An Online Therapy App That Protects Client Confidentiality

A client calls to ask what time their session is, and you are in the middle of one. The next day, asking a no-show to pay turns into an awkward conversation. Session notes live in a notebook, payments in a separate account, appointments scattered across WhatsApp. The confidentiality guarded so carefully inside the therapy room is not guarded with the same care in the records and the booking process.

How many separate apps does this need?

  • 01

    Client mobile app (iOS + Android)

    Slot selection, intake form, joining the video session, reading and signing the consent form, payment, between-session homework tracking and an emergency referral screen for moments of crisis.

  • 02

    Therapist app

    Calendar and availability management, starting sessions, quick note-taking during a session, the client file and a summary of past sessions, cancellation decisions and anonymised case notes shared for supervision.

  • 03

    Clinic management panel (web)

    Therapist roster and specialty matching, occupancy and open-slot reporting, payout calculation, cancellation and no-show policy settings, consent form versioning and file access logs.

What the app includes

  • Intake form with therapist matching questionnaire
  • Free 15-minute introductory call slot
  • 50-minute session plus 10-minute buffer calendar block
  • Session package balance with expiry tracking
  • Between-session homework: thought records and breathing exercises
  • Sending assessment scales and charting scores across sessions
  • Parental consent for adolescents with a limited parent-facing view
  • Separate join link for the second participant in couples and family sessions
  • Pre-session camera, microphone and headphone check screen
  • App lock with PIN or biometrics and notification previews disabled
  • Instant waitlist alert when a slot frees up
  • Automatic split of therapist share and clinic share per session

State of the sector

Clients now start looking for a therapist through search and app store listings rather than word of mouth. Large online therapy platforms take the client into their own pool, charge commission per session and keep the client's contact details from the therapist; when a therapist leaves the platform, they lose their client base. A clinic without its own app is effectively renting out the trust it built to a middleman. And when booking and cancellation run over WhatsApp, freed-up hours never get refilled — which turns directly into lost revenue in the session calendar.

Metrics that matter here

  • No-show and late cancellation rate — Pre-authorised payments and automatic reminders directly reduce the hours wasted on clients who do not turn up
  • First-to-second session conversion rate — Easy rebooking, homework tracking and continuity with the same therapist keep clients from dropping out of the process
  • Therapist calendar occupancy rate — Opening a freed-up slot to the waiting list immediately produces more sessions from the same roster
  • Average number of sessions per client — Package sales and contact between sessions markedly reduce the chance of therapy being cut short

Common mistakes in this sector

  • Leaving sessions to a general-purpose conferencing tool Most free video call tools do not configure recording, screen sharing and waiting room settings in the client's favour. Bringing the session inside your own app keeps confidentiality, duration and fee tracking in one place.
  • Publishing the consent form once and forgetting it Consent text changes over time, and if you cannot prove which client approved which version, the text is worthless. Consent must be versioned, with the approval date and version number written into the client file.
  • Giving every staff member the same permissions Reception needs to see appointments, not session notes. In a system built with a single role definition, when a staff member leaves you cannot tell which files they accessed. Role separation and access logging must be in place from day one.
  • Putting the client's topic in the notification text A lock-screen notification reading “your therapy session starts in 1 hour” exposes confidential information if the phone ends up in someone else's hands. Notifications must be neutral, with details visible only after the app is opened.

Regulation and compliance

Mental health data counts as special-category personal data under KVKK (Turkey's data protection law, aligned with GDPR); processing it requires explicit consent and additional security measures. Encryption, role-based access, access logging, and retention and deletion periods therefore have to be defined from the start. The privacy notice and explicit consent must be collected separately within the app, and both must be versioned. Psychologists cannot prescribe and diagnosis is a physician's authority; app content and marketing copy must not carry claims that cross this line. Session fees are subject to the obligation to issue e-Arşiv invoices under Turkey's e-invoicing rules.

The real challenges in this sector

  • Proving the session is not being recorded anywhere

    The client's first question is “is this being recorded?” The video layer is built end-to-end encrypted, the server-side recording module is switched off entirely, and screenshots are blocked on the session screen. The server keeps only the session's start time, end time and duration; the media stream is never written to disk. The client sees this stated on screen as the session begins.

  • Separate confidentiality levels for session notes and accounting records

    A therapist's note and the billable session record are not the same thing. Note content is encrypted with a per-therapist key; reception and accounting roles see only the date, duration and fee fields. Even the clinic owner cannot open the note text, only whether a note was entered. Every access attempt is logged with who and when.

  • Not dropping mid-session on a weak connection

    Clients usually connect from home on mobile data, and a cut in the middle of a conversation is a real rupture in the therapeutic relationship. When bandwidth drops, the call automatically falls back to audio only, with reconnection logic that returns the client to the same room within 30 seconds. Lost time is deducted from the session timer and shown on the therapist's screen.

  • Crisis signals and the emergency referral flow

    A client may write a message implying risk outside session hours. In-app messaging is deliberately not left open; a fixed emergency button opens 112 (Turkey's emergency line) and free crisis helplines with one tap, and sends the therapist an instant notification. Every screen states in writing that messages are not monitored 24/7 and that the app is not a channel for emergencies.

