Privacy

The short version

Midline never receives your clients’ names. You type a name into your browser; it stays there. When Midline writes a note, it writes {{CLIENT}} where the name goes, and your browser swaps the name in on your screen. What reaches our servers is a list of menu selections: “static tripod grasp”, “verbal prompts”, “overall engaged”. That describes a session. It identifies nobody.

What we store

• Your account. Email and name from your sign-in, your plan, and your referral code.
• A count of notes. One row per note with a date and a few numbers, so your monthly limit works. No note text, no selections.
• Notes you rate, and only if you have turned that on in Settings. We keep the version with the placeholder in it, never one that has been filled in with a name.
• Your style preferences. How long you like your notes, the tone you pick, and any wording you have told us to avoid.

What we never store

• Client names, initials, nicknames or any other identifier.
• Dates of service.
• Client rosters, goals, or history between sessions.
• The contents of your generation requests. The route that writes your note does not log what you sent it.

Analytics

We use PostHog to see which parts of Midline get used, and that includes session replay: a recording of the pages, taps and scrolling of a visit, so we can see where the app is confusing rather than guess.

The client name and the finished note are excluded from those recordings. The name field and the free-text box are masked before anything leaves your browser, and the note itself is blocked, so it is never recorded and never reaches us. What a replay shows is which menu items you picked and where you moved, which is the same de-identified detail your request already carries.

Recording is limited to midlinenotes.com. Automatic click capture stays off, because it stores the text of what you clicked and that is a separate path out.

Drafts in your browser

Your selections are saved in this browser so a crash does not cost you the note. They expire after 24 hours, and Clear everything removes them immediately. Worth knowing if you use a shared computer. The client name is kept separately and disappears the moment you close the tab.

The free-text field

The “in your own words” box is sent to write your note. We check it for things that look like names and dates and warn you, but that check cannot catch everything. Do not put identifying details there. Note that initials are not a safe substitute: under US de-identification rules, initials are still an identifier.

HIPAA

We do not claim to be “HIPAA compliant”. There is no such certification, and the honest statement is the specific one above. Midline is built so that protected health information never reaches our servers in the first place. If that ever changes, this page changes first and you will be told.

Your data

Email privacy@midlinenotes.com to get a copy of what we hold about you or to delete your account. Deleting an account removes your row, your note counts, your rated notes and your preferences.