Your data in Aneligma
Where records are stored and how the current version works.
Local records
Therapy records are encrypted and stored in this browser. Without a Google Drive connection, app code does not send vaults to a server. If you choose Drive transfer, encrypted copies go directly to Google in your own account. The application itself loads from the internet; it is not fully offline. Hosting receives ordinary connection information such as IP addresses and requests for application files, separately from clinical records.
Save and export
Save and autosave update the local vault. Export downloads an encrypted file including attached documents and receipts. Clearing site data or losing your device can erase local records. Keep exports safely and retain your password; forgotten passwords cannot be recovered.
Other devices
There is no automatic sync. The experimental Google Drive connection uploads and loads whole encrypted vaults manually. Google receives ciphertext, size, transfer times and connection metadata, but not your vault password. Google handles account authorization. The temporary access token stays in memory and is discarded on lock, disconnect or reload. Access is limited to app data, not other Drive files. Old versions persist until you delete the app data in Drive settings; deleting a client does not remove those versions. See the Drive guide. Each browser has a separate vault. Export and import with the same password to transfer it. Import replaces local records; it does not merge changes.
AI and dictation
The AI assistant is optional and for testing with fictional data only. In the New client form, the “Draft with AI assistant” button sends only the text you type (nothing else from your vault) to a separate Google Cloud service (Vertex AI, EU region) after you sign in with Google and confirm the data is fictional. The assistant returns a draft only, which you review; it does not create or change files. The service does not store the text, but Google processes the request; do not use it with real clinical data before a separate compliance review. The same applies to the “AI assistant for this session” in the session form and to the optional PDF (typed or handwritten, up to 8 MB and 30 pages): only the text or PDF you provide there is sent, not your vault or other sessions, and the PDF content leaves your device for Google Cloud. The assistant never fills in the quick ratings. Handwriting can be misread; check the draft. Dictation runs locally after the model download; audio is not sent to a speech recognition service. The “Listen” button reads text with your browser or operating-system voices; the app does not send the text anywhere (depending on the browser, some system voices may use their own services).
Printouts and CSV
Printouts and financial CSV files are readable, not encrypted vault exports. Financial CSV excludes client names and codes, free-text descriptions and receipts. Handle exported files with care.
Deletion and support
Deleted clients stay in the Bin for 30 days. Expired files are purged at the next unlock. Existing exported copies are not changed automatically. For support, send steps and error messages without client details, notes or passwords.
Preview
Use fictional data only. This page describes functionality; it is not a security certification or a complete legal privacy policy.