PRIVACY POLICY
Note TCA AI
Last updated: April 29, 2026

This Privacy Policy describes how AdminTCA (“we,” “us,” or “our”) collects,
uses, and protects information when you use the Note TCA AI mobile application
(“App”).

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
1. INFORMATION WE COLLECT
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

a) Account Information
When you create an account, we collect your email address, full name, and
optionally your phone number. You may also use the App anonymously without
creating an account.

b) Session Note Content
When you use the App to generate or save session notes, we store the
information you enter in the session wizard, including:
– Provider name
– Recipient/client information (name, initials, gender, date of birth,
diagnosis, guardian names, preferences and goals)
– Service type, location, date, and time
– Questionnaire responses
– Generated and manually edited session notes

This information is stored on your account and accessible only to you.

c) Usage Data
We collect data about how you use the App, including AI generation counts
and dates (to enforce daily generation limits), app interactions, and
session metadata.

d) Device Information
We may collect device type, operating system version, and app version for
crash reporting and compatibility purposes.

e) Payment Information
If you purchase a subscription, payment processing is handled by Apple
(App Store) or Google (Play Store). We do not receive or store your payment
card details. We use RevenueCat to manage subscription status and
entitlements.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2. HOW WE USE YOUR INFORMATION
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

We use the information we collect to:
– Provide, maintain, and improve the App
– Generate AI-powered session notes based on your session data
– Enforce daily generation limits and subscription entitlements
– Sync your data across your devices
– Respond to support requests
– Send important account or service notifications

We do NOT use your information for advertising or sell your data to
third parties.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3. AI NOTE GENERATION
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

When you generate a note, the session data you have entered is sent to
third-party AI providers (currently Anthropic and/or OpenAI) to produce the
note text. This data is transmitted securely over HTTPS.

We configure our AI providers to not use your data to train their models.
However, you should not include any Personally Identifiable Information (PII)
beyond what is necessary for documentation purposes, and you are responsible
for ensuring your use of the App complies with applicable HIPAA, state, and
employer regulations.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4. DATA STORAGE AND SECURITY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Your data is stored on Supabase (supabase.com), a secure cloud database
provider. All data is:
– Encrypted in transit (TLS/HTTPS)
– Encrypted at rest (AES-256)
– Accessible only to your account (enforced via row-level security policies)

We implement appropriate technical and organizational measures to protect your
information against unauthorized access, alteration, disclosure, or destruction.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
5. DATA SHARING
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

We share your data only with the following service providers, solely to
operate the App:

– Supabase Inc. — database and authentication (supabase.com/privacy)
– Anthropic PBC — AI note generation (anthropic.com/privacy)
– OpenAI, LLC — AI note generation (openai.com/privacy)
– RevenueCat, Inc. — subscription management (revenuecat.com/privacy)
– Apple Inc. / Google LLC — app distribution and payment processing

We do not sell, rent, or trade your personal information to any third party
for marketing or advertising purposes.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
6. DATA RETENTION
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

We retain your account data and session notes for as long as your account is
active. If you delete your account, all associated data (notes, recipients,
providers, locations, service sets) is permanently deleted from our servers
within 30 days.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
7. YOUR RIGHTS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

You have the right to:
– Access the personal information we hold about you
– Correct inaccurate information
– Delete your account and all associated data
– Export your data (contact us for assistance)
– Opt out of non-essential communications

To exercise these rights, contact us at the email below.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
8. CHILDREN’S PRIVACY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

The App is intended for use by professional service providers and is not
directed to individuals under 18 years of age. We do not knowingly collect
personal information from children under 18. If you believe we have
inadvertently collected such information, please contact us immediately.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
9. HIPAA NOTICE
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Note TCA AI is a productivity tool for documentation professionals. It is not
a HIPAA-covered entity and does not enter into Business Associate Agreements
(BAAs). You are responsible for ensuring your documentation practices comply
with HIPAA, your employer’s policies, and applicable state regulations.
Avoid including full client Social Security numbers, insurance IDs, or other
sensitive identifiers beyond what is required for your documentation.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
10. CHANGES TO THIS POLICY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

We may update this Privacy Policy from time to time. We will notify you of
significant changes by updating the “Last updated” date at the top of this
page and, where appropriate, through in-app notification. Your continued use
of the App after changes constitutes your acceptance of the updated policy.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
11. CONTACT US
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

If you have questions or concerns about this Privacy Policy or our data
practices, contact us at:

AdminTCA
Email: support@admintca.com
Website: https://admintca.com