1. Subject of the terms and the parties' roles
1.1. These terms govern the use of the Kusties client cabinet (the "cabinet"). The cabinet is a personal page on kusties.app where a person cared for by one or more specialists who use Kusties sees their exercise programmes, workouts, visits and specialists.
1.2. The cabinet is provided by SIA "Kusties.com", registration No. 50203259371, legal address: Ābolu iela 14C, Mārupe, Mārupes nov., LV-2167 ("Kusties", "we" or "us").
1.3. Your specialist provides their services to you (for example physiotherapy or training) under your agreement with the specialist. Kusties does not provide health care or advisory services and is not a party to your agreement with the specialist.
1.4. The cabinet is free of charge for you.
1.5. By accepting an invitation and ticking the consent box, you accept these terms and confirm that you have read the privacy policy (https://kusties.com/en/privacy), including the notice to patients (https://kusties.com/en/patients).
2. Availability of the cabinet
2.1. The cabinet is available only if your specialist offers it. We may switch the cabinet on gradually (first for selected specialists) or switch it off temporarily.
2.2. While the cabinet is switched off, you see the message "The cabinet is not available yet" after signing in. Your data is not deleted, and the programme links your specialist sent you keep working.
2.3. We aim to keep the cabinet running without interruption, but it may be temporarily unavailable because of maintenance, updates or faults.
3. Creating an account by invitation
3.1. A cabinet account can be created only with a specialist's invitation. The specialist sends the invitation by e-mail or text message, shares a link or shows a QR code. An invitation is valid for 14 days and can be used once. If the specialist sends the invitation again, the earlier link stops working.
3.2. To make sure the invitation reached the right person, you must enter your year of birth, and it must match the one in the specialist's record. After five wrong entries the invitation is withdrawn, and you need to ask the specialist for a new one.
3.3. You can create an account with an e-mail address and a password, or with an external provider account (for example Google) where that option is available.
3.4. If you use the same e-mail address the specialist sent the invitation to, the account is created at once. If you use another address, or you received the invitation by SMS, as a link or as a QR code, we send a confirmation link to the address you gave; it is valid for 24 hours. The account is created only after you open that link and enter the password you chose.
3.5. If you already have a Kusties account, sign in to it and open the invitation link again: the specialist will be added to your existing account, and your account's role will not change.
3.6. One account can hold the records of several specialists. Each specialist keeps their own record about you. Records are not merged, and specialists do not learn which other specialists care for you.
3.7. You agree to give true details and not to create an account in someone else's name. If an invitation reached you by mistake, do not accept it and tell the specialist. If someone else helped you create the account on your behalf, change your password afterwards.
4. Age limit
4.1. The cabinet is available only from the age of 18. A specialist cannot send an invitation if your record has no date of birth or if you are not yet 18.
4.2. Parent and guardian access to a child's data in the cabinet is not available at present. A parent can open the child's programme with the link the specialist sends.
4.3. Age is determined from the date of birth in the specialist's record. If the record changes so that the age requirement is no longer met, an invitation not yet accepted stops working.
5. What you see in the cabinet
- Your specialists' names and professions, and since when each specialist has been linked to your account. The specialist enters the profession in their profile; Kusties does not currently verify it.
- Open programmes (name, description, exercises, start and end dates), and ended programmes as history.
- Workouts you saved from your account, and workouts saved through the programme link the specialist sent.
- Visits: time, status and specialist.
- Weekly activity: on how many of the last seven days you saved a workout.
6. What you do not see in the cabinet
The cabinet does not show:
- the specialist's notes, including the programme's private note;
- clinical documents and forms, including the ones you filled in;
- the specialist's safety alerts;
- visit titles and descriptions;
- the e-mails and SMS sent to you;
- the contact details the specialist entered in their record;
- workouts saved with your programme by another account.
This does not limit your rights to that data: you can ask the specialist for a copy (point 9). Specialists do not see each other's records about you.
7. Doing workouts and giving feedback
7.1. When you save a workout and feedback in the cabinet, they are stored in your specialist's record, and the specialist sees them. In the cabinet they are marked as entered by you.
7.2. A new workout cannot be saved for an ended programme.
7.3. Feedback is not meant for urgent contact. If you feel pain during the exercises or your condition gets worse, stop the exercises and contact your specialist. In an emergency, call 112.
8. Unlinking a specialist
8.1. You can unlink a specialist at any time in the cabinet's "Specialists" section. The specialist can also unlink your account from their record.
8.2. After unlinking, that specialist's programmes and visits are no longer shown in the cabinet. The specialist's record about you, including the workouts you saved, stays with the specialist. The specialist sees in the app that the link has been removed; no e-mail is sent about it. The unlinking is recorded in the security audit log.
8.3. Programme links the specialist sent you earlier by e-mail or text message keep working after unlinking. The specialist can finish the programme, but its exercises and videos can still be seen through the link. If you want a link to stop working, contact the specialist: the specialist can ask Kusties to disable the programme.
