Privacy and safety
Privacy and safety
StephX is designed around client control, permission-based therapist access, and clear safety boundaries.
Quick overview
Cards are private by default, therapist access is permission-based, AI only works on content submitted to an AI action, and public Help, Legal, and Trust pages should never expose private card or session content.
What you’ll see
Core privacy rules
- New cards are private unless explicitly shared.
- Therapist access is limited to shared content and appropriate linked-client access.
- Therapist notes have their own visibility rules.
- Public Help, Legal, and Trust pages should not contain private story, healing, therapist-note, or session-prep content.
AI and dictation boundaries
- AI only works on content submitted to an AI action.
- AI outputs are suggestions, not clinical facts.
- Dictation does not automatically trigger sharing, export, therapist notification, visibility changes, or AI.
- Dictation draft text should be reviewed before saving.
Support messages and screenshots
Avoid putting sensitive card, session-prep, therapist-note, account, or invite information into screenshots or support messages unless you have been given a safe way to share it.