Privacy

What we never store

This isn't a policy promise we could quietly change — there are no fields for any of it anywhere in the product:

• ✕Client or patient names, initials, or identifiers
• ✕Session notes, diagnoses, treatment plans, or dates of service
• ✕Anything a client told you, wrote to you, or was billed for
• ✕Uploaded documents of any kind — we store file names you type, never files

Because no protected health information ever reaches us, we are not a business associate under HIPAA and you do not need a BAA with us. That's the entire design rationale — one less agreement for you to track, in the tool that tracks your agreements.

What we do store

Your account

Email address and a hashed password, handled by Supabase Auth.

Your practice profile

Practice name, state, clinician count, and the vendor names you enter during setup (e.g. "SimplePractice") so we can build your BAA tracker.

Your compliance records

What you type into the six record types — training dates, assessment summaries, review notes, incident descriptions, renewal dates. All of it describes your practice's own activity.

Product analytics

Counts of anonymous events like "a record was created" or "a binder was exported", used to see whether the product works. No page-by-page tracking, no advertising networks, no data brokers.

Cookies

We set one kind of cookie: the session cookie that keeps you signed in. It is strictly necessary — without it there is no login. We do not run advertising trackers, retargeting pixels, or cross-site analytics. If that ever changes, this page changes first and you'll get the choice.

Email

We email you when one of your own records is coming due, and once when you sign up. That's all. Every email has a one-click unsubscribe, and unsubscribing never touches your records — due dates keep showing on your dashboard.

Your data is yours

Export a complete PDF binder of everything you've entered at any time, from the dashboard. Ask us to delete your account and we delete the practice row and every record attached to it. Email hello@practicebinder.com.