Privacy Policy

TherapyNotes allows users to:

• Record therapy sessions (audio)
• Generate transcripts and summaries
• View insights and reflections from sessions

We do not sell user data. We do not use advertising. There is no data monetization.

The app only records audio after you grant iOS microphone permission.

Before recording begins, the app reminds users to obtain consent from their therapist before recording any session.

When a recording session ends:

• The audio is temporarily saved on your device as a local .m4a file.
• The file is securely sent to our backend for processing.
• The backend forwards the audio to OpenAI for transcription and summarization.
• The app receives: transcript, session summary, key themes, insights, action items, and selected quotes.

After successful processing, the temporary audio file is deleted from the device.

If you cancel a recording, the file is deleted from the device. If processing fails and retry is available, the audio file may remain temporarily on the device so you can retry.

Before any audio recording or session content is sent to OpenAI, MyTherapyNotes displays a consent notice that:

• identifies OpenAI as the third-party AI service;
• explains that the audio recording will be sent for speech-to-text transcription;
• explains that the transcript and related session content will be processed to generate a structured summary;
• warns that this data may contain sensitive personal, health-related, or therapy-related information; and
• asks the user for explicit permission before processing begins.

No recording or session content is sent to OpenAI without the user's consent.

Users may revoke consent at any time through Settings → Revoke AI processing consent. Once consent is revoked, no new recording will be processed by OpenAI unless the user provides consent again.

TherapyNotes may temporarily store backend processing records on our servers to support transcription, summarization, status tracking, and retry handling.

Backend processing records may temporarily include transcripts, summaries, processing metadata, errors, and related diagnostic information.

Final session outputs are available in the app. There is no cloud sync for session history in the app.

We use Supabase Auth for authentication, including:

• Email and password login
• Google sign-in (if enabled)

Authentication data such as user ID, email, and session tokens are securely stored using iOS authentication storage mechanisms. When you sign out, local authentication data is removed from the device.

You have control over your data:

• You can delete individual sessions inside the app.
• You can delete all sessions via Settings.
• Signing out removes local authentication credentials.

Deleting local sessions removes them from the app on that device. Backend processing records may be retained temporarily as needed for processing, retry handling, diagnostics, or service reliability.

We use reasonable technical and organizational measures to protect user data, including:

• Secure transmission of audio for processing
• Authentication through Supabase Auth
• Backend access controls
• iOS local data protection mechanisms

The app may include local privacy controls such as Face ID lock where enabled.

We use the following third-party providers:

• Supabase – authentication and backend processing
• OpenAI – audio transcription and AI-generated summaries

These services process data to provide core app functionality.

Temporary audio files are deleted from the device after successful processing or cancellation. If retry is available after a failed processing attempt, the audio file may remain temporarily on the device so the user can retry.

Backend processing records may be stored temporarily for processing, status tracking, retry handling, diagnostics, and service reliability.

TherapyNotes is not intended for use by individuals under 18. We do not knowingly collect data from minors.

We may update this Privacy Policy from time to time. Updates will be reflected with a new "Last updated" date.

If you have any questions about this Privacy Policy, please contact: