Hone Terms of Service

1. Acceptance of these terms

These Terms of Service (“Terms”) govern your use of Hone, a software service for electrolysis and skincare practitioners.

By creating an account, accessing, or using Hone, you agree to be bound by these Terms. If you do not agree, do not use Hone.

Hone is operated by Sam Vemuri (an individual operating as Hone, pending incorporation), located in Ontario, Canada. References in these Terms to “we,” “us,” and “our” refer to this operator.

2. The Service

Hone provides software tools for practitioners to:

• Manage client records and contact information
• Schedule appointments and accept online bookings
• Record electrolysis and skincare treatment sessions
• Send appointment confirmations and reminders
• Track treatment plans and progress
• Process payments (when integrated with a payment processor)
• Other related practice management functions

Hone is provided as a software-as-a-service. Features may be added, modified, or removed over time.

3. Eligibility

You must:

• Be at least 18 years old
• Be a licensed or qualified practitioner of electrolysis, skincare, or related services, OR an employee of such a practitioner
• Use Hone only for lawful purposes in jurisdictions where you are authorized to provide your services
• Provide accurate registration information and keep it current

You are responsible for ensuring you have the right to collect, store, and process any personal information you enter into Hone about your clients.

4. Your account

You are responsible for:

• Maintaining the confidentiality of your login credentials
• All activity that occurs under your account
• Notifying us immediately of any unauthorized access (privacy@hone.care)

5. Acceptable use

You may not:

• Use Hone for any illegal purpose
• Violate any applicable laws or regulations, including health information privacy laws
• Use Hone to harass, threaten, or harm any person
• Attempt to gain unauthorized access to Hone systems or other users’ accounts
• Reverse engineer, decompile, or attempt to extract Hone’s source code
• Use Hone to send spam, unsolicited marketing, or any communication that violates anti-spam laws
• Scrape, crawl, or harvest data from Hone except as permitted by your subscription
• Resell, sublicense, or redistribute Hone access without our written permission
• Upload viruses, malware, or other harmful code

We may suspend or terminate accounts that violate these rules.

6. Your data and content

You retain ownership of all content and data you enter into Hone, including client records, treatment notes, and photos (“Your Data”).

You grant us a limited license to process Your Data solely to:

• Provide and improve the Hone service to you
• Send notifications you have configured (e.g., appointment reminders to your clients)
• Comply with legal obligations

We do not use Your Data to train machine learning models or for any purpose unrelated to operating Hone.

You are responsible for:

• The legality of collecting and storing Your Data
• Obtaining required consents from your clients
• Providing your clients with appropriate privacy notices
• Responding to your clients’ requests regarding their information

7. Data Processing Agreement

This Section 7 forms a Data Processing Agreement (“DPA”) that applies when you (the “Controller”) use Hone (the “Processor”) to process personal information about your clients (“Client Data”).

7.1 Scope

We process Client Data only on your documented instructions, which include these Terms, your account configuration, and any specific written instructions you provide.

7.2 Confidentiality

Our personnel who access Client Data are bound by confidentiality obligations.

7.3 Security

We implement appropriate technical and organizational measures to protect Client Data, including:

• TLS encryption in transit
• Row-level security to isolate each studio’s data
• Access controls and audit logging
• We review security-sensitive changes before deployment

7.4 Sub-processors

We use the following sub-processors to provide Hone:

• Supabase (database and authentication, AWS US-East-1)
• Vercel (web hosting)
• Resend (transactional email)
• Twilio (SMS, when enabled)
• Stripe (payment processing, when enabled)
• Anthropic (AI features, when enabled)

We will notify account holders by email at least 30 days before adding or replacing a sub-processor that processes Client Data.

7.5 Data subject requests

If a client of yours contacts us directly with a request to access, correct, or delete their information, we will direct them to you (as the data controller) and assist you in responding.

7.6 Breach notification

We will notify you without undue delay, and in any event within 72 hours, of any confirmed security incident affecting Client Data.

7.7 Return or deletion

On termination of your account, we will delete Client Data within 30 days, except where retention is required by law. You may request immediate deletion in writing.

7.8 Audit

You may request a summary of our security practices and sub-processors at any time by emailing privacy@hone.care.

8. Payment and billing

Pricing for paid plans is published at hone.care/pricing. Pricing may change with 30 days’ notice to existing subscribers.

Subscriptions are billed in advance. Payment processing is handled by Stripe; we do not store full payment card details.

Refunds are at our discretion. We generally provide refunds for service outages or billing errors but not for subscription periods after you have used the service.

If your payment fails, we may suspend your account after notice and an opportunity to update payment details.

9. Termination

You may terminate your account at any time by contacting privacy@hone.care.

We may suspend or terminate your account if:

• You violate these Terms
• You fail to pay
• Required by law
• We discontinue the service (with at least 90 days notice for paid accounts)

On termination, you may export Your Data within 30 days. After that, Your Data may be deleted from active systems.

10. Disclaimers

Hone is provided “AS IS” and “AS AVAILABLE” without warranties of any kind, whether express or implied.

We do not warrant that:

• The service will be uninterrupted, error-free, or secure
• Any data will be free from loss or corruption
• The service will meet your specific requirements

No service level agreement. We do not commit to any specific uptime, response time, or availability percentage. We aim to provide reliable service but make no binding commitments. Planned maintenance windows, third-party service disruptions (Supabase, Vercel, Resend, Twilio, Stripe, AWS), and unforeseen outages may interrupt service without notice. Such interruptions do not constitute a breach of these Terms.

