ClinInk Privacy Policy

Provider: Narrative Health

App: ClinInk (iPad)

Effective date: 26 September 2026

Last updated: 26 September 2026

In short

ClinInk is a note-taking app for clinicians, used on an iPad. Everything you write in it stays on your iPad.

- There is no ClinInk account, sign-up or login.

- There is no ClinInk server. Narrative Health never receives your notes or any other information you put in the app.

- The app has no analytics, tracking, advertising or crash reporting of its own. It sends nothing about you or your clients anywhere.

Who this policy is for

ClinInk is made for practitioners, such as psychologists and other clinicians. Clients do not use it. This policy is for practitioners who use the app and for clients who want to know how a practitioner's notes are handled.

Where your information is stored

  • On your iPad only. Notes, client folders, formulations, genograms, safety plans, planner entries, pictures and other documents are saved in ClinInk's own storage on your iPad. ClinInk does not sync them to any cloud service.

  • Protected when the iPad is locked. ClinInk uses Apple's highest standard file protection ("Complete" Data Protection). Its files cannot be read while the iPad is locked. For this to work, your iPad needs a passcode.

  • Privacy cover. When you leave the app, ClinInk puts a blank cover over the screen, so the app switcher does not show a picture of your notes. The cover is on by default and can be turned off in Settings.

  • Optional app lock. You can make ClinInk ask for Face ID, Touch ID or your iPad's passcode when it opens, or when you return to it after a set time away. This is off by default.

What the app is designed to hold, and what it is not

ClinInk is designed so that client folders and documents are named with client codes (for example, "TR-04"), not names. The app has no fields for a client's name, date of birth, address or contact details. Matching a code to a person is meant to happen in your practice management system, not in ClinInk.

What you write or draw on a page is up to you, and the app cannot check it. Two kinds of document hold information about people other than by code:

  • Genograms record family members. Each person has a label, and the app suggests a first name or initials. The app records a year of birth or an age, never a full date of birth.

  • Safety plans are written with the client, and the client keeps a copy. They may include the names and phone numbers of people and services the client can contact. That is what a safety plan is for.

  • These documents are stored and protected in the same way as everything else in the app.

The one time the app uses the internet

ClinInk connects to the internet in one situation only. If you add a calendar subscription address (a web address ending in `.ics`, or a `webcal://` link) in Settings › Planner, the app downloads that calendar so you can see it in the planner.

  • The app only downloads. It never sends your notes or any other information with the request.

  • It only contacts addresses you have entered yourself. It does not follow redirects to other addresses.

  • The downloaded calendar is kept on your iPad, with the same protection as your notes, so the planner works offline. It is not included in ClinInk backup archives.

If you do not add a calendar subscription, the app never uses the internet.

Apple's apps on your iPad: Calendar, Reminders, Photos and Camera

ClinInk only asks for these permissions when you first use a feature that needs them. You can decline, or turn access off later in the iPad's Settings app. Everything else in ClinInk keeps working.

  • Calendars (read-only). If you choose to show your iPad's calendars in the planner, ClinInk displays your events but never changes, adds or deletes them. It never saves what an event says (its title, location or notes) to any file. It only keeps a reference, so a note you attach to an event can find the event again.

  • Reminders (read and write, if you switch it on). You can view, add, edit, complete and delete reminders from the planner. Reminders are stored in Apple's Reminders app, not in ClinInk. That means they are outside ClinInk's file protection and are synced by iCloud to your other devices, if you use iCloud. For this reason, we recommend using client codes only, never names, in reminders. If you place a reminder on a planner time block, ClinInk keeps a copy of its title in that week's planner file on your iPad.

  • Photos. When you add a picture to a page, you choose it in Apple's photo picker. ClinInk only receives the picture you pick. It cannot see the rest of your photo library.

  • Camera. If you take a photo from inside ClinInk, the app asks for camera permission first. The photo goes into the note you are working on. It is not saved to your photo library.

  • Notifications. If you turn on backup reminders, ClinInk schedules a notification on your iPad that says it is time to back up. The notification contains no client information.

Backups, exports and sharing

  • Backup archives are yours. In Settings › Backup and restore, you can export your whole library as one archive file. You decide where to keep it. ClinInk does not upload it anywhere. The archive is not password-protected by ClinInk, so store it somewhere secure.

  • Exports and sharing. When you export or share a document (for example, a PDF of a safety plan for a client), it goes wherever you send it through Apple's share sheet. Once it leaves ClinInk, the app's protection no longer applies. By default, safety plans and other client handouts are shown for review before they are shared, and they do not include the client code.

  • iPad backups and the Files app. ClinInk's documents appear in the Files app under "On My iPad › ClinInk". Like most apps' data, they are included in your iPad's own backups, whether to iCloud or to a computer, if you have those turned on. Those backups are managed by Apple and by you, not by Narrative Health.

  • Deleting the app deletes its data. If you delete ClinInk from your iPad, everything stored in it is deleted. Keep a current backup archive if you want to keep your notes.

What Narrative Health receives

Nothing from inside the app. Narrative Health only receives information that you choose to send us directly, such as an email, or that Apple provides through TestFlight (see below).

Beta testing through TestFlight

While ClinInk is in beta, it is distributed through Apple's TestFlight. TestFlight is Apple's service, and Apple's own privacy terms apply to it. When you test a beta, Apple may share some information with Narrative Health, such as the email address you were invited with, installs, sessions, crash reports, and any feedback or screenshots you choose to send. Beta feedback goes through Apple's TestFlight app. Please do not include client information in feedback or screenshots. See Apple's TestFlight privacy information: https://www.apple.com/legal/privacy/data/en/test-flight/

Your responsibilities as a practitioner

What you record in ClinInk is part of your own clinical records. You are responsible for handling it in line with your own privacy and record-keeping obligations. In Australia, these include the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and any state health-records law that applies to you. ClinInk is working material for sessions and is not meant to be your official record. It does not replace your practice management system or your record-keeping.

Children

ClinInk is for practitioners and is not designed to be used by children.

Changes to this policy

If the way ClinInk handles information changes, we will update this page and the "Last updated" date above before that version of the app is released.

Contact

Narrative Health

Email: admin@narrativehealth.com.au

Website: https://narrativehealth.com.au