Privacy Policy

Abby — Your ABA Scribe · Miami Behavior Center LLC

Who we are

Abby is a session-note documentation assistant for Registered Behavior Technicians (RBTs), operated by Miami Behavior Center LLC, 1820 SW 97th Place, Miami, FL 33165. Contact: [email protected].

What data the app collects and how

• Account data (the email address released by Sign in with Apple — which may be a private relay address — and your name if Apple passes one) — processed by our authentication provider (Clerk) to create and manage your account. This is the only personal data that reaches an account system.
• Client records you create (client name, diagnosis, behaviors, interventions, and skill programs imported from BIP/SAP documents) — entered or imported by you. Stored only on your device, encrypted, under a key held in your device's Keychain. Never uploaded to our servers for storage.
• Session details and note text — typed in by you while drafting a note.
• Office Puzzle credentials (optional) — stored only in your device's Keychain, used locally to sign you in inside the app. We never receive them.
• Crash diagnostics (optional, off until you turn them on) — if the app crashes or hits an error, a technical report describing where in the app's code the failure happened and the type and time of the steps immediately before it. It carries no client names, no note text and nothing from a behavior plan. See Crash diagnostics below.

The iOS app does not use the microphone and never records, transmits or stores audio. It does not collect advertising identifiers, location or contacts, shows no ads, and does not track how you use the app for analytics or marketing. The only diagnostic data that can leave the device is the crash report described below, and only if you turn it on. It can read a photo from your library only if you choose one as the app background, and that image never leaves the device.

How data is used, and which third parties receive it

When you ask Abby to draft, review, audit, chat about, or import a BIP — and only after you explicitly consent in the app — the relevant text you entered is sent over HTTPS to our backend (abby.mbcenter.us, hosted on Cloudflare). Cloudflare acts only as the authenticated encrypted relay. The backend forwards that text only to Amazon Bedrock to complete the requested clinical operation:

• Amazon Web Services Bedrock using an Anthropic Claude model — BIP extraction and the drafting, review, audit, repair, and chat operations requested by the user.

These providers process the text transiently under their API data-use terms, which do not permit using API data to train their models, providing protection equivalent to our own. Generated notes are returned to your device; our backend does not build profiles of you or your clients, and does not retain note content for storage.

Before anything leaves the device, Abby removes the client's name and other direct identifiers and replaces them with a neutral placeholder; the real name is re-inserted locally, on your device, after the note comes back. Names, dates of birth, record numbers and similar identifiers are screened out automatically, and a request that still appears to contain them is blocked rather than sent. You can also use on-device Apple Intelligence on supported devices, where the text never leaves the phone at all.

Crash diagnostics

If you turn crash reports on — and only then — Abby sends a technical report to Sentry (Functional Software, Inc.), acting as our processor, when the app crashes or hits an error, solely so the fault can be found and fixed. The report contains the point in the app's code where the failure happened, together with a trail of the steps immediately before it: for each step, only its type (a tap, a screen change, a network request) and the time it occurred — not its content, and not the name of the screen. Any text that could travel with an error is put through the same identifier screening used for AI requests before it leaves the device, and is discarded rather than sent if that screening fails.

The report carries no client names, no note text and nothing from a behavior plan. Sentry does not receive your account, your name, your IP address or your device identifiers, we do not identify you to it, and no profile of you is built. Reports are stored by Sentry for a limited period under their data-processing terms, and are used only to diagnose faults in the app. Nothing is sent while the app is working normally.

Consent and control

• AI drafting is off until you accept the in-app consent sheet, which names what is sent and to whom before anything is transmitted.
• You can withdraw consent at any time in Settings → AI → AI drafting consent.
• Crash reporting is off until you accept a separate in-app notice, shown after you sign in, which names Sentry and what the report contains before anything is sent. You can turn it off again at any time in Settings → AI → Crash reports.
• You can delete clients and notes on the device at any time; deleting a client also deletes their clinical memory.
• You can delete your account from inside the app: Settings → Delete account. This destroys your sign-in on our authentication provider, every client and note stored on the device, and the encryption keys that protect them. It cannot be undone, and the app tells you exactly how much is being destroyed before you confirm. It does not touch records you have already filed in your agency's own clinical portal.

Data sharing

We do not sell or rent personal data. Data is shared only with the processors named above — Clerk for authentication; Anthropic (including via AWS Bedrock), Cloudflare and Google for AI processing; Sentry (Functional Software, Inc.) for crash diagnostics, if you have turned them on — each bound by their own data-processing terms providing equivalent protection. No data is shared for advertising.

Data retention and security

Clinical records live on your device, encrypted at rest, and are kept separate per signed-in account: another account on the same device cannot open them. Transport is encrypted with TLS. Office Puzzle credentials live in the device Keychain. AI requests are processed transiently and are not retained by our backend for storage. Crash reports, if you have turned them on, go directly from the app to Sentry and are not stored on our backend.

Children

Abby is a professional tool for adult clinicians and does not target children. Clinical records about minors are entered under the clinician's professional responsibility and remain on the clinician's device.

Changes

We will post any changes to this policy on this page.

Last updated: August 15, 2026