Clinical and professional disclaimer. Hone is a record-keeping and practice management tool. Hone does not provide medical advice, clinical guidance, or professional recommendations. Practitioners are solely responsible for:

• All clinical decisions, including treatment plans, settings, and contraindication assessments
• Compliance with their professional licensing body’s rules and regulations
• Verification of client allergies, medications, and health conditions before treatment
• The appropriateness, safety, and outcomes of any service they provide
• Maintaining their own clinical judgment independently of any information displayed in Hone

Information displayed in Hone, including treatment time totals, treatment plan progress, automated reminders, and historical session data, is provided for record-keeping purposes only and is not a recommendation, diagnosis, or clinical guidance. Practitioners must independently verify all information and exercise their own professional judgment.

Photography and image consent. Where practitioners upload photographs of clients (skin, treatment areas, before/after images), the practitioner is solely responsible for obtaining explicit, informed, written consent from the client for the capture, storage, and any future use of those images. Hone does not verify such consent and assumes none has been obtained for any purpose beyond internal record-keeping.

We do not provide medical, legal, or professional advice.

11. Limitation of liability

To the maximum extent permitted by law:

Our total cumulative liability for any claim arising from or related to these Terms or the Hone service is limited to the greater of:

• $100 CAD, or
• The total amount you paid us for Hone in the 12 months preceding the claim.

We are not liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, revenue, data, or business opportunities.

We are not liable for any harm caused by a practitioner’s use or misuse of client data, including but not limited to: unauthorized disclosure of client information by a practitioner, a practitioner’s failure to obtain required client consents, a practitioner’s negligent or wrongful entry of client data, or a practitioner’s use of Hone in violation of applicable health information, privacy, or professional regulations. Practitioners are solely responsible for their handling of client data and their compliance with laws governing their professional practice.

This limitation applies even if we have been advised of the possibility of such damages and even if a remedy fails its essential purpose.

Some jurisdictions do not allow these limitations. In those jurisdictions, our liability is limited to the maximum extent permitted by law.

12. Indemnification

You agree to indemnify and hold us harmless from any claims, damages, losses, or expenses (including legal fees) arising from:

• Your use of Hone in violation of these Terms or applicable law
• Your Data or content you upload
• Your interactions with your clients
• Your violation of any third party’s rights

13. Governing law and disputes

These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict of laws principles.

Any dispute arising from these Terms or use of Hone will be resolved in the courts of Ontario, Canada, and you consent to the exclusive jurisdiction of these courts.

You waive any right to participate in a class action or class arbitration against us.

14. Force majeure

We are not liable for any failure to perform our obligations under these Terms when such failure results from causes beyond our reasonable control, including but not limited to:

• Acts of God, natural disasters, fire, flood, earthquake
• War, terrorism, civil unrest, government action, sanctions
• Pandemic, epidemic, or public health emergency
• Internet outages, denial of service attacks, security incidents originating from third parties
• Failure or unavailability of third-party services (including but not limited to Supabase, Vercel, AWS, Resend, Twilio, Stripe, Anthropic)
• Power outages, telecommunications failures, infrastructure failures
• Labour disputes, strikes
• Changes in law or regulation that materially affect the service

If a force majeure event prevents us from providing the service for more than 30 consecutive days, either party may terminate these Terms by written notice, with no further liability.

15. Audit rights

If you require information about our security practices, sub-processors, or data handling to satisfy your own compliance obligations, we will provide a summary report on written request to privacy@hone.care. Requests are limited to once per calendar year per practitioner. We are not required to permit on-site inspections, access to our systems beyond the summary report, or audits conducted by third parties without our prior written consent.

16. Data export and return on termination

On termination of your account, you may request a copy of Your Data within 30 days of termination by emailing privacy@hone.care.

We will provide Your Data in a machine-readable format that we select (typically CSV or JSON). We are not obligated to provide data in any specific proprietary format, in a format compatible with any specific third-party software, or with any specific data transformation or restructuring.

After 30 days from termination, we may delete Your Data from active systems. Backups containing Your Data are purged within 90 days of termination.

17. Changes to these Terms

We may update these Terms from time to time. Material changes will be communicated by email at least 30 days before taking effect. Continued use of Hone after changes take effect constitutes acceptance.

The current version is always at hone.care/terms.

18. Miscellaneous

Entire agreement. These Terms, together with the Privacy Policy, constitute the entire agreement between you and us regarding Hone.

Severability. If any provision is found unenforceable, the remaining provisions remain in effect.

No waiver. Our failure to enforce a provision is not a waiver of our right to enforce it later.

Assignment. You may not assign these Terms without our consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.

Independent contractors. Nothing in these Terms creates a partnership, joint venture, or employment relationship.

Anti-reverse engineering. You will not, and will not permit any third party to: (a) reverse engineer, decompile, disassemble, or attempt to derive the source code or underlying algorithms of Hone; (b) copy or modify Hone’s interface, features, or functionality for the purpose of creating a competing product; (c) use Hone to benchmark or develop a competing service. This applies regardless of any local law that would otherwise permit such activities, to the maximum extent permitted by law.

Survival. Sections that by their nature should survive termination (including limitation of liability, indemnification, governing law, and any payment obligations) will survive termination of these Terms.

19. Contact

General questions: privacy@hone.care

Legal notices: privacy@hone.care (mailing address forthcoming, will be provided upon request)

Operator: Sam Vemuri (operating as Hone, pending incorporation), Ontario, Canada