built on trust
Your clients’ data stays theirs
Therapy runs on confidentiality, and a tool that holds session records and client details has to take that seriously. This page sets out how Therapy Manager protects your practice data.
Built on Supabase, backed by PostgreSQL
Your practice data is stored in Supabase, a managed PostgreSQL service, and is encrypted at rest.
Access scoped to your account
Your practice records are scoped to your account, both in the application code and in the database access rules, so your queries return your own clients, sessions and invoices.
Per-therapist data isolation
Each therapist’s roster, session history, billing records and invoices are scoped to their own account. There are no shared workspaces and no cross-account visibility.
We never sell your data
Therapy Manager makes money from subscriptions. We do not sell your data, share it with third parties for their own purposes, or use client records for advertising. The services that run the app (hosting, email, payments) handle it only to run the app.
Designed with DPDP principles in mind
India’s Digital Personal Data Protection (DPDP) Act asks that personal data be collected for a stated purpose, protected, and kept under the control of the people it describes. Therapy Manager is designed with those principles in mind: the client data you record stays scoped to your account and is used only to run your practice. For a full export, or to delete your account, contact us and we will do it. This is a design commitment, not a certification, as no DPDP certification regime exists.
Cancel anytime and keep your data
If you cancel a paid plan, you move to the Free plan straight away and every record you created stays intact and accessible. Nothing is deleted on downgrade. If you want a complete copy of your data, contact us and we will provide it.
Certifications
We don’t hold security certifications. If you have a security question before trusting us with your practice, ask us through the in-app feedback form or our practice site.