  • Collecting for no-shows and late cancellations without the awkward conversation

    The appointment policy is built into the app as a rule: free cancellation up to a set time, a defined deduction after that. Payment is pre-authorised and held at the moment of booking, captured when the session takes place, and released on a timely cancellation. The therapist never has to chase individual payments; only the clinic manager can grant exceptions.

Required integrations

  • Pre-authorisation, partial refunds and session-package payments via iyzico or PayTR (Turkish payment providers)
  • Bookkeeping integration compliant with GİB (Turkish Revenue Administration) for issuing e-Arşiv invoices (Turkey's e-invoicing system for individual customers)
  • WebRTC-based video infrastructure with server-side recording disabled
  • Google Calendar / iCal sync so the therapist's private schedule is checked for conflicts
  • SMS and push reminders with privacy-safe wording that contains no client name or topic
  • Per-organisation session entitlement tracking for private health insurance or corporate employee assistance programmes

Who this page is for

  • Psychologist working alone in their own practice

    Roster, revenue split and matching modules are unnecessary. A client app, video sessions, pre-authorised payment and a simple calendar panel suffice; no separate therapist app is built, and both scope and timeline shrink noticeably.

  • Newly opened regional counselling centre with several therapists

    The weight is on role separation and utilisation: reception must not see session notes, matching by specialisation, revenue split, room and slot conflict control. In-person and online sessions must share one calendar from the start.

  • Counselling centre focused on children and adolescents

    The parent opens the account, the child attends the session. Parental consent, a limited parent-facing view, the adolescent's privacy boundary, a separate appointment type for school meetings and notifying two parents separately move to the centre of the scope.

A phased plan that splits the budget

  1. 1

    Phase 1 — End-to-end session flow for a single therapist 5-7 hafta

    Delivers the availability calendar, intake form, digital consent, video session, pre-authorised payment and the cancellation rule. A solo therapist can already book, run and get paid for sessions; nothing from the clinic modules is required. This chain comes first because it is the only one that produces revenue.

  2. 2

    Phase 2 — Client file, roles and therapist roster 4-6 hafta

    Adds encrypted session notes, scale delivery with score history, homework tracking, role-based access with an access log, therapist roster, specialisation matching and revenue split. This layer is designed correctly only after the session flow has settled with real clients, when note templates and role boundaries become clear.

  3. 3

    Phase 3 — Utilisation, packages and institutional channels 4-6 hafta

    Brings session packages and balances, a waitlist with free-slot alerts, parental consent for adolescents, a second join link for couples and family sessions, employee assistance programme entitlements and utilisation reports. These modules only pay off once a steady session volume exists; built earlier they stay empty screens.

Typical scope and timeline

Client app, therapist app and clinic panel; video session infrastructure, pre-authorised payments and cancellation policy, digital consent with versioning, encrypted session notes, privacy-safe reminders, role-based access and access logging. For solo-therapist setups the scope narrows and the timeline shortens.

Estimated timeline: 10-16 weeks

Off-the-shelf or custom build?

Topic Off-the-shelf Custom build
Fast start and upfront cost A ready booking-and-video package lets you take sessions within the same week, with low upfront cost and often more than enough for a solo practice. Custom development takes weeks and needs budget upfront; in return you run on your own brand and workflow from the first phase.
Per-session commission and client ownership On platform-style solutions the client is usually registered to the platform and a commission is taken per session, even for clients you brought yourself. In your own app the client record, contact details and session history stay with you; there is no intermediary cut per session, though payment-provider fees remain.
Sector-specific workflow General booking software is mature on scheduling and pricing, but consent versioning, parental consent for adolescents, anonymised case summaries for supervision and therapist-level note encryption are usually missing. These flows are built in as rules; note templates, role boundaries and the cancellation policy are defined to match how the practice actually works.
Data location, access logs and portability Server location and retention follow the provider's policy; when you leave you usually get a flat export, without file integrity or access history. Servers are placed in Turkey, retention and deletion periods are defined under KVKK (Turkey's personal data protection law), every file access is logged, and the data remains yours at all times.

Sector glossary

Setting (therapeutic frame)
The unchanging frame of therapy: same day, same hour, same duration, same fee. In the app this means offering a fixed recurring slot and closing the session automatically at its set length.
Intake session
The introductory information-gathering meeting before therapy begins. In the app it needs its own duration, its own fee and its own form set, and its answers drive therapist matching.
Supervision
A therapist discussing a case with a more senior colleague. In the app it requires sharing a case summary with the client's identity masked; the raw session note is never opened to the supervisor.
Therapeutic alliance
The working bond between client and therapist. Its software counterpart is continuity: booking with the same therapist, a connection that does not drop, and contact points between sessions.
Assessment battery
A standard set of questionnaires applied at intervals. The app sends them on schedule, scores them automatically and shows the change between sessions as a curve on the therapist's screen.

Frequently asked questions

Let us talk about your project

A free 30-minute call to scope it out, then an itemised quote within 48 hours.

Get a Free Quote

This page explains the problems an app must solve in this sector. We share references and comparable projects during the call.

Other sectors

All sectors →