Privacy notice
How local worksheets, member accounts, and optional AI requests handle your information.
Last updated September 30, 2026
What this service collects
Public worksheets process your entries in your browser. Worksheet entries are not sent to our application server and are not saved automatically. Copy or download them before leaving the page. We do not accept medical-record uploads.
When accounts are enabled, we collect a display name, email address, a securely hashed password, account usage, and drafts you choose to save. A session cookie keeps you signed in. Passwords are not stored in readable form. Guest demonstrations are not saved as member drafts.
Hosting and AI processing
The application and account database are hosted on our Tower server using PostgreSQL. When live AI is enabled, it requires a signed-in account and your consent. Your message, recent conversation context, and confirmed facts are sent to the configured AI provider to generate a response. Do not share SSNs, VA file numbers, dates of birth, addresses, identifying medical records, or other sensitive identifiers. A public worksheet does not call an AI provider.
Live AI uses Anthropic’s API when configured. Its handling of API data is described in Anthropic’s privacy resources. Provider terms and retention are separate from this service’s account controls. We do not promise that deleting a local account deletes data already processed by an external provider.
Cookies, logs, and analytics
We use the authentication cookie required for account access. We do not install advertising analytics or sell personal data. The application does not intentionally log prompts, facts, or draft content. Infrastructure providers may process basic request information such as IP addresses, timestamps, paths, and errors for security and operation. Avoid putting personal information into page URLs.
Your controls
Signed-in users can export their account data, delete individual saved drafts, and delete their account in Account settings. Account deletion removes the account and drafts from the active database. Local database backups are configured with retention of up to seven days. Deleted information may remain in those backups until they expire; deleting your account does not immediately erase backup copies. Backup and restore verification are ongoing, so do not rely on this service as the only copy of an important document.
Payments
Checkout is closed while paid workflows are under review. If enabled in a later release, Stripe will process payment details. We will publish the applicable purchase terms and update this notice before paid checkout opens.
Keep your information limited
This service is not a VA record system or a healthcare portal. Use a nickname for your display name and share only the minimum information needed. The writing tools are intended for adults. For questions, use our Help & resources page.