← mydosha.org

MyDosha — Professional Subscription Terms

Terms applicable to Ayurvedic practitioners, clinics and schools subscribing to MyDosha. Operated by Thomas Thijs, P. IVA IT01671290530, Sorano, Italy. For the general legal notice see /imprint. Une version française est disponible sur /cgv.

Article 1 — Scope, acceptance & the parties

These Terms of Service (the "Terms") govern access to and use of the MyDosha platform — the software service available at mydosha.org and its per-clinic subdomains (for example clinic.mydosha.org) (together, the "Service"). They form a binding agreement between you, the professional customer (the "Practitioner", "Customer" or "you"), and the operator ("we", "us", the "Operator").

The Operator is Thomas Thijs, a natural person and sole operator, trading under the brand MyTrueDosha, established at Frazione Ammazzavecchia 12, 58010 Sorano (GR), Italy. Full operator-identity details are set out in our legal notice.

The Service is offered on a business-to-business (B2B) basis, only to qualified Ayurvedic practitioners, clinics and schools acting in the course of their profession, trade or business. It is not a consumer service and is not marketed to the general public. Where you nonetheless qualify as a consumer under mandatory law, Article 16 (Rome I) preserves the consumer-protection rules that apply to you.

By creating an account, starting a free trial, subscribing to a paid plan, or otherwise using the Service, you confirm that you have read, understood and accepted these Terms, and that you are entering into this agreement in the course of your profession, trade or business. Where you accept these Terms on behalf of a clinic, practice, school or other organisation, you warrant that you are authorised to bind that organisation, and "you" refers to both you and that organisation. If you do not agree with these Terms, do not use the Service.

Together with the documents cross-referenced below — our Privacy Policy and our Intended Use statement — these Terms form the entire agreement between you and the Operator on their subject matter and supersede any prior understanding.

Future entity. The Operator intends to transfer operations to Aardstroom B.V., a Dutch private limited company currently being incorporated (in oprichting) and to be registered with the Netherlands Chamber of Commerce (KvK). On that transfer, this agreement (including its governing law and registered seat) is expected to move to that company and to the laws of the Netherlands. We will give notice of any such transfer in accordance with Article 15; the mandatory consumer-protection carve-out in Article 16 will continue to apply, and your continued use after the effective date constitutes acceptance, subject to your termination rights. Until then, the Operator identified above remains the contracting party.

Article 2 — Definitions

In these Terms:

• Service — the MyDosha software-as-a-service platform and all its modules: AI-assisted patient intake, the AI clinical dossier (a reorganisation of a patient's self-report), the practitioner portal (records, examination notes, care plan, photos), the curated reference library, the herb and formula inventory, and invoicing.
• Practitioner / Customer — the qualified Ayurvedic practitioner, clinic, practice or school that holds the account and uses the Service in a professional capacity.
• Patient — an individual whose intake responses and health information the Practitioner processes through the Service.
• AI Output — any content the Service generates by reorganising a Patient's self-report or by surfacing curated reference content, including the intake summary and the clinical dossier — never a clinical finding, diagnosis, risk or urgency flag, patient-specific drug- or herb-interaction assessment, treatment or prescribing recommendation, or clinical decision support.
• Subscription — a paid plan (Starter, Solo or Practice, or a custom Academy plan) under which you access the Service.
• Trial — the 14-day free evaluation period described in Article 4.
• Account Data — the Practitioner's own identity, login and billing information.
• Patient Data — personal data, including special-category health data under Article 9 GDPR, relating to Patients and processed through the Service.
• GDPR — Regulation (EU) 2016/679.
• MDR — Regulation (EU) 2017/745 on medical devices.

Article 3 — The Service & eligibility

The Service is a business-to-business software tool built exclusively for qualified Ayurvedic practitioners, clinics and schools. It gives practitioners a workspace to run AI-assisted patient intake, generate an intake dossier that reorganises the patient's own report, record your own clinical notes and the care plan you author, consult a curated reference library, manage herb and formula inventory, and issue invoices. The Service stores and organises the notes, plans and decisions you enter; it does not generate, suggest or determine any clinical content, and you author every clinical field. It is an intake-summarisation, records and practice-management tool — not a clinical, diagnostic or treatment tool (see Article 6). The full description of what each feature does — and, importantly, what it deliberately does not do — is set out in our Intended Use statement.

