Praxio
Log in

How Praxio handles personal data

Praxio is practice-management software for physiotherapy practices in Belgium, made by Praxio (privacy@praxio.be). This page says who is responsible for which data, what is kept and for how long, which providers are involved in running the service, and how you can exercise your rights.

Last updated August 2026

Data your practice keeps in Praxio

Your physiotherapy practice is the controller of everything it records in Praxio: the patient file, appointments, prescriptions, treatment sessions and billing. Praxio processes that data only as the practice's processor, on its instructions and under a data processing agreement, and never for its own purposes.

Online booking works the same way: when you request an appointment through a practice's booking page, the name, contact details and reason you enter go to that practice and to no one else. A booking request is kept for 12 months after it is handled; an accepted request lives on as the appointment in your file, which the practice keeps for the period Belgian law sets for patient records (30 years or more).

For anything in the practice's records (access, correction, erasure), contact the practice: as controller, it decides on those requests. Praxio gives it the tools to answer them, including a complete export of your file.

Data Praxio is responsible for

For the data you give directly to us, Praxio is the controller. We collect it to take steps towards or to perform a contract with you, except for feedback, which we process in our legitimate interest of fixing problems. In detail:

A request sent from this site

The form on this site (name, e-mail, phone, INAMI number and practice) is used only to contact you and set up your practice. It goes into our own customer-relationship system, hosted in the EU like everything else. A request that leads nowhere is deleted once we conclude no collaboration will come of it; if your practice joins Praxio, it is kept as the record of how the account came to be.

A practitioner account

Your account, its security settings and your public booking profile exist to provide the service, for as long as your practice is a customer. When a practice leaves, its data is exported and deleted as the processing agreement sets out.

A patient portal account

The portal account holds your name, e-mail address, phone number and language, never medical data. It is your account: it stays until you delete it, which you can do at any time from the account page. An account that is never verified and never linked to a practice is deleted after 30 days.

Feedback sent from the app

A feedback message can include a screenshot of the screen at that moment. The screenshot is deleted after 180 days, the message after 24 months, and both are used only to follow up on what was reported.

Who else is involved

Personal data is never sold and never used for advertising. Running the service involves a short list of providers, each doing one job:

  • Hosting

    EU

    The servers and the database run with a European hosting provider, inside the EU.

  • Brevo (e-mail)

    EU

    Sends the service's e-mail: booking confirmations, appointment reminders and account messages.

  • Push notifications (Expo, Apple, Google)

    Outside the EU

    Deliver notifications to the mobile app, which can carry an appointment and a patient's name. These providers process data in the United States, which is a transfer outside the EU, covered by the EU-US Data Privacy Framework or standard contractual clauses.

  • Google Calendar / Microsoft Outlook

    Outside the EU

    Only when a practitioner connects their own calendar, their appointments, patient names included, are mirrored into it. Depending on the provider this is a transfer outside the EU, under the same safeguards.

  • Error tracking

    EU

    Runs on Praxio's own servers and is configured to receive no personal data; technical error reports never reach a third party.

Backups and logs

Nightly backups keep a copy of the database for up to 6 months. Something deleted from the live system disappears from the backups as they rotate out, at the latest 6 months after the deletion.

Technical server logs are kept for 30 days.

Your rights

For the data Praxio controls you can ask for access, a copy to take elsewhere, correction, erasure or restriction, or object to the processing. Write to privacy@praxio.be and you get an answer within a month. For the practice's records, address the practice; Praxio helps it answer.

You can always lodge a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).