Draft under legal review. This page is published so testers and the app stores can read it. A lawyer has not yet reviewed it; the wording may change before the app is released.
PRIVACY POLICY (DRAFT)
Backroom for iPhone and iPad is a tool for clinicians and the staff of their practice. It shows a practice its own clients and schedule. It is not for clients, and it is not an emergency service. This policy says what the app collects about you, the person signing in, what it shows you about clients, and what you can do about it.
The test build you may have been invited to
The build shared through TestFlight is a test system. It carries an invented practice with placeholder clients behind “Sign in with the demo account”, and a TEST SYSTEM banner on every screen. Everything in it is made up and stays on your device; nothing you type in it is sent to us. Do not enter any real person's details in it. The only connection the test build makes is to Expo, the service that delivers app updates, which sees your device's internet address and app version when it checks for an update.
Signing in to a real practice
When the app is connected to your practice's Backroom, you sign in with your email address and password, and a six-digit code from your authenticator app if your practice has turned that on. The app then receives your practitioner profile (your name, email address and, where your practice has recorded them, your licence and identifier numbers) and your practice's time zone. Your session is held in a secure cookie that expires after two hours, and signing out ends it on the server at once.
What the app shows you about clients
Signed in, the app fetches your practice's client list (names, dates of birth, email addresses, phone numbers and consent flags) and its visits (times, how the visit happens, status, and the visit's billing code). It shows them and lets you book, confirm or cancel a visit. Tapping a client's phone number or email hands it to your device's Phone or Mail app. Client information is held in the app's memory only while a screen shows it; the app writes none of it to the device's storage, so quitting the app leaves nothing behind.
What your practice records about you
Your practice's Backroom keeps an audit log of what you do in it: when you sign in and out, when you list or open a client, and when you create or change a visit, with the time and your device's internet address. Your practice uses it to meet its own record-keeping duties. It does not record what a note or a client's record says.
What the app does not collect
No contacts, calendar, photos, files, microphone, camera or location. No notifications. No advertising identifier, and no advertising, analytics or crash-reporting software is in the app. Notes, intake, billing, video visits and messaging are not in this app, and AI note help is off.
Who sees your data
Your practice is the custodian of its clients' records and of the audit log; we process them on the practice's behalf under the agreement your practice holds with us. We do not sell any of it and we do not share it with advertisers. It is shared only with the services that host your practice's Backroom and deliver app updates, and when the law requires it.
Keeping data safe
Every connection to the server is encrypted. Nothing is stored on the device between sessions. Sign out before you hand your device to someone else; the app does not yet lock itself or hide its screen when you switch away.
Leaving a practice or closing your account
Your practice's administrator removes your access. To have your practitioner profile deleted, ask your practice or write to the contact below. The audit log is kept by the practice for as long as its record-keeping duties require.
Clients' rights
If you are a client of a practice that uses Backroom, your practice's own privacy notice applies, and requests about your records go to your practice.
Changes
If this policy changes, the new version is published at this address.
Contact
Questions about this policy: admin@balkecc.com.
Last updated: 2026-10-23 (draft).