Eligibility. To use the Service you represent and warrant, on a continuing basis, that:

• you are a qualified Ayurvedic practitioner (or a clinic, practice or school employing or representing such practitioners), holding any registration, qualification or professional-body membership required to practise or teach Ayurveda lawfully in your jurisdiction;
• you have the professional competence to independently form your own clinical judgment, and you will treat any material the Service presents (including AI Output and reference content) as administrative support only, never as a substitute for your own assessment, and you will use the Service only within the scope of your professional competence and lawful authority;
• every clinical decision made in your practice is, and remains, yours;
• the account information you provide is accurate and kept up to date; and
• you are acting for purposes relating to your trade, business or profession, not as a consumer.

We may, at our discretion, ask you to evidence your professional qualification, and we may suspend or refuse access where we reasonably believe this eligibility is not met. The Service is not offered to, and must not be used by, private individuals for their own personal health purposes.

You must keep your account credentials confidential and are responsible for all activity under your account. Notify us without undue delay of any suspected unauthorised access at security@mydosha.org.

Article 4 — Subscriptions, free trial, billing & renewal

Plans and prices (all prices in euro, excluding any applicable taxes):

• Starter — €19/month. For students and first-year practitioners. Full features, subject to a cap of 15 active patients. Monthly billing only (no annual option).
• Solo — €49/month (annual option approximately €470/year, saving two months). For a single practitioner. Unlimited patients.
• Practice — €149/month (annual option approximately €1,430/year). For up to three practitioners. White-label; unlimited patients.

Academy and institutional plans are custom-quoted — contact hello@mydosha.org.

Free trial. New Customers may start a 14-day free trial, self-serve, with no payment card required to begin. Unless you subscribe to a paid plan before the trial ends, access to paid features ceases when the trial expires. Trial data is retained and deleted in accordance with Article 13 and our Privacy Policy.

Payment. Paid Subscriptions are billed in advance through our payment processor, Stripe, at the start of each billing period (monthly, or annually where you have chosen an annual plan). By subscribing you authorise us, through Stripe, to charge the applicable fee to your chosen payment method for each billing cycle.

Auto-renewal. Subscriptions renew automatically at the then-current price for successive periods of the same length until cancelled.

Cancellation. You may cancel at any time. Cancellation takes effect at the end of the current paid period; you retain access until then. We do not provide refunds for partial or unused periods, and cancellation does not entitle you to a refund of fees already paid, except where mandatory law requires otherwise.

Price changes. We may change subscription prices or plan structure on at least 30 days' prior notice to active subscribers (typically by email). A price change takes effect at your next renewal after the notice period; if you do not accept it, you may cancel before it takes effect. For annual plans, we will give the price-change notice at least 30 days before your annual renewal date so that you can cancel before the new price takes effect.

Taxes. Prices are stated in euro. VAT is not currently applied: the Operator qualifies for the Italian flat-rate regime (regime forfettario, Art. 1, para. 58, Law 190/2014), under which invoices are issued without VAT (operazione in franchigia da IVA). The Operator’s Italian VAT number is IT01671290530. Should the Operator’s tax regime change, or a VAT registration in another Member State occur, the euro prices above remain unchanged and any applicable VAT will be added to invoices issued from the changeover date.

Non-payment. If a charge fails or a payment is overdue, we may retry the charge and, following reasonable notice, suspend your access to the Service until the amount due is paid (see Article 13), without prejudice to our other remedies.

Article 5 — Acceptable use

You agree to use the Service lawfully, professionally and in good faith, and only within the scope described in these Terms and the Intended Use statement. In particular, you must not, and must not permit anyone to:

• present AI Output — to a Patient or to anyone else — as a medical diagnosis, treatment recommendation, prescription, or safety assessment, or otherwise misrepresent its nature; AI Output is a structured reorganisation of self-reported data, not a clinical finding (see Article 6);
• use the Service to process Patient Data outside a genuine practitioner–patient relationship, or beyond your lawful scope of practice;
• upload, process or store any data unlawfully, or without the lawful basis and consents required — including the Patient's explicit consent for health data and appropriate guardian consent for any Patient under 16 (see Article 7);
• share your login credentials, resell, sublicense or provide access to the Service to third parties outside your Subscription's permitted seats (except as expressly permitted by a white-label plan), or exceed your plan's practitioner or active-patient limits by circumventing technical controls;
• reverse-engineer, decompile, copy, scrape, crawl, or attempt to extract the underlying software, models, AI-prompt architecture, curated reference content, or bulk data, except to the extent such restriction is prohibited by mandatory law;
• probe, scan, disrupt, overload or attempt to gain unauthorised access to the Service, other Customers' accounts or data, or its infrastructure;
• introduce malware, or use the Service to send or store unlawful, infringing or harmful content; or
• use the Service in any way that puts the platform, its data, or other Customers at risk.

We may investigate suspected breaches and, where appropriate, suspend access under Article 13. You are responsible for all activity under your account.

Article 6 — Medical-regulatory position & clinical disclaimer

Nature of AI Output. All AI Output is a reorganisation of the Patient's own self-report and of curated reference content. It reorganises what the Patient reported and surfaces curated classical references and formulary entries; it is never a clinical finding, diagnosis, risk flag, urgency assessment, or treatment or prescribing recommendation for an individual Patient. Any curated reference or formulary content surfaced by the Service is general reference material presented for the Practitioner to locate and consult; it is never selected, matched or recommended for an individual Patient, and the Service never fuses curated content with a Patient's record to produce a suggestion. Phrasing such as "the patient reported X" describes what the Patient stated — it is not, and must not be read as, a determination that the Patient has any condition. AI Output is generated probabilistically and may contain errors or omissions; you must read it critically and verify it against the Patient's actual report and your own examination.

You bear all clinical responsibility. As the qualified Practitioner, you retain sole and full responsibility for every clinical act — including diagnosis, examination, prescription, treatment planning, dosing, drug- and herb-safety and interaction assessment, monitoring, and referral. Your own training, judgment and physical examination of the Patient always govern and supersede any AI Output. You must not delegate any clinical decision to the Service or to any AI Output, and you must make clear to Patients that MyDosha is an administrative tool used by you, not an autonomous clinical system. The Operator is not a healthcare provider, is not part of the care relationship, and gives no clinical advice.

Clinical indemnity. To the maximum extent permitted by law, you agree to indemnify, defend and hold harmless the Operator against any claim, liability, loss, damage, cost or regulatory action arising out of or in connection with any clinical decision, diagnosis, treatment or advice you make or give in reliance on, or with reference to, the Service or any AI Output, or otherwise arising from your professional practice. This indemnity survives termination.

Article 7 — Patients & data protection (controller / processor split)

This Article sets out the parties' respective roles in respect of personal data and the Operator's core processor commitments. It does not restate how personal data is processed — the lawful bases, sub-processors, international-transfer mechanism, security and retention are described in full in our Privacy Policy, which we do not repeat here and which forms part of these Terms.

Controller / processor split. For Patient Data, you are the data controller and the Operator acts as your (sub-)processor, processing that data only on your documented instructions and for the purpose of providing the Service. For your own Account Data (practitioner identity, login and billing information), the Operator is the controller.

Special-category data & consent. Patient health data is special-category data under Article 9 GDPR and is processed on the basis of the Patient's explicit consent, captured at the start of the intake. As controller, you are responsible for ensuring a valid lawful basis and for all controller obligations toward your Patients.

