ClinLog Privacy Policy

Effective July 24, 2026 · Josue Nunez · privacy@clinlog.io

The short version: ClinLog stores your practicum hours in your own iCloud account. We run no servers, see none of your data, collect no analytics, show no ads, and sell nothing to anyone. Your subscription is processed by Apple; we never see your payment details. You can export or delete everything at any time, whether or not you subscribe.

What ClinLog stores, and where

ClinLog keeps the data you enter, in your private iCloud database and on your devices:

Hour entries — date, duration, direct/indirect, activity type, client category (Adult, Teen, Couple, Family — never an identity), telehealth flag, and optional notes about your own activity.
Your profile — your name, program, current supervisor and site names, hour goals, target dates, and training phase.
Signed report scans — PDF scans of your own signed hour reports, if you use My Files.
App settings — appearance, layout, selected state, and your free-trial start date, synced through iCloud so your devices match.

All of this lives in the private CloudKit database attached to your Apple Account and on your devices. It is not stored on any server we operate — we don't operate any.

ClinLog is designed to hold no client information. There are no fields for client names, contact details, or case notes, and the app instructs you never to enter them in free-text fields or scanned documents.

What we don't do

No developer access. Your data syncs directly between your devices and your iCloud account using Apple's frameworks. We have no ability to read it.
No analytics or tracking. ClinLog contains no analytics SDKs, no advertising, no trackers, and no third-party code that phones home.
No selling or sharing of data. We hold none, so there is nothing to sell, share, or breach on our end.

Encryption

Your data is encrypted in transit and at rest by Apple's CloudKit infrastructure, and ClinLog declares its sensitive fields for CloudKit field-level encryption. If you turn on Advanced Data Protection for your Apple Account, that data becomes end-to-end encrypted — not even Apple can read it. (Settings → your name → iCloud → Advanced Data Protection.)

Exports

PDF reports, the Application Summary, and CSV exports are generated on your device. Nothing is uploaded anywhere by the app — each export goes only where you choose to share or save it. Exporting always works, whether you are in the free trial, subscribed, or neither.

Subscriptions and payments

ClinLog Plus subscriptions are processed entirely by Apple through your App Store account. We never see or store your payment method, billing address, or any part of your payment information. Apple provides us aggregate sales reporting only. Manage or cancel anytime in your App Store subscription settings. If your subscription ends, your data stays viewable and exportable in the app — logging new hours is what pauses, never access to what you already logged.

Your controls

Export your data (PDF, Application Summary, CSV) at any time.
Delete any individual session or file at any time.
Erase everything — Settings → Privacy & Your Data → Erase All App Data removes your sessions and files (propagating through iCloud to your other devices) and clears synced settings.
Leave entirely — deleting the app and removing ClinLog data in iCloud settings (Settings → your name → iCloud → Manage Account Storage) removes what the app stored.

Apple Watch

If you use the ClinLog watch app, sessions you log on the watch transfer to your iPhone using Apple's Watch Connectivity framework and then sync through your iCloud account like any other session. The same privacy properties apply.

What about HIPAA?

HIPAA governs systems that store client health information. ClinLog is built to hold none — no client names, no notes about a client, no identifying details — so your hour log is a record of your training, not a client record, and doesn't fall under HIPAA. That stays true only if you keep client information out: log your hours, not your clients. ClinLog is not a medical records system and must never be used as one.

Children

ClinLog is built for graduate students and pre-licensure clinicians and is not directed at children under 13. We do not knowingly collect information from children — or, for that matter, from anyone; see above.

Changes to this policy

If the policy changes, the new version will be posted at this address with an updated effective date. Because ClinLog stores data only in your iCloud, a policy change can never retroactively grant us access to your data.