OsteoFlow

Summary

OsteoFlow Assess is built by AK BioSystems for physiotherapy and osteopathy professionals to record and organise their own practice: records of the people they see, appointments, assessment notes and the finances of the practice. The app writes to the device first and syncs to a server afterwards, so it works without a connection. There is no advertising, no analytics, no crash reporting and no third-party SDK beyond the sync service itself.

Who is responsible for the data

The professional who uses OsteoFlow is the controller of the data about the people they see: they decide what to record, why, and for how long. AK BioSystems acts as the processor, handling that data only to provide the app and following the professional's instructions. This distinction matters because most of the data in OsteoFlow belongs to people who never installed the app.

Data handled

Professional account: identification and sign-in credentials. Records of the people seen: name, contact details and document. Health data: assessment records, findings and progress notes, in adult and paediatric versions - this is sensitive data and is kept separate from the rest, in tables with their own access rules. Practice data: appointments, amounts, payments, receipts and the monthly summary. On the device: an unlock PIN, held in the operating system's secure storage.

Where the data lives

Written locally on the device first and synced afterwards. The cloud copy is on Supabase servers in the Brazil region (Sao Paulo); there is no international transfer of data. Each practice sees only its own records, and that isolation is enforced in the database itself through row-level security, not merely in the app's screens.

Security

Encryption in transit and at rest, with no exception for health data. An access audit trail, for practices where more than one person uses the same account. No sensitive data in logs or error messages.

Your rights and deletion

The app allows deleting a single appointment, deleting a person along with their whole history, and deleting the entire account with the data attached to it. Data about a person can be exported in a readable format. Requests from the people seen - access, correction, portability or deletion - should be addressed to the professional who recorded the data, since they are the controller; AK BioSystems supports the professional in fulfilling them.

What we do not do

We do not sell or share data with third parties. We do not use the data for advertising. We do not use data about the people seen for any purpose other than providing the app to the professional who sees them.

Important notice

OsteoFlow Assess is a tool for recording and organising professional practice. It records and organises what the professional observed; it does not draw conclusions on their behalf, does not perform medical diagnosis and does not replace professional assessment.

Contact

contact.akbiosystems@gmail.com