As controller, you are responsible for:

• having a lawful basis for the processing you carry out through the Service, and for obtaining and recording the Patient's explicit consent at intake;
• providing your Patients with the information required by Articles 13–14 GDPR about how their data is used, including the AI reorganisation of their self-report and the sub-processors involved;
• honouring your Patients' data-subject rights (access, rectification, erasure, and so on) — we will assist you as processor as described below and in the Privacy Policy;
• the accuracy and lawfulness of the Patient Data you enter; and
• not processing, through the Service, the data of any Patient under 16 years of age without appropriate consent from a holder of parental responsibility, and documenting that consent.

Article 28 GDPR processor commitments. As processor of Patient Data, and to give effect to Article 28(3) GDPR, the Operator: (a) processes Patient Data only on your documented instructions (including these Terms and your configuration of the Service), unless required to do otherwise by EU or Member State law, in which case it will inform you unless that law prohibits it; (b) ensures that persons authorised to process Patient Data are bound by an obligation of confidentiality; (c) implements appropriate technical and organisational measures under Article 32 GDPR, as described in the Privacy Policy; (d) engages sub-processors under your general authorisation (see below), imposing equivalent data-protection obligations on them; (e) taking into account the nature of the processing, assists you by appropriate technical and organisational measures, insofar as possible, in responding to Patient data-subject requests; (f) assists you in ensuring compliance with your obligations under Articles 32–36 GDPR (security, breach notification, data-protection impact assessments and prior consultation), taking into account the nature of the processing and the information available to it, and notifies you without undue delay on becoming aware of a personal-data breach affecting Patient Data; (g) at your choice, deletes or returns Patient Data to you at the end of the provision of the Service, and deletes existing copies unless EU or Member State law requires storage (see the export and deletion window in Article 13); and (h) makes available to you the information necessary to demonstrate compliance with Article 28 and allows for and contributes to audits, including inspections, conducted by you or an auditor mandated by you, on reasonable notice and subject to appropriate confidentiality.

Sub-processors. To deliver the Service we engage sub-processors — currently Supabase (storage), Anthropic (AI), Resend (email), Vercel (hosting) and Stripe (billing). You give your general authorisation to the Operator's use of these sub-processors. Where the Operator intends to add or replace a sub-processor, it will give you prior notice (for example by updating the list maintained in the Privacy Policy and, where practicable, by email), giving you the opportunity to object on reasonable data-protection grounds before the change takes effect. The current list, their safeguards and the transfer mechanism are maintained in the Privacy Policy. Where a separate data-processing addendum has been executed between the parties, it governs to the extent of any conflict with this Article.

Article 8 — Intellectual property & licence

Our IP. The MyDosha platform — including its software, source code, design, user interface, curated reference content and the underlying AI-prompt architecture — is and remains the intellectual property of the Operator (or its licensors). Nothing in these Terms transfers any ownership of it to you.

Your licence. Subject to your compliance with these Terms and for as long as your Subscription is active and in good standing, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable licence to access and use the Service for your own professional practice. This licence ends automatically on expiry or termination of your Subscription. You may not copy, modify, distribute, sublicense, or create derivative works from the platform, its design, the curated content, or the AI-prompt architecture except as expressly permitted here or by mandatory law.

Patient data and dossiers. The Operator claims no ownership of Patient intake responses or of the dossiers generated from them. Patient data belongs to the Patient, and its handling is the Practitioner's responsibility as controller. We use Patient Data only to provide the Service and as described in the Privacy Policy.

Feedback. Any feedback or suggestions you provide are given voluntarily, and we may use them to improve the Service without obligation or compensation to you.

Article 9 — Confidentiality

Each party may receive non-public information belonging to the other ("Confidential Information"), including, on our side, the Service's non-public features, pricing arrangements, security details and the AI-prompt architecture, and, on your side, your non-public business information. Patient Data is treated in accordance with Article 7 and the Privacy Policy rather than this Article.

Each party agrees to: (a) use the other's Confidential Information only to perform under these Terms; (b) protect it with at least the same care it uses for its own confidential information, and no less than reasonable care; and (c) not disclose it to third parties except to personnel, sub-processors or advisers bound by equivalent confidentiality obligations, or where disclosure is required by law or a competent authority (in which case, where lawful, it will give reasonable prior notice).

