Courage Psychiatry app privacy policy

The app is for current patients of Dr. Armando León. Accounts are created by the practice — there is no public sign-up. You sign in with the phone number or email address the practice already has on file, using a one-time code, an emailed link, or a passkey.

Your identity and contact details — your name, date of birth, phone number, email address, and address, as they appear in your chart.

Your health information — your appointments, medications and pharmacy, the questionnaires and intake forms you complete in the app, the scores calculated from them, and the messages you exchange with your care team, including any photos or documents you attach.

Information about your device — a device identifier used to deliver notifications, and the passkeys or biometric sign-in you set up. Face ID and Touch ID are handled by your device; we never receive your fingerprint or face data.

Technical error reports — if something goes wrong, the app reports the error so it can be fixed. These reports are automatically stripped of personal and health information before they are stored.

The app asks for your camera, microphone, photo library and location only when you use a feature that needs them, and explains why at the moment it asks. You can decline, and the rest of the app keeps working.

To provide your care and run the practice: to show you your appointments and prescriptions, to carry your messages to and from your care team, to score the check-ins your clinician assigns, to host your visits, which are held by video, and to send you reminders.

We do not use your health information for advertising, and we do not sell it. The app contains no advertising software, no tracking software, and no third-party analytics. Nothing you do in the app is used to build an advertising profile, and nothing is shared with data brokers.

We use a small number of service providers to run the app. They act on the practice’s instructions, are contractually required to protect your information, and may not use it for their own purposes.

• Google Cloud / Firebase — hosting, the database, sign-in, and delivery of app notifications.
• CharmHealth — the practice’s electronic health record, where your chart lives.
• Twilio — text messages, including sign-in codes and appointment reminders.
• Zoom — visits, which are held by video.
• Our own error-reporting server — operated by the practice, not a third party, and scrubbed of personal information.

We may also disclose information when the law requires it, or as permitted under HIPAA for treatment, payment, and health care operations. Those uses are described in the practice’s Notice of Privacy Practices, which you receive at intake.

Notifications never contain health information. A notification tells you that a message arrived or that a prescription was sent — never its contents, and never which medication. You choose which notifications you receive, and by which channel, in Settings.

Information is encrypted in transit and at rest. Access requires signing in, and you can add Face ID, Touch ID, or a passkey. The app locks itself after a period of inactivity. Only the practice can see your information; no other patient can.

In the app, open Settings, then choose Delete my account. On the web, the same option is at the bottom of your Profile page. You will see an explanation and be asked to confirm.

Deleting your account removes your sign-in, your passkeys, your registered devices, your active sessions, and your notification settings. You will be signed out and will not be able to sign in again with that account.

Your medical record is kept. The practice is required to keep your health records — including the check-in and intake answers you submitted in the app, which are part of your record — for the period required by law. Deleting your account does not delete them, and we will tell you this again before you confirm. If you later want portal access again, contact the practice.

As a patient you generally have the right to see and receive a copy of your medical record, to ask that it be corrected, to ask us to communicate with you confidentially, to learn who your information has been shared with, and to file a complaint. The practice’s Notice of Privacy Practices describes these rights and how to exercise them, including how to complain to the U.S. Department of Health and Human Services.

This app is not directed to the general public or to children. It is available only to established patients of the practice, and accounts are created by the practice.

If we materially change how the app handles your information, we will update this page and, where required, tell you in the app.

Questions about this policy, or about your information, can go to hello@couragepsychiatry.org.