Your data
Therapist workspaces are designed around account-based access, protected routes and Row Level Security so records are scoped to the right workspace.
Security & Trust
Nature Therapy Hub handles sensitive professional workflows. This page explains, in plain English, how the platform approaches security, privacy and responsible development.
Step 1
Authenticate
Step 2
Access workspace
Step 3
Work with records
Step 4
Export or request deletion
What this means in practice
These controls are designed to support therapists without making the platform feel heavy or technical.
Therapist workspaces are designed around account-based access, protected routes and Row Level Security so records are scoped to the right workspace.
The platform includes data export, account deletion requests, retention review controls and privacy-focused wording to support responsible practice.
Nature Therapy Hub is served over HTTPS in production. Data is stored using Supabase infrastructure, with database and platform security controls layered together.
Client portal access is invite-based. Portal sessions are scoped to the intended client and therapist, and therapist-only notes are not exposed to clients.
Uploaded files use a private Supabase Storage bucket. Client-shared files are opened through short-lived signed links after access checks.
Important workspace actions are recorded in audit logs so therapists have a clearer trail of changes and activity.
Therapists can export their own workspace records for portability and backup. File exports currently include metadata rather than raw stored files.
Therapists can request account deletion from Settings. Requests are reviewed before action is taken so retention, safeguarding and data protection responsibilities can be considered.
Nature Therapy Hub is built with UK and European practitioners in mind, including Supabase EU hosting notes and clear operational documentation.
Responsible development
Nature Therapy Hub is developed with the practical realities of outdoor therapy in mind: confidentiality, client consent, risk, safety, professional records and clear boundaries between therapist, client and public areas.
Security and GDPR readiness are reviewed as the platform grows. We avoid overclaiming certifications or guarantees, and we keep improving controls before adding larger public workflows.
Read the DPA