Privacy Policy

This policy is published by Wealth in Motion PT LLC, a California limited liability company doing business as The Home Health Pro (referred to here as "Company," "we," "us," or "our"). We operate the website at thehomehealthpro.com and the curriculum software at the same domain.

For privacy questions, write to privacy@thehomehealthpro.com. For all other inquiries, write to support@thehomehealthpro.com.

This policy applies to:

• Visitors to our marketing website
• People who request a demo, a quote, or other commercial information
• Faculty, program directors, and instructors who hold accounts on the platform
• Students who hold accounts on the platform
• Anyone who emails us at any of our published addresses

Where a university has signed a Data Processing Agreement with us and student records are processed under that agreement, the terms of that agreement and our FERPA page control over this policy in case of conflict.

Information you provide

• Demo and contact forms: your name, work email, school or organization, role, and any message you write to us.
• Account creation: your name, email, role, the organization you belong to, and a password (which we store only as a bcrypt hash).
• Curriculum activity: your progress through modules, quiz attempts, activity responses, discussion entries, bookmarks, saved home exercise programs, and resource downloads.
• Career-prep features: if you use our resume feedback, mock interview, or salary script tools, the content you submit is sent to our AI provider (Anthropic) to generate a response. We do not retain the content beyond what is needed to display the response back to you.
• Payment information: if your institution pays directly through our site, payment details are collected by Stripe. We never see or store full card numbers.

Information collected automatically

• Usage data: pages viewed, links clicked, browser type, operating system, referring URL, and approximate location derived from IP address.
• Session and authentication cookies: an httpOnly cookie holding a JSON Web Token used to keep you logged in. This cookie is essential to operating the platform and cannot be disabled while you are signed in.
• Analytics: aggregate metrics about site performance and feature usage collected by our hosting provider (Vercel Analytics and Speed Insights). These metrics do not include keystrokes, form contents, or precise location.

We use personal data to:

• Operate the curriculum platform and deliver the services your institution has contracted for
• Authenticate you and protect your account
• Track progress, generate certificates, and report cohort outcomes to faculty
• Respond to demo requests, support tickets, and procurement inquiries
• Send transactional email related to your account or your cohort (login confirmations, password resets, instructor announcements)
• Maintain and improve the platform, debug issues, and prevent abuse
• Comply with legal obligations including FERPA, applicable state student-privacy laws, and lawful requests from authorized parties

We do not use personal data for advertising, behavioral profiling, or training third-party AI models. We do not sell personal data.

• Contract: we process student data to perform services your institution has contracted for under our Data Processing Agreement.
• School official: under FERPA, we operate as a school official acting on behalf of your institution under 34 CFR § 99.31(a)(1)(i)(B). See our FERPA page for details.
• Consent: where required by law, we rely on your consent. Submitting a demo request, creating an account, or providing optional information signals that consent.
• Legitimate interest: we rely on legitimate interest for activities like fraud prevention, security monitoring, and basic service analytics that do not involve sensitive identifiers.

We share personal data only with the categories of recipients below. We do not sell personal data and we do not share it with advertisers.

• Subprocessors: vendors that operate parts of our infrastructure. The full current list is published at our subprocessors page.
• Your institution: if you are a student, your faculty and program administrators see your progress, submissions, and quiz scores in their dashboards. They are bound by their institution's own privacy obligations.
• Authorities and law enforcement: we disclose data when required by court order, subpoena, or other lawful process. Where we are legally permitted, we will notify your institution before disclosure of student records.
• Successor entity: if we are acquired or merged, your data may transfer to the acquirer subject to the same protections in this policy and any DPA in force.

We use a small number of cookies:

• Authentication cookie (essential): an httpOnly secure cookie holding a signed session token. Lasts seven days. Cannot be disabled while you are signed in.
• Theme preference (functional): a small client-side localStorage entry to remember whether you use dark or light mode.
• Hosting analytics (anonymous): Vercel Analytics records page-level metrics like load time and visit count without setting third-party cookies or persistent identifiers.

We do not use Google Analytics, Facebook Pixel, retargeting cookies, or any cross-site tracking. There is no cookie banner because we do not place tracking cookies that would require one.

You have the right to:

• Access: ask what personal data we hold about you and receive a copy.
• Correct: ask us to fix inaccurate or incomplete data.
• Delete: ask us to delete personal data, subject to retention required by law or by an active contract with your institution.
• Portability: receive a copy of your data in a structured, common format.
• Withdraw consent: where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, write to privacy@thehomehealthpro.com. We will verify your identity, respond within thirty days, and not charge a fee for routine requests. If you are a student whose records are held under contract with your institution, we will route your request to the appropriate office at your school per FERPA.

California residents have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act. In the past twelve months we have:

• Collected the categories of data described in Section 3
• Disclosed data to the categories of recipients described in Section 6
• Not sold personal data
• Not shared personal data for cross-context behavioral advertising

You can exercise your rights to know, delete, correct, and limit use of sensitive personal information by writing to privacy@thehomehealthpro.com. We do not discriminate against California residents who exercise these rights.

If your institution has invited you to use The Home Health Pro as part of your DPT program, your education records on the platform belong to your institution and are governed by FERPA. Your institution decides who can see your records, when they are shared, and how long they are retained. To inspect, correct, or request deletion of your records, contact your program office directly. We will route any request you send us to your institution. See our FERPA page for the full picture.

• Marketing-site logs and analytics: aggregated indefinitely; raw entries with IP and user agent up to thirteen months.
• Demo and contact form data: kept while the inquiry is active and for up to two years afterward for sales follow-up, then deleted on request.
• Account data and student records: kept for the duration of your institution's contract. Deleted from production within thirty days of contract termination on written request from your institution. Backups age out within ninety days.
• Audit logs: retained for at least one year and as long as needed to comply with legal obligations and FERPA inquiries.

We protect personal data with environment isolation, encryption in transit and at rest, role-based access control, audit logging, and rate limiting. The full set of controls is published on our security page. If you believe you have discovered a security issue, please report it to security@thehomehealthpro.com.

Our infrastructure is hosted in the United States. If you access the platform from outside the United States, your data will be transferred to and processed in the United States. We do not currently market the platform outside the United States.

The Home Health Pro is intended for adult learners enrolled in postsecondary professional programs. We do not knowingly collect personal data from anyone under thirteen. If you believe a child under thirteen has provided us personal data, contact us and we will delete it.

We may update this policy from time to time. We will post the new version on this page and update the "Last updated" date at the bottom. For changes that materially expand how we use personal data, we will notify program directors of affected institutions by email at least thirty days before the change takes effect.

Wealth in Motion PT LLC dba The Home Health Pro

Privacy: privacy@thehomehealthpro.com

Support: support@thehomehealthpro.com

Security: security@thehomehealthpro.com