yellow caresStart your free month

YellowCares Practitioner Agreement

In short

Terms

This Agreement is between Adventure Works Solutions LLP, of 364 C, Pocket J and K, Dilshad Garden, Delhi 110095, GSTIN: 07ABEFA5433E1ZT ("Yellow", "we"), and the practitioner who signs up ("you"). It applies when you create a YellowCares account or start a paid plan.

  1. The service. YellowCares lets you send clients an intake questionnaire before your first session, a short check-in each week, the week's materials, and a feedback form at the end of a programme, all by email. It works alongside the booking system you already use. The Yellow directory listing is separate from the paid workspace: your directory profile is free and remains listed if you cancel the workspace. We may improve the service over time and will tell you before we remove a feature you rely on.
  2. Price and payment. Your first month of YellowCares workspace access is free, and we do not ask for payment details at sign-up. After the free month ends, we invite you to add your payment details and choose whether to continue with a paid subscription at US$5 a month. The free month does not automatically convert to a paid subscription, and you are not charged unless you choose to subscribe. Before you confirm the paid subscription, we show you the first charge date and the recurring monthly fee. Once you confirm, the fee is billed in advance through Stripe and the subscription renews monthly until cancelled. The workspace fee applies regardless of whether you have active clients. We will not raise your price while you stay subscribed. Any later change to the price for new subscribers will not apply to you. Fees are shown before tax; any sales tax or VAT due is added where the law requires it.
  3. Cancelling. You can cancel at any time from your account or by email to the contact address below. If you do not choose a paid subscription after the free month, you will not be charged. Once paid billing has started, cancellation takes effect at the end of your current paid billing period, and we do not charge you again. Cancelling workspace access does not remove your free Yellow directory profile. We do not refund part months, except where the law requires it. We may suspend an account that is used to send spam or unlawful content, after telling you why.
  4. Your clients and their information. You decide which clients to add and what to send them. All information about your clients that you or they put into YellowCares ("Client Data") belongs to you. We use Client Data only to run the service for you. We never contact your clients for our own purposes, never market Yellow's programmes or anyone else's products to them, never sell Client Data, and never share it except with the service providers listed in clause 7.
  5. Confidentiality. Yellow keeps Client Data, and anything else you tell us about your practice that is not public, confidential. The internal support and operations screens show technical status, support references and practice information; they do not provide access to client answers or private materials. Routine support uses these diagnostics. Authorised technical administrators with privileged database or server access can access Client Data, including client details, answers, feedback and uploaded materials. Such access must be limited to what is necessary to operate, secure or support the service, fulfil your documented instructions or meet legal obligations, and be subject to confidentiality. An account expressly assigned to your workspace as an active member can also access its client records and materials. An operations role alone does not grant that workspace access. Confidentiality continues after you leave.
  6. Your responsibilities. You confirm that you have your clients' consent, or another lawful basis, to send them emails through YellowCares and to collect their answers, including health information. You are responsible for the content you send and for your professional and clinical decisions. YellowCares does not provide medical advice or diagnosis.
  7. How we look after data. Sign-in uses a single-use email code. Normal application access to client records and private materials is restricted to the relevant signed-in practitioner, active workspace members and the relevant client. Server-side service processes use privileged access to perform authorised tasks. This is not a system that makes Client Data technically inaccessible to Yellow's authorised technical administrators. Uploaded files require authenticated access and use short-lived storage links. Programme notifications link to the private workspace; questionnaire answers, personal notes and uploaded files are not included in those emails. Support diagnostics use error references and operational information rather than client answers or private materials. We use Brevo for transactional email, Cloudflare Workers for application hosting, Supabase for authentication, database and private file storage, and Stripe for subscription payments. We will tell you before adding a new provider that handles Client Data. If you are in the UK or the European Economic Area, the Data Processing Terms below also apply.
  8. Export and deletion. Requests for a copy, correction or deletion of Client Data are handled manually. Practitioners can contact Yellow using the contact address below; clients can contact their practitioner by replying to a programme email. The current application does not provide a self-service bulk export or account-deletion flow. Cancelling the workspace subscription does not remove the free directory profile.
  9. Reviews on your profile. At the end of a programme your client may leave feedback. It appears on your public Yellow profile only if she ticks that she agrees and you approve it. You can hide any review at any time.
  10. Liability. We take care to keep YellowCares working, but we cannot promise it will never be interrupted. Our total liability to you in any 12 months is limited to the fees you paid us in that period. Nothing in this Agreement limits liability that the law does not allow us to limit.
  11. Changes to these terms. We will email you at least 30 days before any change that affects you. If you do not agree, you can cancel before it takes effect, and the change will not apply to you.
  12. Law. This Agreement is governed by the laws of India, and the courts at Mumbai have jurisdiction. If you are a consumer, you keep any rights the law of your own country gives you.
  13. Contact. Questions, cancellations and data requests: ab[at]spotyellow.com.

