Before you enter information
Be deliberate about
what you share.
Clinical information needs careful handling. Review the published policies and your own professional obligations before using Psy with sensitive material.
Start with the minimum needed.
Remove names, contact details, record numbers, and details that could identify someone indirectly. Use fictional examples when exploring a tool. Removing a name alone does not necessarily make clinical material anonymous.
Check consent, lawful use, practice policy, and contractual requirements through your own professional processes. A region setting in a form does not establish HIPAA, GDPR, or other compliance.
What the published policy says
The privacy policy describes encrypted transmission, third-party hosting, restricted access to stored information, and payment processing by a third party. It states that information provided under an account is deleted when the account is terminated.
These are statements in the published policy, not an independent security audit. Read the policy for its full wording and scope.
Due diligence
Questions to resolve
Which providers process my input?
The published policy refers to third-party services but does not provide a complete named processor list. Request the current list, processing locations, and applicable agreements from support.
Are inputs used to train models?
The published privacy policy does not give a specific answer about model training. Confirm the current arrangement before entering sensitive information.
How long are records retained?
The policy describes deletion on account termination but does not specify routine retention periods, deletion timing, or backup retention. Ask for those details and distinguish cancelling a subscription from deleting an account.
What is collected on these public tool pages?
The catalogue does not accept clinical notes or run tools. It links to the app. Navigation can carry the selected tool, the original public entry page, and campaign attribution into the product journey; sample text and clinical content are excluded from those navigation events.
Does Psy make clinical decisions?
Psy supplies drafts and organizes information. You remain responsible for assessment, treatment, documentation, and any decision to use or share an output. No certification or regulatory status is claimed here.