Privacy policy

1. What this document covers

ido — built by Omnis — is a tool for therapists: practice management, session capture, and an AI assistant. This document explains in plain language what data flows through ido, what happens to it, and what never happens to it.

Using ido means accepting this policy. If any part of it is unclear, write to us before you rely on the service.

2. What data is collected

Account data: the therapist's name, phone number, and optionally email — for creating and securing the account.

Clinical data: what a therapist records about their own clients — files, notes, scheduling. This data belongs to the therapist and is accessible only to them.

Session data: session audio is processed live and never stored; the resulting transcript is kept until the therapist deletes it; AI outputs (notes, summaries, analyses) rest in the client's file.

Usage and billing data: hour and credit consumption, and in the future payment records, for invoicing and support.

3. Session audio and transcripts

Audio from sessions (in-person and online) is processed only for live transcription and is never written to disk.

The transcript is working material, not an archive: the therapist deletes it whenever they choose, it can be restored for 72 hours after that, and then it is gone for good. What remains are the outputs the therapist requested and reviewed.

4. How data is used

Only to provide the service itself: transcription, generating AI outputs, account management, support, and billing.

Your data is not sold, not shared for advertising, and not used to train AI models.

5. Third-party processors

Parts of the processing use a limited set of third-party service categories: a speech-to-text service for live transcription, an AI language-model service for generating outputs, an SMS delivery service for reminders, and — at general availability — a payment gateway for transactions.

Each processor receives only the minimum data required for its task, under contract, with no permission for long-term retention or model training.

The AI services that process session data — speech-to-text and the language model — operate under formal, healthcare-grade data-protection agreements. Under these agreements, your session data is not used to train AI models. If you would like to review this documentation — before you rely on the service, or at any time — request it at privacy@ido-app.ir and we will provide it.

6. Retention

Session audio: never stored. Transcripts: kept until the therapist deletes them; restorable for 72 hours after deletion, then permanently erased. Clinical data and AI outputs: for as long as the therapist's account is active, or until the therapist deletes them.

After account deletion, data is removed from our systems within a short, defined window.

7. Security

Data is encrypted in transit. Clinical data — the records, notes and client information held in ido's database — is also encrypted at rest, on encrypted storage with keys managed by ido; this protects against a lost or stolen disk, though it is not end-to-end encryption. Access to clinical data is restricted to the file's own therapist at the deepest layer of the system — enforced by database row-level security, not just application rules — so ido staff have no routine access to clinical content.

ido is designed around the strictest health-data privacy standards, including HIPAA and GDPR principles.

8. Your rights

Access and export: you can export your data in full at any time.

Deletion: on your request, your account and data are truly deleted — not a hidden archive.

Questions: you may ask about any data of yours we hold, and you will receive a clear answer.

9. The therapist's responsibility toward clients

Client data is recorded by the therapist, who remains its steward within the therapeutic relationship. We recommend informing clients that sessions are captured and obtaining their consent; ido provides plain-language wording for that conversation.

10. Changes to this policy

If this policy changes, the new version is published here and material changes are announced by email or in-app. The update date always sits at the top of the document.

11. Contact

For any question about this policy: hello@ido-app.ir