Professional Terms of Use

About these terms

These terms are an agreement between you and Company detail legal name, a company registered in India (CIN Company detail CIN), registered office Company detail registered address (“Holimo”, “we”, “us”). They apply when you use the Holimo professional portal at pro.getholimo.com (“the portal”) as a dietitian, nutritionist, personal trainer or health coach.

You accept these terms when you tick to agree in the portal before submitting your profile. We record the version you accepted. This is version 2026-10-13.

Our Privacy Policy explains how we handle your own personal data. If you also use the Holimo app as a person, our Terms of Service apply to that use.

Who can use the portal

You can use the portal only if all of these are true:

• you are 18 or older;
• you are a practising dietitian, nutritionist, personal trainer or health coach;
• you hold every licence, registration or certification your profession needs in the country where you practise, and it is current;
• everything you tell us about yourself and your credentials is true, and you will tell us promptly if it changes, for example if your registration lapses, is suspended or is restricted, or you become subject to a disciplinary finding. Tell us within 7 days at support@getholimo.com, and don’t connect with new clients in the meantime if the change affects your right to practise;
• you are not a member of the Holimo team. Team members can’t hold a professional profile, and professionals can’t join the team.

You use the portal as an individual. Group or clinic accounts aren’t available yet, and you must not share your account with anyone, including colleagues or assistants.

Verification

Before you can connect with anyone, our team reviews your profile and the documents you upload, such as a registration certificate, a certification or an ID. We may check public registers and ask you for more information. We then approve your profile at one of three levels, which people see on your card: licence checked (on the official register), certification checked or identity checked. We can also decline a profile, and we tell you why.

Upload only what we need. If you use an Indian Aadhaar card as ID, mask all but its last 4 digits first.

Dietitians and nutritionists must give their register and registration number. These are examples of what we check:

Verification shows people what we checked, at the time we checked it. It isn’t an endorsement of you or your advice, and it doesn’t replace your own duty to stay qualified. We may ask you to verify again, for example once a year.

You are an independent professional

• Holimo is not a healthcare provider. It is a general wellness app and a tool that lets people share their own data with professionals they choose.
• You are not our employee, agent or partner, and we don’t supervise, refer, recommend or check your work. Don’t suggest otherwise.
• Your advice is your own professional responsibility. Follow the standards, codes of conduct and scope of practice of your profession and your regulator.
• Keep any professional indemnity or liability insurance your profession or country requires.
• Any agreement about fees, appointments or services is between you and your client. Holimo takes no part in it and handles no payments between you.

Client consent and what you can see

Each person decides whether to connect with you, which areas to share (for example food, weight or workouts), how far back, and for how long. They see your verified details before they agree, and they can change their choices or stop sharing at any time. When they do, your access ends straight away.

• You see only the areas a client shares, only from their chosen start date, and only while the connection is active.
• You never see a client’s name, email address, account ID or date of birth: only their age and the name they choose to show you. You never see their journal, cycle data, notes, progress photos or AI coach chats.
• Every time you open a client’s data, it is recorded and shown to them in their access history.
• Your invites may suggest areas to share, but never medication or mood. Don’t pressure anyone to share more than they want, and don’t make your services depend on them sharing areas you don’t need.
• Never ask a client for their Holimo sign-in details, and never try to see data they haven’t shared with you.

How you may use client data

Use what a client shares only to support that client. In particular, you must not:

• contact people you met through Holimo to sell them other services, or market to them;
• sell, rent or give client data to anyone, except where your profession or the law requires it;
• use client data to train or improve AI models, or put it into AI tools that keep or learn from it;
• scrape, copy in bulk, screenshot systematically or otherwise export client data out of the portal. The portal has no export on purpose;
• use the portal as your clinical record system (see Your records).

If a client or Holimo asks you to delete anything you copied from the portal, delete it, unless your record-keeping law or regulator requires you to keep it.

Your records

Holimo isn’t your record system. Keep your own professional records as your regulator requires, outside Holimo, and record in them only what you need.

Your private notes in the portal are visible only to you. After a connection ends they become read-only, and Holimo deletes them, with your messages, check-ins and bookings with that client, 90 days after the end. We don’t keep copies for you.

Confidentiality and security

• Keep everything you see in the portal confidential, to at least the standard your profession requires.
• Sign in only with your own account. The portal requires an email code and an authenticator app every time; keep both to yourself.
• Use the portal on devices you control, with a screen lock and up-to-date software, and sign out on shared computers. The portal signs you out after 30 minutes without activity.
• Don’t let anyone see client data over your shoulder or on a shared screen without the client’s agreement.
• Tell us at security@getholimo.com within 24 hours if you think someone else has used your account, or that client data from the portal has been lost or seen by someone who shouldn’t see it. We may pause your account to protect your clients while we look into it.

Messages, check-ins and bookings

• Be respectful and professional. No harassment, discrimination, threats or sexual content, and never shame anyone about their weight, body or food.
• No advertising, spam or promotion of products, and no links to anything a client didn’t ask for.
• No prescribing or dose advice through Holimo. Questions about medication or GLP-1 doses go to the client’s prescriber. Don’t diagnose beyond your scope of practice.
• Mark a plan or recommendation as a “Plan suggestion” so the client knows it comes from you. The client decides whether to follow it.
• If you add a booking with a video link, the call takes place in your own video service, such as Google Meet or Zoom. You are responsible for that service, its security and its privacy terms. Don’t record a call without the client’s clear agreement.
• Keep check-in questions to what you need to support the client.
• Messages have a daily limit. Clients can report messages to us; if they do, our team reads the reported message.

Safety and escalation

• Watch for signs your profession treats as red flags, such as thoughts of self-harm, signs of an eating disorder, or serious side effects from medication, and respond as your training and regulator require.
• Point clients to medical care when something is outside your scope. Our crisis resources page lists emergency numbers and helplines by country.
• You can also report a safety concern about a client or a message to us at support@getholimo.com. This doesn’t replace your own duty to act.

Data protection

Holimo is the controller for the portal and the sharing it provides. Each client chooses you as a recipient. For anything you do with client data outside Holimo, including your own records, you are an independent controller and must follow the data protection law that applies to you, such as the UK GDPR, the EU GDPR, India’s DPDP Act and US state laws. That includes having your own lawful basis, telling clients how you use their data, and answering their requests about it.

If you receive a request from a client about data held in Holimo, point them to the app or to privacy@getholimo.com. Help us when we need to respond to a client’s request or to a regulator about data you saw.

Holimo and you are each responsible for your own compliance. We are not joint controllers, and neither of us processes client data on the other’s behalf. In particular:

• UK and EU: for what you do outside Holimo you are a controller under the UK GDPR or EU GDPR. Health data is special category data, so you need a condition under Article 9 as well as a lawful basis, and you must keep it secure.
• India: you are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 for what you do outside Holimo, and must follow it and its Rules once they apply, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 until then.
• United States: you must follow the state laws that apply to you, including consumer health data laws such as Washington’s My Health My Data Act, and any HIPAA duties (see below).
• Everywhere: process client data only as lawful in your country, keep it confidential and secure, tell us within 24 hours of a suspected breach involving data from the portal, and help us meet our own duties to clients and regulators.

If you breach this section, we may pause or remove your profile, end your connections and tell the affected clients and, where the law requires, a regulator.

United States: HIPAA

The portal is a consumer-directed sharing tool: each person decides to share their own data with you. Holimo provides it to people, not to healthcare providers or health plans, and is not acting as a business associate of any HIPAA covered entity. We don’t sign business associate agreements.

If you are, or work for, a HIPAA covered entity or business associate (for example, if you bill health insurance for your services), you must not use the portal to create, receive, keep or send protected health information under HIPAA, or as part of providing or billing covered services, unless you have first contacted us at legal@getholimo.com and we have agreed otherwise in writing. Don’t use the portal as your record system; keep your HIPAA records in your own systems.

By accepting these terms you confirm: “I am not using Holimo on behalf of a HIPAA covered entity or business associate, or I have contacted Holimo and agreed terms in writing.” If that stops being true, tell us before you keep using the portal.

Fees

The portal is free at launch. If we introduce fees later, we will tell you at least 30 days before they start, and you can close your profile instead. You won’t pay anything unless you agree to the fees.

What Holimo may do

To keep people safe and the portal trustworthy, we may:

• verify you again, or ask for more information, at any time;
• pause your account while we look into a report, a security concern or a change in your credentials. While you are paused you can’t see any client data, and your clients see “Paused by Holimo”. Their connections resume if we lift the pause;
• end a single connection, with a note to the client;
• read a message a client reports, and remove it;
• remove your profile if you break these terms, your credentials are no longer valid, or keeping you on the portal would put people at risk.

We will tell you why, unless the law or someone’s safety prevents it. You can ask us to review a decision by emailing support@getholimo.com.

Closing your profile

You can close your profile at any time in the portal (Profile → Close your professional profile). When you do, every connection ends, your clients see that it has ended, and your credential documents are deleted. Your notes, messages, check-ins and bookings are deleted 90 days later. We keep the record of what each client agreed to and the log of what you viewed for 2 years, as accountability records.

You can also delete your professional account completely, including your sign-in, yourself in the portal (Profile → Delete my account). The records above are still kept for their 2 years.

Your duties of confidentiality, the limits on using client data, and your indemnity continue after your profile closes.

Disclaimers and liability

We provide the portal “as is”. We work to keep it accurate, available and secure, but we can’t promise it will always be error-free or uninterrupted, or that a client’s data is complete. Clients log what they choose, and some data comes from Apple Health or Health Connect.

To the extent the law allows, we are not liable for indirect or consequential losses, or for any advice or service you give your clients. Our total liability to you for all claims together is limited to the greater of the fees you paid us in the 12 months before the claim arose, or ₹10,000 (US$100 if you are outside India).

You agree to indemnify Holimo against reasonable losses, damages, fines and costs (including reasonable legal fees) from a claim by a client, a regulator or anyone else, to the extent the claim arises from:

• your advice or professional services;
• your use of client data outside Holimo, or your breach of data protection law;
• untrue or out-of-date information about you or your credentials;
• your breach of these terms.

This doesn’t cover anything caused by our own breach of these terms, negligence or misconduct. We will tell you promptly about a claim, let you take part in handling it, and not settle it in a way that admits fault on your behalf without your agreement.

Nothing in these terms limits liability that can’t be limited by law, such as for death or personal injury caused by negligence, or for fraud.

Governing law and changes

These terms, and any dispute about them or the portal, are governed by the laws of India, and the courts at Company detail city of the registered office, India, have exclusive jurisdiction. Before starting a claim, either of us will first try to resolve the dispute informally for 30 days, starting when one of us writes to the other (to us at legal@getholimo.com). Either of us may still ask any court for urgent relief, for example to protect client data. If the law of the country where you practise gives you rights that a contract can’t remove, you keep them.

If we change these terms, we will update the version and date above and tell you in the portal at least 30 days before important changes take effect. You will be asked to accept the new version to keep using the portal. If you don’t agree, you can close your profile.

Contact

support@getholimo.com · Security and data incidents: security@getholimo.com · Legal notices: legal@getholimo.com · Company detail legal name, Company detail registered address