Privacy Policy

Effective Date: December 2025

Our Core Philosophy

Local-First, Zero-Knowledge. Your genogram data (family structures, clinical notes, patient information) is stored locally on your device. We cannot access it.

What Data is Stored Where

On Your Device (Local Storage)

  • •All genogram documents and family data
  • •Clinical notes and observations
  • •Health conditions, dates, and personal details
  • •Custom patterns you create
  • •Application preferences

On Our Servers (Minimal)

  • •Account email (for authentication)
  • •Subscription status
  • •Usage metrics (anonymous, aggregated)

AI Features & Mandatory PHI Shield Policy

CRITICAL COMPLIANCE NOTICE: Manual genogram drafting and storage on Genosm are 100% local-first and zero-knowledge (data never leaves your machine). However, when utilizing optional AI features (AI Builder, AI Editor, Clinical Insights), data is transmitted to secure AI model endpoints. You are strictly required to keep the built-in PHI Shield active and review all masked tokens before sending any prompt. Genosm provides on-device anonymization tools, but verifying that all Protected Health Information (PHI) is de-identified is strictly the user's professional and legal responsibility.

How the Genosm PHI Shield Works

When PHI Shield is active, our on-device engine intercepts your prompt and canvas graph before any data leaves your browser:

  1. 1. Structured Ingestion & AST Tokenization: All names, nicknames, and relations from your canvas nodes and prompt text are isolated into an Abstract Syntax Tree (AST), eliminating substring replacement errors.
  2. 2. Decoy Persona Substitution & HIPAA Safe Harbor: Real patient names are replaced with isolated, deterministic synthetic decoys (e.g., "David" $\rightarrow$ "Arthur Sterling"), and all ages over 89 or specific birth dates are aggregated into Safe Harbor compliant buckets.
  3. 3. Interactive Interstitial Review: Live visual chips appear above the prompt box displaying all detected identifiers. You can dismiss false positives or manually tag custom identifiers with a single click.
  4. 4. Local Two-Way De-anonymization: Once the AI returns the diagram, real identities and kinship links are restored strictly in your browser. The remote AI model never sees or stores real patient identifiers.

Step-by-Step: How to Use the PHI Shield

Step 1: Verify Privacy Guard Toggle: Confirm the green "PHI Shield" toggle is switched ON in the AI Assistant sidebar.
Step 2: Enter Clinical Notes: Type or paste your case history, intake transcript, or edit instructions into the prompt box.
Step 3: Review Detected Tokens: Inspect the Interstitial Chip Tray directly above the textarea. Confirm that all client names, relatives, and dates are captured.
Step 4: Tag Missed Terms (if any): If an unusual nickname or identifier is missed, click + Tag Custom to redact it before sending.
Step 5: Send & Audit: Transmit your prompt. Verify all generated diagram relationships on your canvas before exporting.
User Acknowledgment & Agreement: By using Genosm AI features, you agree that you will not transmit unmasked PHI. You acknowledge that compliance with HIPAA, GDPR, and relevant privacy statutes remains your sole responsibility, and you agree to review and verify all de-identification before prompt submission.

Your Rights

  • ✓Access: Your clinical data is on your device - you have full access
  • ✓Export: Export all data as JSON anytime
  • ✓Delete: Clear your browser data to remove all local data
  • ✓Portability: JSON exports work with standard tools

Third-Party Services

  • •Authentication: Clerk (for secure login)
  • •Payments: Polar (PCI-compliant billing)
  • •AI Processing: OpenAI/Anthropic (with zero-retention agreements)
  • •Analytics: Privacy-focused, anonymized metrics only

Contact Us

Questions about privacy? We're here to help.

hello@genosm.com