Privacy Policy
How 24Therapy handles personal and health information.
Privacy Policy
هذه الصفحة بالإنجليزية، لأن النص الملزم قانونًا هو النص الإنجليزي. إن أردت شرحًا لها بالعربية فاكتب إلينا من صفحة التواصل وسيشرحها لك شخص.
The short version
Your notes are yours
A clinician sees the patients they treat. Nobody else at 24Therapy reads a note unless you ask us to look at something.
Nothing trains a model
Session audio and text go to our AI provider so the note can be written, and are never used to train anything.
You can take it or delete it
A patient can export their record or ask us to erase it, and we do both rather than pointing at a clinician.
This page is a starting point maintained by your administrator, not legal advice. Review it with counsel before you accept a real patient.
What we store
Account details for clinicians (name, email, hashed password, licence details you choose to add). For patients: a first name, optionally a last name and email, plus the clinical record created by sessions, transcripts, notes, and risk assessments.
What we send elsewhere
Session audio and transcript text are sent to our AI provider to produce transcription and notes. Patient reports are sent by email through our email provider. Video sessions are carried by our video provider. Each of these is a subprocessor covered by a business associate agreement.
What we never do
We do not write transcript text, note content or crisis indicators into application logs. We do not sell data. We do not use patient data to train models.
Access and deletion
Clinicians can export or delete a patient record from the patient page. Deletion removes the chart, its sessions, transcripts and notes. Audit records of who accessed what are retained for six years, as required.