Terms of Service
Last Updated: [Insert Date]
These Terms of Service govern your access to and use of the Bio6 web platform, mobile applications, BioBand wearable devices, and all related services. By accessing or using the Services, you agree to be bound by these Terms.
- You must be at least 18 years old with legal authority to enter this agreement
- If using Bio6 on behalf of a clinic or hospital, you represent authority to bind that organization
- Bio6 is NOT a medical diagnosis system and is not a substitute for professional medical judgment
- All clinical decisions remain the sole responsibility of licensed professionals
- Clinics and users retain ownership of their data; Bio6 acts as a data processor
- You must obtain proper patient consent and use Bio6 in compliance with all privacy laws
- Governed by the laws of the Province of Québec and applicable Canadian laws
View full policy
1. Overview
Bio6 Inc. provides the Bio6 web platform (clinician software), Bio6 mobile applications, BioBand wearable devices, and any related services, APIs, and content (collectively, the 'Services'). By accessing or using the Services, you agree to be bound by these Terms.
2. Eligibility
You must be at least 18 years old, have the legal authority to enter into this agreement, and use the Services in compliance with applicable laws including Québec Law 25 and applicable health data regulations. If acting on behalf of an organization, you represent that you have authority to bind that organization.
3. Nature of the Service (Medical Disclaimer)
Bio6 provides data collection tools (via wearable sensors), clinical workflow tools (notes, programs, forms, reports), movement and biometric analysis, and clinical insights. Bio6 is NOT a medical diagnosis system, a substitute for professional medical judgment, or an emergency or real-time monitoring system. All clinical decisions remain the responsibility of licensed professionals.
4. Account Registration & Security
You agree to provide accurate and complete information, maintain the confidentiality of your credentials, and notify us immediately of any unauthorized use. You are responsible for all activity under your account. Bio6 may suspend or terminate accounts that violate these Terms, present security risks, or engage in misuse of patient data.
5. Data & Privacy
Clinics and users retain ownership of their data. Bio6 acts as a data processor and service provider. We support Québec Law 25 and HIPAA-conscious practices, implementing encryption in transit and at rest, role-based access controls, and audit logs. You agree to obtain proper patient consent, use Bio6 in compliance with privacy laws, and not upload unlawful or unauthorized data.
6. Acceptable Use
You may not use the platform for illegal or harmful activities, attempt to reverse engineer the software, interfere with system security or performance, upload malicious code or data, or misuse patient or personal data.
7. Devices (BioBand)
BioBand devices are intended for movement and biometric data collection and rehabilitation and performance analysis. They are not life-support or diagnostic devices unless explicitly certified. You are responsible for proper use of the device, following safety guidelines, and ensuring correct placement and usage.
8. Subscription, Billing & Payments
Bio6 operates on a subscription basis with per clinician / per clinic pricing. Fees are billed monthly or annually and are non-refundable unless otherwise stated. Payments may be processed via third-party providers (e.g., Stripe); Bio6 does not store full payment details.
9. Intellectual Property
All rights, title, and interest in the Services remain with Bio6, including software, algorithms, UI/UX design, documentation, and clinical intelligence models. You are granted a limited, non-exclusive, non-transferable license for internal use. You may not copy, resell, or use Bio6 IP to build competing products.
10. Limitation of Liability
To the maximum extent permitted by law, Bio6 is not liable for clinical decisions made using the platform, indirect or consequential damages, or loss of data, revenue, or business. Total liability is limited to the amount paid for the Services in the last 12 months.
11. Governing Law
These Terms are governed by the laws of the Province of Québec and applicable Canadian laws. Any disputes shall be resolved in Québec courts.
Contact
Questions about these Terms? Contact Bio6 Inc. at support@bio6health.com — https://www.bio6health.com
Privacy Policy
Last Updated: [Insert Date]
This Privacy Policy explains how Bio6 Inc. collects, uses, discloses, and protects personal information when you use the Bio6 platform, mobile applications, BioBand wearable devices, and related services. We are committed to complying with Québec Law 25 (Loi 25) and applicable Canadian privacy laws.
- Bio6 does not sell personal data
- Bio6 typically acts as a data processor on behalf of clinics and healthcare providers
- Clinics and healthcare providers are responsible for collecting patient consent and determining data use
- Data is encrypted in transit and at rest, with role-based access control
- You may access, correct, withdraw consent, request deletion, or request data portability
- Patient requests should typically be made through your healthcare provider (clinic)
- Data may be processed or stored outside Québec with appropriate safeguards in place
View full policy
1. Roles & Responsibilities
In most cases, Bio6 acts as a data processor/service provider on behalf of clinics, healthcare professionals, and organizations using our platform. Clinics and healthcare providers are responsible for collecting patient consent, determining how data is used, and ensuring compliance with applicable laws.
2. Information We Collect
Account & User Information: name, email address, role (clinician, admin, patient), and organization. Patient & Health Data: personal identifiers, clinical notes, assessments, rehabilitation programs, patient-reported outcomes (PROMs/PREMs), and movement and biometric data via BioBand. Device & Sensor Data: movement data (range of motion, acceleration), muscle activity (EMG), and physiological signals. Technical & Usage Data: IP address, device/browser type, log data, and session activity.
3. How We Use Information
We use data to provide and operate the platform, enable clinical workflows, process and display movement/biometric data, generate insights ('Clinical Intelligence'), improve platform performance and user experience, ensure security and prevent fraud, and comply with legal obligations. We do NOT sell personal data.
4. Legal Basis for Processing (Québec Law 25)
We process data based on consent (e.g., patient data collected by clinicians), contractual necessity (providing services), legal obligations, and legitimate interests (security, product improvement).
5. Data Sharing & Disclosure
We may share data with authorized users within the same organization based on role-based access, service providers (cloud hosting, payment processors, analytics tools), and legal authorities if required by law or regulation. We ensure all partners meet appropriate security and privacy standards.
6. Data Storage & Security
We implement encryption in transit and at rest, role-based access control (RBAC), secure authentication, audit logs and monitoring, and data minimization practices. Despite these measures, no system is 100% secure.
7. Data Retention
We retain data as long as required to provide services, as required by law or regulatory obligations, and based on agreements with clinics. Upon termination, data may be deleted or anonymized, and export options may be provided to clients.
8. Your Rights (Law 25 & Applicable Laws)
Depending on your role and jurisdiction, you may have the right to access your personal information, correct inaccurate data, withdraw consent where applicable, request deletion of data, and request data portability. If you are a patient, requests should typically be made through your healthcare provider (clinic).
9. Cookies & Tracking
We use cookies to maintain sessions and authentication, improve platform performance, and analyze usage (if enabled). Users may accept or refuse non-essential cookies and manage preferences via the cookie banner. See our full Cookie Policy for details.
10. International Data Transfers
Data may be processed or stored outside of Québec or Canada. In such cases, Bio6 ensures appropriate safeguards, contractual protections, and compliance with applicable laws.
11. Children's Privacy
Bio6 is not intended for direct use by children under 14 without supervision. Healthcare providers are responsible for ensuring proper consent for minors and managing pediatric data appropriately.
Contact
For questions, requests, or complaints: Bio6 Inc. — support@bio6health.com — https://www.bio6health.com. You may also contact our Privacy Officer for data-related requests.
Security Overview
Updated March 2026
Security is foundational to how Bio6 is built. Our platform is designed to protect clinic and patient data through modern security practices aligned with healthcare requirements.
- Encryption of data in transit (TLS 1.3) and at rest (AES-256)
- Role-based access control with granular permissions
- Secure authentication and session management
- Multi-factor authentication available for all user roles
- Continuous monitoring and logging of system activity
- Privacy-by-design approach aligned with Québec Law 25
View full policy
Our Approach
Bio6 is actively working toward formal security certifications and third-party audits as part of its ongoing compliance roadmap. We apply a privacy-by-design approach at every layer of the platform — from device data collection to cloud storage and clinical reporting.
Contact
Questions about our security practices? Contact us at support@bio6health.com
Acceptable Use Policy
Effective January 1, 2026
This policy defines how the Bio6 platform may and may not be used. It applies to all users, including clinic administrators, clinicians, and patients.
- Bio6 must be used only for lawful clinical, operational, or approved research purposes
- Users are prohibited from attempting to reverse-engineer, decompile, or interfere with the platform or BioBand hardware
- Patient data must only be accessed, used, and shared by authorised users in accordance with applicable privacy laws
- Users must not misuse, disclose, or access personal or health data without proper authorization
- Automated scraping, data extraction, or bulk access is prohibited without prior written consent from Bio6
- Users must not attempt to probe, scan, or test the vulnerability of the platform or related systems
- Users must not interfere with the performance, integrity, or availability of the platform
- Account credentials must not be shared or used by multiple individuals
View full policy
Enforcement
Violation of this policy may result in suspension or termination of access to the platform. Bio6 reserves the right to investigate suspected violations and take appropriate action, including reporting to relevant authorities where required by law.
Contact
Questions about this policy? Contact us at support@bio6health.com
Support & Service Terms
Effective January 1, 2026
These terms describe the support services included with each Bio6 plan and the service levels Bio6 commits to maintaining.
- Starter plan: email support, 48-hour response time
- Professional plan: priority email and chat, 12-hour response
- Enterprise plan: dedicated account manager, 4-hour response, phone support
- Critical platform incidents: acknowledged within 1 hour, all plans
- Scheduled maintenance communicated 72 hours in advance
Have a legal or compliance question?
Our team responds to all policy and data-related inquiries at support@bio6health.com within 2 business days.