The short version
LogBlues keeps your patient records on the computers in your practice. We do not receive them, store them, or have any way to read them. That is not a promise about how we behave; it is how the software is built.
The information we do hold is small and ordinary: an email address if you write to us or start a free trial, and the technical minimum needed to send you a sign-in code. We do not sell anything about you or your patients, to anyone, ever.
1. Who we are
LogBlues LLC, a United States company, makes LogBlues (practice management software for clinics) and Just Progress (a healthy-ageing habit app).
This policy covers LogBlues. Just Progress works differently enough — everything stays on the phone, there is no account and no server — that describing both in one document made each of them less clear. It has its own policy.
You can reach us through the contact form or, for privacy questions specifically, choose its privacy topic.
2. Where patient information lives
LogBlues is local-first. Patient records, clinical notes, documents, images, schedules and billing information are created and stored on the machines in your practice. Nothing in normal use transmits them to LogBlues.
This means we cannot produce your patient data on request, because we do not have it. It also means the responsibility for backups and for the physical security of those machines sits with your practice. The software includes an encrypted export and a restore preview to help; automatic cloud backup is not connected yet.
3. What we actually collect
- Contact details you give us. Your name and email if you write to us, start a free trial, or ask for a Business Associate Agreement. We keep these to answer you and to tell you about the product.
- Sign-in and security codes. When LogBlues sends a one-time code to unlock a protected screen, that email is delivered through our email provider to the address you gave. The message contains a code and no patient information.
- Support information. If you send us a problem report, we receive whatever you choose to include. Please do not include patient information; we ask you to describe the behaviour rather than send a record.
On the website itself. There is one form: the trial signup, which asks for an email address so we can send you the download link. That address is used to send the link, and afterwards to send occasional notes about the product. It is never sold, rented, or shared with an advertiser, and every message carries an unsubscribe link that works. Nothing else on the site collects anything — no analytics script, no advertising pixel, and no cookie banner, because there are no cookies to consent to.
Blues on this website. The assistant in the corner runs entirely inside your browser. What you type to it is matched against answers already downloaded with the page; no request is made, nothing is transmitted to us, and no record of the conversation exists anywhere once you close the tab.
If any of that changes, this page changes first.
4. The assistant
Blues, the assistant inside LogBlues, runs on a model on your own machine. What you type to it stays on that machine. Conversations are stored locally and are yours to keep or clear.
Your data is never used to train an AI model, by us or by anyone else. There is no mechanism by which it could be, because nothing leaves the device. There is nothing to opt out of.
5. What we never do
- We do not sell patient data, or any other data, at any price.
- We do not share data with advertisers, ad networks, or data brokers.
- We do not use patient information for targeted or cross-context behavioural advertising.
- We do not profile users or use data to manipulate behaviour, and the app contains no third-party trackers, advertising SDKs or behavioural telemetry.
- We do not claim a licence over your practice’s records, and we do not retain a de-identified copy after you leave.
5A. Biometrics, under Illinois law
We do not capture, collect, store, buy or trade biometric identifiers or biometric information, and none ever reaches us. If you choose to verify with Windows Hello or a device biometric, the match happens entirely inside your operating system on your own device; the app receives a yes-or-no answer and never the fingerprint or face data itself. We do not collect genetic information either. This is written with the Illinois Biometric Information Privacy Act in mind, because that is where we live too.
5B. Visit recordings and transcripts
If your practice uses visit recording, the audio is written to your own machine and never transmitted to us. If you install a local speech-recognition runtime, transcription also happens on your machine — the audio is not sent to us or anyone else for it. Recording will not start for a patient who has not consented in the app, consent can be withdrawn at any time, and recordings delete themselves automatically after your practice’s retention period, which can be adjusted but not switched off. When audio is deleted, the chart keeps a note that a recording existed and when it was disposed of.
6. Cloud sync, when you choose it
Cloud sync is not available with the current build. When a practice switches it on, the design is already fixed: the app talks to an authenticated LogBlues API, which talks to Amazon Aurora PostgreSQL for records and Amazon S3 for documents, with separation between practices enforced at the row level inside the database. The application never holds database credentials or storage keys.
At that point LogBlues would be processing patient information on your behalf, which changes our role and our obligations. We will publish an updated policy, and put the relevant agreements in place, before sync is enabled for anyone.
7. HIPAA and Business Associate Agreements
Where LogBlues creates, receives, maintains or transmits protected health information on behalf of a covered entity, a Business Associate Agreement is appropriate. We will sign one on request, at no charge. Ask through the contact form.
LogBlues is HIPAA-ready from day one. We do not claim that the software by itself makes your practice compliant. Compliance depends on your policies, your training, your agreements and how your staff work. No software can hand it to you, and any vendor saying otherwise is overselling.
8. Your choices and rights
Because your records are on your own machines, most access, correction, export and deletion happens inside the software rather than by asking us. Export is built in, free, and does not require our involvement.
For the contact information we do hold, you may ask us to show it to you, correct it, or delete it. Write to us through the privacy contact form and we will respond. If you are in a jurisdiction with specific statutory privacy rights, we will honour them; tell us which ones apply and we will not make you fight for them.
Patients asking a practice for their records should ask the practice, not us. The practice can produce a record the same day from the chart itself.
9. Just Progress
Just Progress is a separate product with a separate policy, because it is built on a different premise: everything it holds stays in the phone's own storage, there is no account to create and nothing is sent to a server.
Read it at Just Progress privacy, which is the policy submitted to Google Play and the one that describes what the app reads from Health Connect.
10. Children
Neither product is directed at children. LogBlues is professional software for clinic staff. A clinic may of course hold records for patients of any age; those records are the practice’s, held on the practice’s machines, and are governed by the practice’s own obligations.
11. Changes
If we change this policy in a way that matters, we will change the date at the top and say what changed. We will not quietly broaden what we collect.