Skip to main content

Grow Therapy AI Features | Data & Privacy FAQs

Learn how data is securely managed using Grow's AI-enabled features.


General AI FAQs


What technology provider is Grow Therapy using to develop AI features? Grow Therapy uses various technology providers for AI features, including OpenAI and Anthropic.

Is Grow Therapy using my data to train external, third-party AI models? No, data and inputs are not used to train external, third-party AI models.

Can clients delete their data? Clients can submit a data deletion request via this form. After receiving the request, Grow will delete personal data where possible, but some data must be retained for legal, security, and business purposes, such as data part of the medical record.


AI summarization and session data


What is session data?

  • Session audio: raw audio recordings of your sessions

  • Session transcripts: written records of your sessions produced from session audio

  • Data generated from session audio and transcripts, including:

    • Session insights: summaries reviewed and approved by your provider

    • Note suggestions: provider-facing feature for clinical documentation

How is session data stored?

  • Original audio recordings and/or raw transcripts: Stored for up to 30 days so providers can review session insights and note suggestions.

  • Approved session insights, note suggestions, and other themes generated from session data: Stored for up to 10 years as required by healthcare record retention laws. This information is used to personalize client experiences with Grow and support the quality of care clients receive.

Who may have access to session data?

  • Grow provider(s): to ensure the accuracy of session insights and notes.

  • Grow’s internal teams and systems: to support treatment or operational purposes, such as quality assessment and service improvement, limited to staff with a role-based need

  • Trusted service providers: to help Grow deliver services, under strict contractual protections

In all cases, access to session data is limited to what’s necessary. For more details on how Grow uses client information, see our Privacy Notice and Notice of Privacy.

Is my personally identifiable information (PII) being retained by external vendors? No. Grow Therapy has zero-data retention agreements in place with third-party processors for AI summarization features. These agreements prohibit external vendors from retaining or training on your session data.

Am I required to enable AI summarization? No. This feature is optional and is not required. Additional information on how these features work is available below:

Can providers or clients use another AI note-taking tool? No. Grow sets a high bar for security and data integrity to protect personal data. We developed our AI-enabled summary technology to ensure our security standards are met.


Between-session data access and storage


What data is stored from between-session actions? Grow stores a limited set of between-session data to support personalization and care continuity:

  • Session topics

  • Coach conversations

  • Completed resources

💡 Note: This does not include any medical record data, approved session insights, or provider session notes. Those are stored and retained separately, in accordance with standard clinical documentation policies.

Who may have access to between-session data?

  • Providers: if clients interact with coach outside of private mode, share session topics, or complete worksheets and exercises through the Grow app or website. This helps providers support clients effectively throughout therapy.

  • Grow’s internal teams and systems: to support quality assessment, service improvement, and treatment operations, limited to staff with a role-based need

  • Trusted service providers: to help Grow deliver services, under strict contractual protections.

For more details on how Grow uses client information, see our Privacy Notice and Notice of Privacy Practices.

Why does Grow store between-session data? Storing this data helps Grow:

  • Provide personalized support while a client is active in care

  • Maintain continuity if care is paused and then restarted

  • Suggest relevant resources and conversation prompts based on prior activity

How long is between-session data stored?

  • Data is stored while a client is in care and for 60 days after

  • In some cases, we may retain personal information or personal health information for longer periods of time, for example, where legal, tax, and accounting requirements set by government or industry authorities require us to do so.

What happens if a client returns to care after a break?

  • If a client returns within 60 days of pausing care, their between-session data is still available, ensuring their experience picks up where it left off.

  • If a client returns after 60 days, their between-session data is no longer available, but medical record data remains accessible.

Is between-session data part of the medical record? No. Between-session data is not automatically part of the formal medical record. Clinical documentation, such as approved session insights and provider session notes, remains separate and is retained in accordance with standard healthcare regulations. If providers choose to add details about between-session activity to their notes, that information would become part of the medical record.

Did this answer your question?