We're a HIPAA-compliant platform built for mental health professionals. We go beyond what's legally required because your clients' trust—and yours—depends on it.
Account info
name, email, practice details
To create and manage your account
Client records
notes, appointments, intake forms
To provide our core service
Billing info
To process payments
Usage data
To improve the product and fix bugs
What We Will NEVER Do
Not to advertisers, not to anyone, ever
Unless you explicitly opt in
With third parties for their marketing
Without your permission or legal requirement
- Encryption everywhere — At rest and in transit (AES-256, TLS 1.3)
- HIPAA compliance — Technical safeguards implemented; we sign BAAs with all covered entities
- Enterprise-grade infrastructure — SOC 2 compliant hosting providers
- Security monitoring — Continuous vulnerability scanning and security reviews
- Access controls — Role-based permissions, audit logs
You can always:
- Access your data — Download everything we have
- Correct inaccuracies — Update your information anytime
- Delete your account — We'll purge your data (subject to legal retention)
- Export your records — Standard formats, no lock-in
- Revoke consent — For any optional data processing
Our AI features (progress notes, treatment suggestions) process your input to generate outputs. Here's what you need to know:
- AI processing happens on secure, HIPAA-compliant infrastructure
- We do NOT use your client data to train AI models
- AI outputs are suggestions—you always have final review and control
- You can disable AI features entirely if you prefer
You
Always
It's your data
Your authorized staff
If you grant access
Practice management
Teja support
With your permission
Troubleshooting
Law enforcement
Valid legal order only
Legal compliance
Subprocessors
As needed for service
See full policy for list
- Active accounts: Data retained while you're a customer
- Closed accounts: Deleted within 90 days of request
- Legal holds: Some data retained per HIPAA (minimum 6 years for medical records)
If we ever experience a data breach affecting your information:
- We'll notify you within 48 hours (faster than HIPAA's 60-day requirement)
- We'll explain what happened, what data was affected, and what we're doing
- We'll provide free credit monitoring if financial data is involved
Questions?
Email: privacy@jhink.com
Mail: Jhink LLC, 3323, 447 Broadway, 2nd Floor, New York, NY 10013
We respond to privacy inquiries within 5 business days.
This summary is for convenience. The full privacy policy is the legally binding document.