Privacy Policy

Almost Licensed is a clinical hour tracker for people working toward independent licensure in Oregon and Washington. It's built and run by Thomas Bruketta, an individual clinician (a sole proprietor) — not a company. This page explains, in plain language, what the app stores, what it deliberately doesn't, and what you can do about it.

The short version: the app holds the hours and profile details you type in so it can show your progress and generate board reports. It never asks for or stores client names, clinical notes, diagnoses, or any protected health information (PHI).

What the app stores

• Account details. Your email address and password, handled by our authentication provider (Supabase). We never see your password in readable form.
• Your profile. The information you enter in Setup and Settings: your name, contact email and phone, birth month, plan start date, certificate or license numbers, week preferences, and your supervisor and agency details (supervisor name, license, email, phone, agency name).
• Your hours. The weekly entries you log — work hours, direct client hours, supervision hours, dates, categories, and (for MFT tracks) couples/family hours — plus your placements and per-state settings.
• Billing metadata. If you subscribe, our payment processor (Stripe) handles your card. We store only the Stripe customer and subscription identifiers, your payment status, the amount, and renewal dates. We never see or store your full card number.
• Supervision connections. If you use the supervisor features, the app records who you've connected with and the status of that connection.

What the app never collects

No client names. No session notes or clinical content. No diagnoses. No protected health information. The app is built so that this data simply has nowhere to live — you track your hours and categories, not anything about the people you see.

Services we rely on

Running the app means trusting a few third-party services with the data needed to do their job. Each only receives what it needs:

• Supabase — database and account authentication (hosted in the United States). This is where your profile and hours live, protected by per-user access rules.
• Stripe — payment processing for subscriptions. Stripe handles your card details directly under its own privacy policy.
• Resend — sends the app's emails (password resets, reminders, and supervision notifications).
• Vercel — hosting, plus Vercel Analytics and Speed Insights for aggregate page-view and performance measurement.
• Umami Cloud — privacy-friendly, cookie-free web analytics for aggregate traffic (no cross-site tracking).
• Sentry — error tracking in the production app so bugs get caught and fixed.

We don't sell your data, and we don't share it with advertisers.

Sharing with a supervisor

If you connect with a supervisor and accept that connection, you are granting them read-only access to your logged hours, placements, and per-state settings — your full history, so they can oversee your progress. They do not get your account details like your email, phone, exact date of birth, or payment status; only your name, discipline, state, and birth month (used to compute review deadlines) are shared. Nothing is shared until you accept, and you can ask us to end a connection at any time.

Emails and your preferences

Some emails are part of the service and can't be turned off — things like password resets and supervision-request notifications. Reminder and progress-summary emails are optional: you can turn them off with the weekly reminder toggle in Settings, or use the one-click unsubscribe link in any reminder email.

Your data, your rights

• Export it. Download everything you've entered as JSON or CSV any time from Settings.
• Delete it. Email support@almostlicensed.com and we'll delete your account and its data.
• Correct it. Most of your information is editable directly in Settings and the Hour Log.

Security

Data is sent over encrypted connections (HTTPS), and access to your rows is enforced per-user at the database level so one account can't read another's. No system is perfectly secure, but we keep the surface small: no PHI, minimal data, and no card numbers on our side.

Children

Almost Licensed is a professional tool for working clinicians and isn't directed to children. We don't knowingly collect information from anyone under 16.

Changes to this policy

If this policy changes in a meaningful way, we'll update the page and the “last updated” date above. Continued use after a change means you accept the update.

Contact

Questions about your data? Email support@almostlicensed.com. See also our Terms of Service.

This page describes how the app handles data; it isn't legal advice.