8.4. To link the specialist again, a new invitation is needed.
9. Copy of your data
9.1. The cabinet does not currently let you download your data.
9.2. To get a copy of the data the specialist keeps, contact the specialist: the specialist is the controller of that data, and Kusties helps prepare the copy.
9.3. To get a copy of your cabinet account data (point 13), write to [email protected]. We will answer within one month (GDPR Article 12(3)).
10. Closing the account and deleting data
10.1. The account cannot currently be closed from the cabinet. To close your account, write to [email protected] from the account's e-mail address. We will close the account and unlink all specialists within one month.
10.2. After closure, the account can no longer be used to sign in. The account record is kept in a deactivated state; consent and security audit log records are kept as evidence for at least 3 years.
10.3. The specialists' records about you, including your workouts, stay with the specialists, who keep them under their own obligations (point 2.7 of the notice to patients).
10.4. Permanent deletion of the account is not currently available.
11. Security and your obligations
11.1. Choose a strong password, do not use it for other services and do not share it with anyone.
11.2. You can turn on two-step sign-in (an authenticator app and recovery codes) in your profile. We recommend it.
11.3. In your profile's "My devices" section you see on which devices your account is open, and you can log out any of them. A sign-in session ends after seven inactive days and no later than 30 days after signing in.
11.4. If you think someone else has accessed your account, change your password (you will need to sign in again on all devices) and write to us.
11.5. The cabinet must not be used to try to access other people's data, disrupt the service, collect data by automated means or otherwise break the law.
11.6. We may block an account that is used abusively or endangers the security of other people's data.
12. Health information and liability
12.1. The content of programmes and the exercises are set by your specialist. Exercise as your specialist instructed.
12.2. Kusties is not responsible for the content or quality of the specialist's services.
12.3. Kusties is liable for the operation of the cabinet under Latvian law. Kusties' liability is limited to the extent the law allows. This limitation does not apply to harm to life or health caused by Kusties' fault, or to intent or gross negligence.
13. Personal data in the cabinet
13.1. Kusties is the controller of the cabinet account. The specialist is the controller of the data the specialist keeps (programmes, workouts, visits); see the notice to patients: https://kusties.com/en/patients.
13.2. As controller, Kusties processes:
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account: e-mail address, first and last name, language, password hash; if you sign in with an external provider, also its identifier and profile picture link | the cabinet account | performance of a contract (GDPR Article 6(1)(b)) | while the account is open; after closure the account is kept in a deactivated state (point 10) |
| Link between the account and the specialist's record: when and how it was made | show your programmes and visits | performance of a contract | until unlinked |
| Consents: document, version, time, IP address, browser details | prove consent | legal obligation or legitimate interests (GDPR Article 6(1)(c) or (f)) | at present with no end date |
| Invitation confirmation, if you use another e-mail address: e-mail address, first and last name, password hash, IP address, browser details | check that the address is yours | performance of a contract | deleted 7 days after the confirmation link expires |
| Sign-in sessions: time, last activity, IP address, device, browser, operating system | security, "My devices" | legitimate interests (GDPR Article 6(1)(f)) | deleted 90 days after the session ends |
| Security audit log: actions (for example accepting an invitation, unlinking), IP address of failed sign-ins | security and accountability | legitimate interests | at least 3 years |
| Two-step sign-in: encrypted secret, hashes of recovery codes | account security | performance of a contract and legitimate interests | until turned off or replaced |
An e-mail address, a name and a password (or an external provider account) are needed to create a cabinet account; without them the cabinet cannot be used.
13.3. After you sign in to the cabinet, your browser stores: the refresh_token cookie (HttpOnly; up to seven days), an access token in browser storage (valid for 15 minutes), the kusties-session marker and your language and appearance settings. No analytics are loaded on cabinet pages.
13.4. The data is processed by the sub-processors listed in point 2.5 of the notice to patients. Your rights and how to complain are described in point 2.12 of the notice to patients.
14. Changes to the terms
14.1. We may change these terms, for example when the cabinet's features or the law change. We will tell you about material changes by e-mail or in the cabinet at least 30 days before they take effect.
14.2. If you do not agree to the changes, you can unlink the specialists and close your account (points 8 and 10).
14.3. Each version has a number and a date, given at the top of the terms.
15. Governing law and disputes
15.1. These terms are governed by the laws of the Republic of Latvia.
15.2. We first try to settle disputes by negotiation. If that fails, the dispute is decided by a court of the Republic of Latvia.
15.3. As a consumer, you may contact the Patērētāju tiesību aizsardzības centrs (Consumer Rights Protection Centre, www.ptac.gov.lv), and on data protection matters the Datu valsts inspekcija (www.dvi.gov.lv).
15.4. These terms do not limit your rights under the Patērētāju tiesību aizsardzības likums, the Pacientu tiesību likums and the GDPR.
16. Contacts
SIA "Kusties.com", registration No. 50203259371, legal address: Ābolu iela 14C, Mārupe, Mārupes nov., LV-2167, e-mail: [email protected]. For treatment, programmes and visits, contact your specialist.