Skip to content
Keystone Practice
Privacy

What we collect, and what we never do.

Short version: Keystone works from your practice’s financial numbers, never anything clinical. And in the free Snapshot, nothing leaves your browser at all.

This page is written to be read: it’s both the summary and the policy. If how we handle your information changes, we’ll update it here and move the date below. Questions? Email support@keystonepractice.co.

The free Snapshot

What you type into the free Snapshot stays in your browser. We don’t upload it, store it, or see it, and you don’t create an account to use it. Close the tab and it’s gone.

No patient data, ever

Keystone has no field for patient names, notes, diagnoses, or anything clinical, by design. We only ask for the financial side: aggregated revenue and hours, how clinicians are paid, and overhead. We do not collect protected health information (PHI).

When you save a full Snapshot

To save a Snapshot you create an account, and we then store the financial numbers you entered plus the basics needed to run an account (your email). That data is isolated per practice, built so no other account can read it. We don’t sell your data, and we don’t share it except with the service providers that run the product: Clerk (sign-in), Vercel (hosting), Supabase (our database), and Stripe (the one-time payment). Each only ever handles the slice its job needs.

We also keep anonymous, aggregate statistics from saved Snapshots: a practice-size band and a few financial ratios only, never names, dollar amounts, or anything that could identify your practice. That way, over time we can show owners how their numbers compare to practices like theirs.

Your controls

A shared Snapshot is a private link only you can hand out, or revoke. You can ask us to delete your saved data at any time. To make a request or ask a question, email support@keystonepractice.co.

Changes

If we change how we handle your information, we’ll update this page and move the effective date. For the technical detail on isolation and access, see our Security & Trust page.

Effective date: July 10, 2026.