Privacy Policy

Effective date: October 30, 2026

This Privacy Policy explains how SOMI Therapies LLC ("SOMI", "we", "us") collects, uses, shares and protects information through the SOMI Home mobile app, the SOMI clinic web app, and somitherapies.com (together, the "Services").

SOMI provides speech, orofacial myofunctional and related therapy services. If you are a SOMI patient, or the parent or guardian of one, your health information is also protected by our Notice of Privacy Practices, which describes your rights under HIPAA. If this policy and that Notice conflict on health information, the Notice controls.

1. Who uses SOMI Home

SOMI Home is used by patients and, for children, by a parent or guardian who holds the account and helps with the exercises. Accounts are set up by SOMI clinic staff. The app is not directed at children, and we do not knowingly collect personal information directly from children under 13. Information about a child is provided by the child's parent or guardian.

2. Information we collect

Information you or your clinic give us

  • Account information: name, email address and password. We store passwords only in a securely hashed form.
  • Patient information: the patient's name and the details your therapist records to provide care, such as the therapy plan, the exercises assigned and session notes.
  • Exercise activity: which exercises are marked complete, and when.
  • Messages: messages you exchange with your therapist through the app, including any photos or videos you attach (for example, a practice video).

Information collected automatically

  • Technical and security information: basic technical data needed to run and protect the Services, such as the time of a request, the type of request and error information. We design our systems so these records do not contain message content, attachments or patient identifiers.
  • Device storage: the app stores some information on your device so it can work offline, such as messages and completed exercises waiting to be sent, and your sign-in tokens in the device's secure storage. This information is not included in device backups.

What we do not collect. The app does not use advertising, does not use third-party analytics or tracking tools, and does not collect your precise location or your contacts.

3. How we use information

We use information to:

  • provide therapy services and let you and your therapist communicate;
  • show your therapy plan and record your progress;
  • operate, maintain, secure and troubleshoot the Services;
  • meet our legal, regulatory and professional obligations, including keeping clinical records.

We do not sell personal information, and we do not use it for advertising.

4. How we share information

We share information only:

  • with your care team at SOMI, so they can provide your care;
  • with service providers who host and operate the Services on our behalf, under contracts that require them to protect the information. These include Amazon Web Services (hosting and file storage) and MongoDB Atlas (database hosting), with data stored in the United States. Where these providers handle health information, we require a Business Associate Agreement;
  • when the law requires it, or to protect the safety of a patient or others, as permitted by law and described in our Notice of Privacy Practices;
  • in a business transfer, such as a merger or sale, in which case the information stays subject to this policy and to applicable law.

5. How we protect information

Information is encrypted in transit (HTTPS) and stored with encryption at rest by our hosting providers. Access is limited to authorized SOMI staff who need it to provide care or run the Services. No system is perfectly secure, but we work to protect your information and will notify you of a breach as the law requires.

6. How long we keep information

  • Clinical records, such as therapy plans, notes, and messages and attachments that form part of your care, are kept for as long as the law requires us to keep health records. In Minnesota that is at least 7 years after the last date of service, or until 7 years after a minor reaches the age of 18 (age 25).
  • Account information is kept while your account is active and deleted or de-identified after your account is closed, unless it is part of the clinical record.
  • Technical and security logs are kept for a limited period, typically [e.g. 30–90] days.

7. Your choices and rights

You may ask us to:

  • access or get a copy of your information;
  • correct inaccurate information;
  • delete your account and associated information, as described in Section 8;
  • ask any question about how we handle your information.

Depending on where you live, you may have additional rights under state law. We will not discriminate against you for exercising your rights.

8. Deleting your account and data

To request deletion of your SOMI Home account and associated data, visit somitherapies.com/delete-my-data or email help@somitherapies.com from the email address on your account.

When we receive a request, we will:

  • confirm that the request comes from the account holder (or, for a child's account, the parent or guardian);
  • delete your account, sign-in information and any data that is not part of your clinical record within 30 days;
  • keep information that the law requires us to retain, such as clinical records (see Section 6), and restrict its use to those legal purposes. We will tell you what we kept and why.

Deleting the SOMI Home app from your phone does not delete your account. Information waiting to be sent is removed from the device when the app is deleted.

9. Changes to this policy

We may update this policy. We will post the updated version here with a new effective date and, for significant changes, notify you in the app or by email.

10. Contact us

SOMI Therapies LLC

202 N Cedar Ave, Suite 1

Owatonna, MN 55060

Email: help@somitherapies.com