Océan Patients: PRU Thérapie Privacy Policy

Last updated: 27 October 2026

Océan Patients is an app for practitioners of non-medical support, used to keep the records of the people they support on iPhone, iPad and Mac. This policy explains what data the app processes, where it is stored and who can access it.

In short

• The publisher collects no data. There is no account to create, and no data is sent to the publisher or to any publisher server.
• Records stay on your devices and in your personal iCloud, encrypted by the app before anything is sent. Neither the publisher nor Apple can read them.
• No advertising, no trackers, no analytics, and no sharing with third parties.
• Video calls (iPhone, iPad): if the practitioner uses them, the session runs through their own Zoom account; transcription happens on the device and nothing is recorded.

Publisher

The app is published by Rose Longa. Contact for any privacy question: oceanpatients.contact@proton.me.

Who is responsible for what

The practitioner using the app alone decides what information they record about the people they support. Under the General Data Protection Regulation (GDPR), they are the data controller for this data and must inform the people concerned.

The publisher does not receive, store or view any of this data. It therefore does not act as a processor for its storage.

Data stored in the app

Depending on how the practitioner uses it, the app may contain:

• the identity and contact details of the people supported (last name, first name, date of birth, phone, email);
• appointments, session notes and content, transcribed dictation, images, the family tree and the timeline;
• signed consent documents imported by the practitioner;
• the practitioner’s professional identity and terms and conditions, entered on each device.

Some of this information may be sensitive data. The app is designed so that it never leaves the practitioner’s control.

Where data is stored

On the device. Data is stored in the app’s private storage, protected by the device’s encryption. Clinical records and the sync journal are additionally encrypted by the app (256-bit AES-GCM) with keys kept in the device keychain.

In iCloud, if syncing is turned on. To make records available on all their devices (iPhone, iPad, Mac), the app uses the private iCloud database of the practitioner’s Apple Account. Every record and document is end-to-end encrypted by the app before it is sent. The key travels only through iCloud Keychain, which Apple itself end-to-end encrypts: only the practitioner’s devices can read the records. The publisher has no access to this database.

Syncing can be turned off at any time in the app; records then stay on the device only.

Dictation

Dictation runs entirely on the device, using speech recognition models built into the app (NVIDIA Parakeet and Sortformer, CC-BY-4.0 licence). Audio stays in memory for the length of a sentence and is then erased: it is never recorded or sent. Voices are told apart only to start a new line when the speaker changes; no voiceprint is created or kept.

Zoom video calls (iPhone and iPad)

Video calls are optional. They use Zoom’s official kit (Zoom Video Communications) and the practitioner’s own Zoom account, which they connect themselves; the publisher has no access to this account or to the meetings.

• Sign-in: the practitioner signs in on Zoom’s page. The app never sees their password; the sign-in token is kept only in the device keychain, without syncing.
• Meetings: each call creates a meeting in the practitioner’s Zoom account, with no recording and with a waiting room: the person supported only joins when the practitioner admits them. Video and audio travel through Zoom’s servers, as for any Zoom meeting. Zoom then acts on behalf of the practitioner, under the Zoom terms and privacy policy the practitioner has accepted.
• No record data is sent to Zoom: neither the name of the person supported nor any session content. The name shown is the one on the practitioner’s Zoom account.
• Transcription: it only starts when the practitioner turns it on. Each participant’s audio is then received on the device and transcribed there, with the same models as dictation; it is neither recorded nor sent. Zoom informs participants that the meeting audio is passed to the app. The text is added to the record only if the practitioner chooses to insert it into the session summary.
• Tapping: drum sequences the practitioner starts during a call are sent into the meeting, mixed with their voice; nothing is recorded.
• Original sound: if the practitioner chooses this microphone setting, Zoom also transmits ambient sounds (for example tapping done by hand).
• Background: the photos the practitioner picks are applied to their own video on the device by the Zoom kit.

The practitioner informs the person supported about the video call and the transcription; the app lets them file the signed consent in the record.

Features that use Apple services

• Face ID, Touch ID or passcode: verification is performed by the device; the app receives no biometric data.
• Reminder notifications: they are scheduled on the device and show no name on the Lock Screen.

Messages sent to the people supported

Appointment reminders are prepared by the app, then sent by the practitioner from their own Mail or Messages apps after review. The app sends nothing itself and uses no third-party sending service.

Exports, printing and backups

The practitioner can export a record as a PDF, print it or create an encrypted backup. These files are created only at their request; they alone choose where to save them or whom to send them to.

Permissions requested

• Microphone: for dictation, when you tap the microphone in a field, and during a video call.
• Camera: only during a video call started by the practitioner.
• Bluetooth: to use earphones or a headset during a video call.
• Photos: only the photos the practitioner picks for their background (no access to the rest of the library).
• Notifications: for appointment reminders 7 days and 1 day before.
• Face ID: to lock access to records, if the practitioner turns it on.

Each permission can be withdrawn in the device Settings.

Retention and deletion

Data is kept for as long as the practitioner keeps it in the app. They can delete an entry, empty the app’s trash, turn off syncing or delete the app. The app’s iCloud data can be erased from Settings › [account name] › iCloud › Manage Storage.

Rights of the people supported

The people supported exercise their rights (access, rectification, erasure, objection, restriction, portability) with the practitioner who supports them. The publisher, which holds none of their data, cannot respond on the practitioner’s behalf.

Anyone may lodge a complaint with their data protection authority (in France, the CNIL, www.cnil.fr).

Minors

The app is intended for professionals. Information about minors is recorded under the practitioner’s responsibility, with the consent of their legal representatives.

Changes

Any change to this policy will be published on this page and in the app, with its update date. If a new feature were ever to send data outside the practitioner’s devices, it would only be turned on after prior notice.

This website (oceanpatients.fr)

This website sets no cookies and uses no analytics, so no consent is requested.

• Hosting: the site is hosted by Netlify, Inc. (United States). Like any host, Netlify keeps technical logs (IP address, browser type, pages requested) to keep the service secure and running. Netlify acts as a processor and states that it participates in the EU–US Data Privacy Framework, which governs this transfer.
• Messages received: when you write to oceanpatients.contact@proton.me (access request, support), your address and message are used only to reply to you and, where relevant, to manage your access to the app. Legal basis: steps taken at your request before any agreement, and the publisher’s legitimate interest in answering requests. Messages are kept for at most three years after the last exchange, then deleted.
• Your rights: you can ask to access, correct or erase this data, or object to its processing, by writing to oceanpatients.contact@proton.me. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).