How we protect your information

Priority Care Therapy is a training clinic. We treat your records with the same care a licensed practice would, and we design our systems so that only the people involved in your care can see your information.

Our commitment

This page is maintained by Priority Care Therapy to answer common questions about how we handle your information. We follow HIPAA-conscious practices designed to safeguard protected health information (PHI). This statement describes our current controls; it is not a certification or a legal notice.

Information we collect

Account details you provide (name, email, role), scheduling data for the sessions you book, mood entries you choose to log, and clinical progress notes authored by your intern and co-signed by a supervisor. We do not sell your data and we do not use PHI to train third-party AI models.

How your data is protected

Data is stored in an access-controlled Postgres database with row-level security so each person only sees the records their role permits. Secure client↔intern messages are encrypted with AES-256-GCM; plaintext is decrypted only at the edge for the intended participant and never stored. Transport is TLS end-to-end.

Who can see what

Clients see their own profile, sessions, mood logs, messages, and co-signed notes. Interns see the clients assigned to them. Supervisors see the intern caseloads they oversee, notes pending co-sign, and crisis-flagged mood entries within their assignments. Administrative access is limited and audit-logged.

AI assistance

SOAP note polishing uses a de-identified prompt sent to an AI model to improve clinical tone and readability. The AI is used for drafting support only — every note is reviewed by the authoring intern and co-signed by a licensed supervisor before it becomes part of your record.

Audit logging

PHI access and record exports are logged with the acting user, timestamp, and record identifier. Supervisors can review the export audit log and the email delivery log for accountability.

Retention and deletion

Clinical records are retained in line with applicable state requirements for graduate training programs. You may request a copy of your record or ask questions about deletion by contacting us at the address below.

Your rights

You may request access to the information we hold about you, ask us to correct inaccuracies, or raise a privacy concern. If you believe your information has been handled improperly, please contact us so we can investigate.

Contact

For privacy questions or to exercise your rights, email privacy@priority-care.life. For urgent clinical concerns, contact your intern or supervisor directly through the app. If you are in crisis, call or text 988.

This statement reflects current practices and may be updated as our program evolves. It is informational and does not constitute a Notice of Privacy Practices or a Business Associate Agreement.