Know what is shared, and with whom.
This page describes the current evaluation release. Clinical rollout remains limited while the full operational and legal arrangements are completed.
Website visits
The hosting service processes the technical information needed to deliver and protect the website. TidySession does not load optional Google measurement until it is configured and you choose to allow it. Measurement is limited to public product pages; it is excluded from sign-in, the practitioner workspace and the patient portal.
When enabled and accepted, public-page analytics are provided by Google. You can change the choice using Cookie choices. Refusing optional measurement does not change access to the website or app. Your browser may store essential sign-in and interface preferences; the fictional demo stores its editable sample state on your device.
Signing in and joining a practice
The current account provider is ChatGPT. TidySession receives an account identifier, email address and, when available, a display name. These identify your account and link it to authorised practice or portal access. Signing in does not automatically give access to a practice.
An invitation is linked to the email address the practice invited. Invitation links are single-use and expire after seven days. Share your invitation directly and avoid forwarding it to someone else.
Practice records and the patient portal
The practice owner can access the practice’s records. Practitioners can access records assigned to them. A patient account can see its appointments, assigned questionnaires, submitted reflections, patient uploads and files shared with it. Clinical notes, diagnoses, care context and practitioner checklists do not appear in the patient portal.
Sharing a reflection or questionnaire submits it to the practice. Entries are not monitored continuously and may not be read immediately. Submitted questionnaire responses cannot be edited in the portal. Contact your practice if a response needs a correction or context.
Practices manage access to their own records. Changing the email on a patient record revokes the previous portal connection and unused invitations. Archiving a record retains it in the practice and removes it from the portal.
Voice notes and optional AI
Recording starts only after you choose it and confirm recording permission. Audio remains in the current browser session until saved to practice files. Stopping recording turns off the microphone. Closing an unsaved recording can lose it.
AI transcription and note drafting require a configured OpenAI provider and an explicit request with separate permission. The selected audio or text is sent to that provider to fulfil the request. AI does not run automatically in the background, and drafts require practitioner review. Provider terms, retention and data-processing arrangements must be reviewed before using this with clinical information.
Storage, export and retention
Structured records use the hosting platform’s database, and uploaded files use its object storage. Clinical records are not cached for offline use. The practitioner can export an individual record and download authorised files. Trial or subscription expiry does not automatically delete records.
Archiving is not permanent deletion. A production retention schedule, deletion process, backup-restoration procedure and data-processing agreement must be confirmed before clinical rollout. Do not use this evaluation release as the sole copy of clinical information.
Billing information
When enabled, subscriptions use Stripe’s hosted payment and billing pages. Card details are entered with Stripe. TidySession stores billing identifiers, subscription status and verified access dates. Patient records and clinical content are not included in billing metadata.
Before public registration
The final notice will identify the operating legal entity, verified privacy and support contacts, applicable jurisdictions, processors, international transfers, retention periods and rights-request process. Those business details have not yet been published. This release is intended for testing with fictional sample records.
If you have been invited to test, use the existing contact who provided your invitation for questions about that test. Patient care and record questions should be directed to the relevant practice.
Updated 4 October 2026.