Converge Privacy Policy

Version 1.0 · Effective date: September 14, 2026

Converge is a physical-therapy companion app, developed by BoBo, that your clinic uses to guide you through exercise sessions and help your care team follow your progress. This policy explains, in plain language, what information Converge collects about you, how it is used and protected, and the choices and rights you have.

Important: Converge provides exercise suggestions only. It is not medical advice, a diagnosis, or treatment, and it does not replace your clinician. Always follow the guidance of your care team.

A quick word on how Converge protects health information

Your clinic is a healthcare provider covered by the U.S. Health Insurance Portability and Accountability Act (HIPAA). Converge (BoBo) acts as your clinic's Business Associate and has signed a Business Associate Agreement (BAA) with them. This is a legal contract that requires us to safeguard your Protected Health Information (PHI) and to use it only to support your care, as described in this policy and as permitted by HIPAA.

Your PHI stays within covered services — the protected, BAA-bound systems we use to operate Converge. It is never sold, and it is never used for advertising or marketing.

1. Information we collect

Account information from your clinic. When your clinic provisions your account, we receive information needed to set you up and connect you to your care team — for example your name, contact details, an internal patient identifier, and your assigned clinic and clinician(s). You don't create your own account from scratch; your clinic invites you.

Onboarding and assessment information. When you start, you accept a disclaimer and complete a directional-preference questionnaire and an initial pain rating. We record your answers.

Pain ratings and exercise logs. As you use the program, we collect:

• Your pain ratings (VAS — visual analog scale) over time.
• Your exercise session logs, including which sessions you completed, when, and the mandatory check-ins/logging you submit (sessions are scheduled roughly every 48 hours).

Device and login information. To keep the app working and secure, we collect basic technical information such as your device type and operating system, app version, login and authentication events, and general diagnostic and error data.

We do not ask you to provide payment information; billing is handled by your clinic.

2. How we use your information

We use your information to:

• Deliver your program — show your scheduled sessions, guided muted-video exercises, and questionnaires, and record what you complete.
• Let your care team monitor your care — make your pain trends and exercise logs visible to your assigned clinicians so they can follow your progress and adjust your plan.
• Keep the app secure and working — authenticate logins, prevent misuse, fix bugs, and maintain reliability and accessibility.
• Meet legal and contractual obligations — including our HIPAA/BAA duties to your clinic.

Your PHI is not used for advertising or third-party analytics. Any operational telemetry we use to improve and troubleshoot the app is de-identified so it cannot reasonably be linked back to you.

3. Who can see your information

• Your assigned care team. Your clinicians and authorized clinic staff (such as your primary care coordinator, clinic manager, or administrator) can see your account, questionnaire results, pain ratings, and exercise logs through their dashboard, according to the role each person holds and the access your clinic permits.
• Converge (BoBo) personnel. A limited number of our staff may access information strictly as needed to operate, support, and secure the service, under the terms of the BAA and confidentiality obligations.
• Service providers under a BAA. We rely on vetted infrastructure providers (for example, secure hosting and database services) that are contractually bound to protect PHI within covered services.
• When required by law. We may disclose information if required by applicable law or legal process, consistent with HIPAA.

We do not sell your information and do not share it for advertising.

4. How your information is protected

We use administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption of data in transit and at rest.
• Authentication and access controls, so people only see what their role allows.
• Restricting PHI to BAA-covered systems and providers.
• Logging and monitoring of access and security events.
• Ongoing review of our security practices.

No system can be guaranteed 100% secure, but we work to protect your information and to respond promptly if a problem occurs.

5. How long we keep your information

We keep your information for as long as needed to support your care and to meet your clinic's recordkeeping requirements and our legal and contractual obligations. Because your records belong to your clinic's care relationship, retention periods are generally set by your clinic. When information is no longer needed, it is securely deleted or de-identified.

6. Your rights and choices

Because Converge acts on behalf of your clinic, many of your health-information rights are exercised through your clinic, which is the keeper of your medical record. Working with your clinic, you can generally:

• Access the information held about you.
• Request corrections to information you believe is inaccurate.
• Ask about how your information has been used or shared.
• Withdraw from the program — contact your clinic to discuss stopping use of Converge and what happens to your data.

To exercise these rights, start by contacting your clinic (see Section 9). You also retain the rights described in your clinic's HIPAA Notice of Privacy Practices.

7. Accessibility

We aim to make Converge usable for everyone and design with accessibility in mind, consistent with applicable standards, including the European Accessibility Act (EAA). If you have trouble using any part of the app, please contact us so we can help.

8. Children's use

Converge is intended for patients enrolled in care by a clinic and is not designed for use by children without clinic involvement. Minors are only provisioned by a clinic, in line with that clinic's policies and applicable law, and typically with a parent or guardian's involvement and consent. We do not knowingly collect information from children outside of this clinic-managed context.

9. How to contact us

Start with your clinic. For questions about your records, your rights, corrections, leaving the program, or how your clinic uses Converge, please contact your clinic or care team directly — they manage your account and your medical record.

Contact Converge (BoBo). For questions about the app itself, privacy, accessibility, or security, contact us at:

• Converge Privacy (BoBo) — info@bobo-balance.com
• Bait Rishon Bamoledet 1, Amir 1214000, Israel

We will work with your clinic to address your request.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the version and date below and, where appropriate, notify you or your clinic. Your continued use of Converge after an update means you accept the revised policy.

This policy describes how the Converge app handles information and does not replace your clinic's HIPAA Notice of Privacy Practices. Converge provides exercise suggestions only and is not medical advice, diagnosis, or treatment.

Version 1.0