Privacy Policy

Tempo EMR (“Tempo,” “we,” “us”) is an electronic medical records and practice-management service for physical therapy clinics operated by S&M Clinical Software LLC from Chandler, Arizona. Clinics use Tempo to document care, schedule visits, bill payers, and deliver home exercise programs to their patients.

This policy explains what information Tempo handles, how it is used, and the choices available to you. It covers this website, the Tempo application used by clinic staff, the patient portal, and text messages sent through Tempo on a clinic’s behalf.

Tempo processes protected health information (PHI) on behalf of the clinics that use it. Under the Health Insurance Portability and Accountability Act (HIPAA), each clinic is the covered entity responsible for your care records, and Tempo acts as its business associate under a written Business Associate Agreement.

Your rights regarding your health information, including access to your records and how they may be used or disclosed, are described in your clinic’s Notice of Privacy Practices. Requests about your care records should go to your clinic. Tempo uses PHI only to provide the service to the clinic, as permitted by HIPAA and the Business Associate Agreement, and never for advertising.

Clinic staff accounts. Name, work email address, role, and login activity for clinicians and staff who use the application.

Patient records, on behalf of clinics. Demographics, contact details, insurance information, clinical documentation, home exercise programs, and billing records that the clinic enters or that the patient provides through the portal.

Patient portal and exercise logging. If your clinic enrolls you in remote exercise tracking, Tempo stores your mobile number, the exercise entries you log, and reminder preferences.

Technical data. Server logs and security audit records (such as who accessed a record and when) needed to operate the service securely. These records exist to protect your information and are not used for advertising.

The dedicated Tempo EMR Test Clinic number is currently used for internal development and quality assurance with operator-controlled phones and fictional patient records. It is not used to message real patients or other clinics. Operators choose whether to receive test texts separately before their phone number is enabled.

Tempo EMR supports text messaging for physical therapy clinics using its patient portal. When a clinic uses this program, messages may include a patient-portal invitation, a requested sign-in link, a link to pay an outstanding balance, and reminders to log home exercises. Tempo does not send marketing or promotional text messages through this program.

A participating clinic should offer patients a separate, optional choice about these texts in its new-patient paperwork before the first message. Message frequency varies; exercise logging reminders are generally no more than once per day. Message and data rates may apply.

To stop: reply STOP to any message to opt out of further texts. For help: reply HELP, contact your clinic, or email support@tempo-emr.com.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile numbers are used only to deliver the messages described above. They are shared with our messaging carrier solely to transmit those messages.

Tempo runs on infrastructure and services from a small number of providers that process information on our behalf:

• cloud hosting, database, and file storage;
• AI inference used to assist clinicians with drafting documentation, never to make clinical or billing decisions on its own;
• a healthcare clearinghouse for insurance claims and eligibility checks;
• a telecommunications provider for text messages and fax;
• business email;
• error monitoring that receives redacted diagnostics.

Every provider that can access PHI is bound by a Business Associate Agreement. We do not sell information, and we do not share it with advertisers or data brokers.

The application uses a session cookie to keep signed-in users signed in. It sets no advertising or cross-site tracking cookies. Clinic sessions expire after a period of inactivity, and patient portal sessions expire on a fixed schedule.

Information is encrypted in transit and at rest. Access is limited by role and by clinic, every access to and change of a patient record is logged, and certain identifiers are additionally encrypted at the field level. No system is perfectly secure, but these controls are designed to meet the HIPAA Security Rule.

Patient records are retained for as long as the clinic’s legal and professional record-keeping obligations require, and are removed from active use rather than destroyed when a clinic ends a chart. Audit records are kept to support security investigations and are never edited.

Tempo does not knowingly collect information directly from children. Records for minors are created and controlled by the treating clinic with a parent or guardian.

When this policy changes, the effective date above is updated and the current version is published at this address.

Questions about this policy or about how Tempo handles information: support@tempo-emr.com. Questions about your own health records should go to your clinic.