays on your device and is used only to open your own email or text app.

Information we collect

• Account: your name, email address, and password credentials (handled by our authentication provider).
• Practice information: practice name, address, state, logo, branding, services and pricing, protocols, documents, staff records and credentials, vendors, inventory, temperature logs, incidents, and mileage.
• Treatment activity: the treatment types you log (for example "NAD+ IV"), attached to your practice and never to a person. We treat this as health information even though it identifies no patient.
• Location: your practice address, which we geocode. Growth features also offer a "use my location" button that reads your device location once, with your permission, to set a home base. There is no background or continuous location tracking, no route tracking, and no staff monitoring.
• Device identifiers: if you turn on compliance alerts, we store a push notification endpoint and its encryption keys for that browser or device. This is not an advertising identifier and is deleted when you turn alerts off.
• App activity and analytics: page views, checkout starts, and completed purchases, including data sent to Meta's conversion pixel for advertising and analytics measurement.
• Payment information: handled entirely by Stripe. We never see or store card numbers; we keep a subscription status and billing history record.

How we use it

To run the app, keep your practice data in sync across devices, produce compliance and operations alerts, send you transactional email, process subscription billing, provide support, and measure advertising performance. We do not sell your data.

Sharing and sub-processors

We share data only with the service providers needed to run Launchpad:

• Lovable Cloud / Supabase — database, authentication, and file storage
• Cloudflare — application hosting and delivery
• Stripe — subscription payments and billing
• Lovable managed email, which uses Resend for delivery — transactional and reminder email
• Google Gemini — AI analysis and drafting. Photos and screenshots you upload are transmitted to Google in full, including temperature log images, supply receipts and packing slips, and advertising images. Also used for outreach drafting and community event research.
• OpenAI, via the Lovable AI gateway — compliance rule validation, marketing copy and image generation, and logo prompt text
• Perplexity — compliance rule research and state board identification
• Google Places — nearby venue and business lookup for growth opportunities (approximate coordinates and generic search terms only, never your practice name)
• OpenStreetMap Nominatim — converts the business address you type into map coordinates
• Google Search Console — search performance reporting for your marketing
• Open-Meteo — weather forecast data for growth intelligence (location coordinates only, called from your browser)
• OSRM — driving distance between your home base and public event venues (coordinates only, never a customer address)
• RunSignUp and RunGuides — public community event listings (a US state code only, nothing about you)
• openFDA — drug shortage data (medication names only, nothing about you)
• Google Fonts — typeface delivery, called from your browser
• Meta — conversion pixel for advertising and analytics
• Push delivery services — Google FCM, Apple, Mozilla, and Microsoft — used only to deliver alerts you have enabled

Connecting an AI assistant

You can choose to connect Launchpad to an AI assistant you use, such as Claude or ChatGPT. Nothing is shared this way unless you sign in and approve the connection yourself. Once connected, the assistant can read, but not change: your practice profile (name, state, type, contact details, website, and booking link), your vendor list (including rep names, contact details, and notes), the treatments you've logged (service, price, date, and follow-up date, never a patient), the list of your compliance documents (type, file name, dates, and notes, not the files themselves), and your launch checklist progress. The assistant's provider handles that information under its own privacy policy. To stop it, disconnect Launchpad in the assistant's settings, or email support@mobilytewellness.com and we will revoke its access. Deleting your account ends every connection.

Security

All data is encrypted in transit over HTTPS between your device, Launchpad, and every provider above. Access to practice data is restricted to your own account by database-level access rules. Data at rest is protected by our platform providers' storage encryption. We do not apply additional field-level encryption to uploaded documents or stored credentials.

Retention

• Practice data is kept while your account is active.
• When you delete your account from inside the app, your practice data — including uploaded files — is removed immediately. If you request deletion by email because you cannot sign in, we verify the request and complete it within 30 days.
• Billing and subscription records are retained for 7 years for tax purposes.
• Push device records are deleted immediately when you turn alerts off.

Deleting your account

You can delete your account and its data from inside the app: Profile → Delete account. If you cannot sign in, see the account deletion request page.

Children

Launchpad is a business tool for licensed practice owners and their staff. It is not intended for anyone under 18.

Changes

If this policy changes materially, we will update the effective date above and notify account holders by email.

Contact

Privacy questions and requests: support@mobilytewellness.com