Privacy Policy

Last updated 6 September 2026 · applies to the BackSignal app on iOS and Android

How Collab Cubicles Private Limited handles information in the BackSignal app — a lower-back screening and daily spine-health tracking tool based on the Spine Severity System by Dr Ayush Sharma. Using the app means accepting this policy.

Information we handle

Account identity. The e-mail address you sign in with. Sign-in is passwordless — we send a one-time code to your e-mail. We never ask for or store a password.
Profile details you enter or import: name, age or date of birth, sex, occupation, height and weight.
Screening responses: your answers about pain, leg symptoms, daily function, symptom duration and safety questions, together with the resulting Spine Severity Score and Functional Spine Age.
Daily spine diary: sitting, walking, exercise and sleep values you log, or that are read from Apple Health or Android Health Connect with your permission.
Consultation requests you make through the in-app booking screen.

An account is required

BackSignal calculates your score on our servers, not on your phone. This means you must create an account and be signed in to complete a screening. Your responses are sent to our backend, scored there, and the inputs and result are stored against your account so your history and dashboard work across devices and reinstalls.

Your recent diary entries are also cached on your phone so the app works without a connection. That cache is a copy — the authoritative record is on our servers.

Where your data is stored

We use Amazon Web Services. Your account and health records are stored in AWS's Mumbai region (ap-south-1), in India, in an encrypted PostgreSQL database that is not reachable from the public internet. Sign-in is handled by Amazon Cognito. Encrypted backups may be replicated to a second AWS region within India for disaster recovery. Video and educational content is delivered through Amazon CloudFront.

All traffic between the app and our servers is encrypted in transit (HTTPS/TLS). Data is encrypted at rest.

How we use your information

To calculate your Spine Severity Score and Functional Spine Age and show your dashboard.
To personalise the educational guidance and exercise content you see.
To keep your history available across devices.
To pass on a consultation request when you choose to make one.
To record which version of our scoring algorithm produced each result, so past results remain interpretable.

We do not sell your personal or health information, and we do not use it for advertising.

Apple Health and Android Health Connect

The app requests read-only access to specific health data types — steps, walking distance, exercise or active minutes, sleep, height and weight, and on iOS your date of birth and sex — and only after you explicitly grant permission.
This data is used solely to auto-fill your spine-health tracker and personalise your score.
We do not use health data for advertising, marketing or data-mining, and we do not share it with third parties for those purposes.
You can revoke access at any time: on iPhone in Settings → Health → Data Access & Devices; on Android in the Health Connect app under App permissions.
Health data you have already synced remains on our servers until you delete it.

Medical disclaimer

BackSignal is a screening, education and habit-tracking tool. It does not provide a medical diagnosis and is not a substitute for professional medical advice, examination or treatment. Its scores and suggestions are informational only. If you have severe or worsening symptoms — including numbness, weakness, or loss of bladder or bowel control — seek medical care.

Sharing

We share information only: (a) with infrastructure providers that process data on our behalf under confidentiality obligations, principally Amazon Web Services; (b) when you yourself initiate an action, such as requesting a consultation; or (c) where required by law. We do not sell your data.

Your rights, and deleting your data

You can delete your account and its data at any time from Profile → Delete account inside the app, or by e-mailing us.

Delete your account →

You may also request access to, or correction of, your data by contacting us. We respond within 30 days.

Children

The app is intended for adults (18+). It is not directed to children, and we do not knowingly collect data from them.

Security

We use encryption in transit and at rest, an isolated private network for our database, managed secret storage with automatic rotation, and least-privilege access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes and contact

We may update this policy. Material changes will be reflected in the “last updated” date above, and where appropriate we will ask you to review them in the app.

Collab Cubicles Private Limited — hi@collabcubicles.com