Privacy Policy

Last updated: July 29, 2026

We collect the minimum needed to run PracticeKit, and we don’t sell or rent any of it. Ever.

What we collect

• Account: your email address and name via Google sign-in or email/password (handled by Firebase Authentication — we never see your password).
• Practice profile: your questionnaire answers — practice name, state, license type, fees, policies. This is information about your practice, chosen by you.
• Generated documents: stored so you can view, export, and regenerate them.
• Payments: handled entirely by Stripe. We receive confirmation of your purchase, never your card details.

What we deliberately do not collect

No client data. The questionnaire never asks about your clients, and you should never enter client information into it. PracticeKit stores practice configuration, not patient records, and is not a HIPAA business associate.

No advertising trackers, no analytics resale, no data brokers.

Who processes data on our behalf

Google Firebase (authentication and database), Anthropic (the AI model that writes your documents — questionnaire answers are sent to it to generate them), Stripe (payments), and Railway (hosting). Each receives only what it needs for its role.

Retention and deletion

We keep your account, answers, and documents while your account exists so regeneration works. Email hello@apprush.io from your account address to delete your account and all associated data; we complete deletion within 30 days.

Cookies

Only what sign-in requires (Firebase auth session). No third-party advertising cookies.

Changes and contact

Material changes will be posted here with a new date. Questions or requests: hello@apprush.io.