built on trust
Your clients’ data stays theirs
Therapy runs on confidentiality. A tool that holds session records and client details has to take that as seriously as you do. Here is exactly how Therapy Manager protects your practice data — in plain language, with no claims we can’t stand behind.
Built on Supabase, backed by PostgreSQL
Your practice data is stored in Supabase, a managed platform built on PostgreSQL — one of the most trusted databases in the world. Data is encrypted at rest on the underlying infrastructure.
Row-level security: isolation enforced by the database
Every table carries row-level security policies keyed to your therapist account. This means the isolation between practices is enforced at the database layer itself — not just in application code. A query from your account physically cannot return another therapist’s clients, sessions, or invoices.
Per-therapist data isolation
Each therapist’s roster, session history, billing records, and invoices are scoped to their own account. There are no shared workspaces or cross-account visibility — your practice is yours alone.
We never sell or share your data
Therapy Manager makes money from subscriptions — not from data. We do not sell your data, share it with third parties for their own purposes, or use client records for advertising. The client information you store exists to run your practice, nothing else.
Designed with DPDP principles in mind
India’s Digital Personal Data Protection (DPDP) Act sets out principles that we think are simply good design: collect only the data needed for a stated purpose, protect it, and keep people in control of it. Therapy Manager is designed with these principles in mind — minimal data collection, purpose-bound storage, and your control over your records. (To be precise: “designed with DPDP principles in mind” is a design commitment, not a certification — no DPDP certification regime exists for us to claim.)
Cancel anytime — your data stays intact
If you cancel a paid plan, you move back to the free tier and every record you created stays intact and accessible. Nothing is deleted on downgrade, and your data is never held hostage behind a subscription. If you want a complete copy of your data, contact us and we will provide it.
A note on what we don’t claim
You’ll notice this page has no wall of compliance badges. We’d rather tell you precisely what is true — row-level security, encryption at rest, strict per-therapist isolation, no data selling — than decorate the page with certifications we don’t hold. If you have a specific security question before trusting us with your practice, ask us through the feedback form or our practice site— you’ll get a straight answer.