Theranvio - Legal

Privacy Policy

This policy explains what data Theranvio processes, why it is used, and how retention, security, and account deletion work.

Last updated: April 20, 2026

1. Data we process

Theranvio processes data needed to run your account, support practice operations, and deliver premium product layers.

therapist account data such as name, email address, specialization, and profile settings;
practice operations data such as scheduling, availability, booking requests, forms, and communication preferences;
clinical workflow data such as client records, notes, outcome tracking, between-session check-ins, consult workflows, and referral handoffs;
subscription and billing data handled by Stripe, including customer and subscription identifiers;
limited technical and service event data required for security, auditing, and platform stability.

2. Why we use data

We use data only as needed to operate the service, secure accounts, and support the product experience.

to maintain authentication, secure access, and account settings;
to support practice workflows such as clients, scheduling, forms, reminders, and operational data;
to deliver premium capabilities such as analytics, AI insights, weekly brief, between-session care, and specialist communication;
to handle subscriptions, billing, and payment support;
to diagnose failures, prevent abuse, and improve reliability.

3. Service providers and processors

In the current Theranvio stack, the main providers are Supabase for database and authentication, Stripe for billing, OpenAI for AI features, and an email provider such as Resend.

If you use Theranvio with clinical or special-category data, you remain responsible for the legal basis for processing, appropriate client disclosures, and configuring the product in line with your professional and legal obligations.

4. Retention and account deletion

We retain data for as long as the account is active or as needed for service delivery, security, billing, and legal obligations. You can delete your account from profile settings inside the app or through the public page at /legal/account-deletion.

When an account deletion request is completed, we remove application data linked to the account, subject to records that must be retained longer for billing, security, tax, or legal reasons.

This page and the public account deletion page also support the disclosure path required for apps distributed through Google Play.

5. Security and AI features

We use reasonable technical and organizational safeguards to protect data against unauthorized access, misuse, and loss. No online system can guarantee absolute security in every scenario.

AI features in Theranvio are assistive only. They do not replace clinical judgment, do not constitute an autonomous diagnosis, and should be used carefully in the context of your professional responsibilities.

Privacy contact

If you have questions about data handling, retention, security, or account deletion, contact us by email.

support@theranvio.com

This document reflects the current Theranvio setup as of April 20, 2026 and should be reviewed when the architecture, vendors, or premium features materially change.