These obligations do not apply to information that is or becomes public through no fault of the receiving party, was lawfully known before disclosure, or is independently developed without use of the other's Confidential Information. Confidentiality obligations survive termination for as long as the information remains confidential.

Article 10 — Service availability, maintenance & support

We aim for a service-availability target of 99% uptime, measured on a reasonable-efforts basis and excluding planned maintenance and events outside our control. This is a target only — we do not guarantee uninterrupted, timely, secure or error-free access, and the Service is provided on an "as available" basis. Availability may be affected by maintenance, updates, third-party infrastructure, or circumstances beyond our reasonable control (see Article 14).

Maintenance. We may perform planned maintenance and will communicate significant planned downtime in advance where reasonably possible. We may also carry out urgent or emergency maintenance without prior notice where necessary to protect the security or integrity of the Service, its data or its users.

Changes to the Service. We continuously improve the Service and may add, modify, or remove features, provided we do not materially reduce the core functionality of your plan during a period you have already paid for without notice.

Support. Support is provided by email at hello@mydosha.org on a commercially reasonable-efforts basis during ordinary business hours; security matters may be reported to security@mydosha.org. We do not commit to a fixed response or resolution time unless separately agreed in writing.

Article 11 — Disclaimer of warranties

To the fullest extent permitted by law, and without limiting the mandatory rights preserved by Article 16, the Service and all AI Output are provided "as is" and "as available", without warranties of any kind, whether express, implied or statutory, including any implied warranties of merchantability, satisfactory quality, fitness for a particular purpose, accuracy, or non-infringement.

In particular, we do not warrant that: (a) the Service will be uninterrupted, timely, secure or error-free, or that defects will be corrected; (b) AI Output will be accurate, complete or suitable for any clinical or other purpose — AI Output is a reorganisation of self-report and reference material, not a clinical finding (Article 6); or (c) the Service will meet your specific requirements or any regulatory requirement applicable to your practice. You are responsible for evaluating the Service's suitability for your practice and for independently verifying any output before relying on it.

Nothing in these Terms excludes or limits any warranty or right that cannot lawfully be excluded, including any mandatory rights of a Customer who qualifies as a consumer under Article 16. Nothing in this disclaimer excludes or limits liability for wilful misconduct (dolo) or gross negligence (colpa grave), which under Italian law (Article 1229 of the Civil Code) cannot be excluded in advance; the limitation of liability in Article 12 applies to the same effect.

Article 12 — Limitation of liability & indemnity

Excluded losses. To the fullest extent permitted by law, the Operator shall not be liable for any indirect, incidental, special, punitive or consequential damages, nor for any loss of data, loss of profits or revenue, loss of goodwill, clinical outcomes, or business interruption, however arising and under any theory of liability, even if advised of the possibility.

Liability cap. The Operator's total aggregate liability arising out of or in connection with the Service and these Terms, whether in contract, tort (including negligence) or otherwise, is capped at the total fees actually paid by you to the Operator in the twelve (12) months immediately preceding the event giving rise to the claim.

Carve-outs. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under mandatory applicable law — including liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for wilful misconduct (dolo) or gross negligence (colpa grave) under Article 1229 of the Italian Civil Code, or, for a Customer who qualifies as a consumer under Article 16, to the extent mandatory consumer law provides otherwise.

Your indemnity. In addition to the clinical indemnity in Article 6, you agree to indemnify, defend and hold harmless the Operator from and against any claim, liability, loss, damage, cost or expense (including reasonable legal fees) arising out of or in connection with: (a) any clinical decision, diagnosis, treatment or advice made in reliance on the Service or AI Output; (b) your breach of these Terms or of applicable law or professional duty; (c) your processing of Patient Data as controller, including any lack of a valid lawful basis or consent; or (d) any claim by a Patient or third party relating to your use of the Service. This indemnity survives termination.

Article 13 — Term, suspension, termination & data export

Term. This agreement runs from your acceptance of these Terms and continues for as long as you hold an account or an active Subscription.

