Privacy Policy
Version 2026-10-08-draft · Contact: [privacy@YOUR-DOMAIN]
ChairTime is an educational tool for practicing therapy conversations. It is for practice and training only. Do not enter real patient information. ChairTime is not a HIPAA-covered service and does not sign Business Associate Agreements.
What we collect
- Account data: your email address and a salted hash of your password (never the password itself).
- Practice transcripts and feedback: the text of your role-play conversations with fictional clients and the AI feedback on them, stored on our server so you can review them.
- Voice audio: if you use the microphone, your audio is sent to our speech provider for transcription, and the fictional client's lines are sent to our voice provider to be spoken. We do not store audio on our server.
- Usage counts: how many AI replies, voice characters, and transcriptions you use per day, for fair-use limits and cost tracking.
- Product feedback you send with the Feedback button.
- Basic server logs (IP address, time, page requested) for security and debugging. If the operator enables privacy-friendly analytics (Plausible), it counts page views without cookies.
Data that stays in your browser
The practice planner (clients, sessions, notes, intake forms, reminders) is stored only in your browser's local storage on your device. We never receive it. You control it: use Settings → Clear my data, or clear your browser storage.
Service providers that process data
- AI model provider (one of OpenAI, Anthropic, or xAI, as configured by the operator) receives conversation text to generate the fictional client's replies and feedback.
- Cartesia receives text to synthesize speech and, if used, your audio for transcription.
- Hosting provider (for example Cloudflare or a cloud server) stores the database.
- Error monitoring (Sentry), only if enabled, receives technical error reports.
Each provider handles data under its own terms. [List the exact providers and links to their policies before launch.]
Retention
Practice transcripts and AI feedback stored on the server are deleted automatically after 90 days. Product feedback is also deleted after 90 days. Usage counts are kept up to about 13 months for cost tracking. You can delete your server transcripts at any time in Settings.
We do not sell your data
We do not sell or rent personal information, and we do not use it for advertising.
Your rights
You can access, correct, export, or delete your data. Settings → Delete my account permanently removes your account, sessions, transcripts, feedback, and usage records from our server. For other requests, email [privacy@YOUR-DOMAIN].
Research
We do not use your data for research. Any future research use would require IRB approval and your separate consent.
Security
We use HTTPS, hashed passwords, secure cookies, and access limits. No system is perfectly secure.
Children
ChairTime is for adult clinicians and trainees and is not directed to children under 18.
Changes
We will post updates here and change the version date.