Privacy Policy

Our role

Nurt provides software for psychotherapist profiles, inquiries, client records, sessions, transcripts, summaries, invoices, and related practice workflows. Psychotherapists remain responsible for their own professional, legal, consent, documentation, and privacy obligations unless a separate written agreement says otherwise.

We are building Nurt to support privacy-conscious and PHIPA-aligned workflows, but this policy is not a certification that every use of the platform is compliant in every circumstance.

Information handled by Nurt

Depending on how the platform is used, Nurt may handle:

• Account information, such as names, emails, passwords, roles, and login state
• Psychotherapist profile information, credentials, registration details, specialties, languages, fees, bios, and profile photos
• Client inquiries, including names, contact details, messages, proposed times, and scheduling responses
• Client records created by psychotherapists, including contact, billing, session, and invoice information
• Session details, private notes, next steps, transcripts, and AI-assisted summaries when these tools are used
• Operational records such as audit events, security events, backup records, and basic technical metadata

How we use information

We use submitted information to operate the platform, including:

• Creating and managing psychotherapist accounts
• Reviewing psychotherapist applications and approvals
• Displaying approved public profiles
• Delivering client inquiries to psychotherapists inside the platform
• Creating and managing client records, sessions, transcripts, summaries, and invoices
• Supporting access/export workflows when a client record needs to be retrieved
• Maintaining platform security, audit history, and basic analytics

Cookies and tracking

Nurt uses cookies or similar browser storage where needed for login sessions, security, and basic platform operation. We do not currently use third-party advertising trackers or browser session replay tools.

If analytics, advertising, or additional tracking tools are added later, this policy should be updated to explain what is collected and why.

Session audio, transcripts, and AI summaries

If a psychotherapist uses live transcription, browser audio may be captured from the microphone and, for online sessions, from a selected meeting tab when the browser supports it. Nurt asks the psychotherapist to confirm client consent before capture starts.

Live transcription is intended as a documentation aid. Transcripts and AI-assisted summaries may contain mistakes and should be reviewed and edited by the psychotherapist before being relied on or kept as part of the record.

Nurt is designed to process transcription and summarization inside Nurt-controlled infrastructure. Session transcripts, prompts, summaries, and audio streams are not intentionally sent to external AI providers or public consumer AI tools for these features. Psychotherapists should not copy client information into external AI tools unless they have a lawful basis, appropriate safeguards, and client consent where required.

Public profile information

Information included on approved psychotherapist profiles is intended to be publicly accessible and indexable by search engines. Psychotherapists should only publish content they are comfortable sharing publicly.

Service providers and infrastructure

Nurt uses infrastructure and operational service providers to host the platform, deliver secure web traffic, send email, deploy software, and maintain backups. These providers are used to operate the platform and are not intended to receive session transcripts, AI prompts, generated summaries, or raw audio streams unless a provider is explicitly reviewed for that purpose.

The current transcription and AI summary services are intended to run within Nurt's own application infrastructure rather than through external AI APIs. If this changes, Nurt should review the provider, update internal records, and update public disclosures where appropriate.

Safeguards

We take reasonable administrative and technical steps to protect data stored in the platform. Access to admin and psychotherapist areas is role-restricted, ownership checks limit access to client and session records, and sensitive actions are recorded for audit purposes.

We also work to avoid placing transcripts, summaries, prompts, clinical notes, and client contact details in operational logs. Production backups and downloaded backup files may contain sensitive information and should be protected accordingly, including encryption where available.

Access, correction, and export requests

Individuals may have rights to request access to, or correction of, personal health information held by a health information custodian. If your information is held in a psychotherapist's Nurt workspace, the request should usually be directed to that psychotherapist first.

Nurt provides tools that can help psychotherapists export a client record, including linked inquiries, sessions, transcripts, summaries, and invoices. We may also assist with technical retrieval or correction workflows when appropriate.

Retention and deletion

Records are kept for as long as needed to operate the platform, support psychotherapist workflows, meet legal or accounting obligations, and preserve appropriate clinical or administrative records. Automatic pruning is not implemented for all record types yet.

We intend to keep rejected or spam inquiries only for a limited period, keep approved inquiries with the related client record, keep sessions and transcripts with the session record, and keep invoices according to accounting and tax requirements.

Incidents and complaints

If we become aware of unauthorized access, disclosure, loss, or misuse of information, we will take steps to contain, assess, document, and respond to the incident. Where legally required, affected individuals, psychotherapists, regulators, or other authorities may be notified.

In Ontario, the Information and Privacy Commissioner of Ontario provides information about PHIPA rights and complaints. Individuals may also contact the relevant psychotherapist or Nurt about privacy concerns.

Contact

Nurt's privacy contact is responsible for receiving privacy questions, access or correction support requests, and complaints related to Nurt's handling of information. Contact the privacy contact at support@nurt.care.

Policy updates

We may update this policy from time to time as the platform evolves, our operational practices change, or legal requirements require clarification or expansion.