Termination by you. You may terminate at any time by cancelling your Subscription and ceasing to use the Service; cancellation takes effect at the end of the current paid period (Article 4), with no refund for partial periods.

Termination and suspension by us. We may terminate this agreement on reasonable notice. We may also suspend or terminate access immediately, without liability, in the event of your material breach of these Terms, non-payment, or where your use presents a risk to the platform, its data, or other users. Where practicable and lawful, we will give you notice and an opportunity to remedy a breach that can be remedied.

Effect of termination. On termination your licence to use the Service ends and access ceases. Accrued payment obligations survive.

Data export & deletion. For 30 days after termination, you may request an export of your data. After that window, your data is deleted in accordance with the retention policy set out in our Privacy Policy. As controller for Patient Data, you remain responsible for exporting and retaining any Patient records you are legally required to keep under your own professional or legal obligations; self-serve export tools are available for this purpose, and you should download your archive before your access ends.

Survival. Articles that by their nature should survive termination — including Article 6 (clinical responsibility & indemnity), Article 7 (data-protection roles and obligations, to the extent required to complete export and deletion), Article 8 (intellectual property), Article 9 (confidentiality), Article 11 (disclaimer), Article 12 (liability & indemnity) and Article 16 (governing law) — continue to apply after these Terms end.

Article 14 — Force majeure

The Operator is not liable for any failure or delay in performing its obligations (other than payment obligations) to the extent caused by events beyond its reasonable control, including acts of God, natural disasters, epidemics or pandemics, war, terrorism, civil unrest, strikes, acts of government or regulatory authorities, failures or outages of telecommunications, hosting, power, internet or third-party infrastructure and sub-processors, and cyber-attacks. The affected party shall use reasonable efforts to mitigate the effect, and while such an event continues the affected obligations are suspended. If a force majeure event materially prevents provision of the Service for more than 30 consecutive days, either party may terminate the affected Subscription on written notice, without liability arising solely from the event, save for amounts already due.

Article 15 — Changes to these Terms

We may update these Terms from time to time — for example to reflect changes in the Service, in our sub-processors, in the future operating entity (Aardstroom B.V., Article 1), or in applicable law.

For material changes, we will give reasonable advance notice to active subscribers (for example by email to your account address or a notice in the portal) before they take effect. Non-material changes may take effect on publication. The "last updated" date below always reflects the current version.

Your continued use of the Service after a change takes effect constitutes acceptance of the updated Terms. If you do not accept a material change, your remedy is to stop using the Service and cancel your Subscription before the change takes effect, as set out in Articles 4 and 13.

Article 16 — Governing law & jurisdiction

Governing law. These Terms, and any dispute or claim arising out of or in connection with them or their subject matter (including non-contractual disputes), are governed by the laws of Italy, without regard to conflict-of-laws rules and excluding the United Nations Convention on Contracts for the International Sale of Goods.

Jurisdiction. Because the Service is provided on a business-to-business basis, the parties submit to the exclusive jurisdiction of the competent court at the Operator's main establishment, in Sorano (Province of Grosseto), Italy, subject to any mandatory rule of law that requires otherwise.

On the transfer of operations to Aardstroom B.V. (Article 1), the governing law and competent forum are expected to move to the laws of the Netherlands and that company's registered seat, on notice given under Article 15 and subject to the same Rome I consumer carve-out and your termination rights.

Article 17 — Contact & how to reach us

The Operator is Thomas Thijs, trading as MyTrueDosha, Frazione Ammazzavecchia 12, 58010 Sorano (GR), Italy. You can reach us at:

• General & billing: hello@mydosha.org
• Privacy & data requests: privacy@mydosha.org
• Security: security@mydosha.org

The Operator's full legal identity and registered address are set out in our legal notice. Related documents: the Privacy Policy (data processing, sub-processors, GDPR Article 9 handling), the Intended Use statement (medical-regulatory qualification), the legal notice (operator identity), and the French-language Conditions Générales de Vente at /cgv.

Effective date: 5 July 2026 · Last updated: 5 July 2026.

Last updated: 2026-07-05.