Privacy and security practices

Clinical records live in the practice workspace: appointments, session notes, treatment plans, screener scores, insurance and billing records, messages, and any files added to a chart. Portal pages hold your own journal entries, check ins, and activities.

The book pages, the encouragement wall, and the kids activities are separate. Kid activities such as the feelings wheel, the calm corner, the worry box, and the doodle pad stay on the device and are never uploaded. Class check ins record only a class code, a feeling, an energy level, and a time, with no name attached.

Access is scoped by the account signing in. A client sees their own record and nothing else. A parent or guardian who created a family portal can see the portals branched from theirs. A clinician sees the clients on their caseload. Nobody browses records they are not assigned to, and the database enforces this on every request rather than trusting the page you happen to be on.

Access follows the minimum necessary rule: pages request the fields they need for the task in front of them, not the whole chart.

Every clinician chooses where saved work goes: a private workspace folder, a download to their own device with nothing kept here, or filing in the practice system of record with only the trail kept here. That choice lives on the Saved work page and can change at any time.

Files kept in the private folder sit in encrypted storage that is not public. They are never served by a plain link. Opening one creates a short lived link that expires within minutes and is tied to the person who asked for it. Documents stored on an outside drive or in the practice system are indexed here by name and date only; the contents are not copied to this site.

Files attached to an activity are checked on the server before anyone can open them: the real file type is verified against the bytes, the size is limited, and PDFs carrying embedded scripts or attachments are removed and marked.

Signed in pages sign out on their own after fifteen quiet minutes, with a warning first, so a chart left open on a shared screen does not stay open. Signing out clears the session on that device. Use the sign out button on any shared or borrowed computer.

The workspace keeps an activity trail of clinical actions: records opened, documents saved or removed, notes signed, and files retrieved. Clinicians can review their own trail on the Saved work page. The trail exists so unusual access can be noticed and reviewed.

Appointment reminders and portal notices are kept deliberately thin: a date, a time, and a link to sign in. Clinical detail is not put in email or text, because those channels are not private. Send anything sensitive through portal messages instead of replying to an email.

Card numbers are never stored on this site. Payments run through the card processor, which returns only a brand and the last four digits for reference. Invoices and balances are kept here; card details are not.

You may ask for a copy of your record, ask for a correction, ask for an accounting of disclosures, limit how the practice contacts you, or revoke an authorization you signed. Requests go to the practice through the contact page. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights without penalty from the practice.

This site supports care. It is not therapy and it is not monitored around the clock. If you are in crisis, call or text 988 for the Suicide and Crisis Lifeline. If someone is in immediate danger, call 911. Clinicians are also required by law to report certain safety concerns, including abuse of a child or vulnerable adult and threats of serious harm.