Data Processing Terms (UK and EEA practitioners)

These terms apply where the UK GDPR or the EU GDPR applies to Client Data. You are the controller of Client Data and Yellow is your processor.

  1. Instructions. We process Client Data only on your documented instructions, which are this Agreement and your use of YellowCares, unless the law requires otherwise, in which case we tell you first where we are allowed to.
  2. What we process. Names, email addresses and the answers clients give to your questionnaires, check-ins and feedback forms, which may include health information. We process it for as long as your account is open, to send your messages and store the answers.
  3. People. Routine support uses technical diagnostics rather than client answers or private materials. Authorised technical administrators may access Client Data where necessary to operate, secure or support the service, carry out your documented instructions or meet legal obligations. Everyone authorised to access Client Data must be bound by confidentiality. An internal operations role alone does not grant access to practitioner workspaces; a separately assigned active workspace membership does.
  4. Security. We use single-use email codes for sign-in and enforce application and database access checks to separate practitioner workspaces and client records. Practitioners and active workspace members can access records within their authorised workspace; clients can access their own programme information and materials shared with them. Uploaded files are stored privately and delivered through authenticated access using short-lived storage links. Server credentials used for privileged processing are kept in server-side configuration rather than exposed to client browsers. Routine support uses technical diagnostics and support references rather than client answers or private materials. Authorised technical administrators retain privileged access as described in the Confidentiality and People clauses; that access must be limited to necessary service operations, security, support, your documented instructions or legal obligations, and be subject to confidentiality. These measures do not make Client Data technically inaccessible to Yellow's authorised administrators. We do not promise a particular encryption standard, backup frequency, recovery time or deletion schedule in this Agreement.
  5. Sub-processors. You authorise the providers listed in clause 7. We will tell you before adding or replacing one, and you may object; if we cannot address your objection, you may cancel. Each sub-processor is bound by data protection terms at least as strict as these.
  6. Transfers. Yellow is operated by Adventure Works Solutions LLP in India. Our current Supabase database project is hosted in Frankfurt, Germany. EU database hosting does not mean all processing stays in the UK or EEA: authorised administration from India and processing by our hosting, email and payment providers may involve other countries. Where a transfer is subject to UK or EU transfer restrictions, the applicable transfer safeguard must be identified and put in place before that transfer, together with any required transfer assessment and supplementary measures. This may include the EU Standard Contractual Clauses and, for UK transfers, the UK Addendum or International Data Transfer Agreement, where appropriate.
  7. Helping you. We help you answer clients' requests to access, correct or delete their data, and with security, breach notification and data protection impact assessments, as far as our role allows.
  8. Breaches. We tell you without undue delay after becoming aware of a personal data breach affecting Client Data, with the information you need to meet your own obligations.
  9. End of service. When our provision of services involving the processing of Client Data ends, we will, at your choice, return or delete all Client Data and delete existing copies, unless applicable law requires us to retain it. Any Client Data retained because of a legal requirement will remain subject to confidentiality and will be processed only as required by that law.
  10. Audits. We make available the information needed to show we meet these terms and allow and contribute to reasonable audits, including inspections, by you or an auditor you appoint, on reasonable notice. Audits will normally take place no more than once a year, but this limit does not apply following a personal data breach or where an additional audit is required by applicable law or a regulator.