Last updated 15 July 2026 · pilot draft
Your account details (name, email address, professional body and optional member number), your training ledger (session dates, durations, modalities, optional therapeutic approach), supervision records, sign-off attestations, amendments, countersigned circumstances notes, documents you upload to your vault, invoices supervisors create, and an audit trail of actions taken in the app. Data is stored in the United Kingdom/EEA region (Supabase, London) and encrypted at rest and in transit.
Client sessions are recorded against short pseudonymous codes. The ledger deliberately has no free-text fields, so names or identifying details of clients cannot be stored. Circumstances notes are about your own circumstances and the app instructs you never to include client details.
Your supervisor sees the months you submit to them, your compliance standing, and notes you ask them to countersign. Nobody else sees your ledger. Documents in your vault are private to you. There is no advertising, no analytics resale, and your data is never shared with third parties except the infrastructure providers that run the service.
You can export everything we hold about you from Settings as JSON, plus audit-ready PDF and CSV exports, at any time. You can delete your account yourself from Settings. If you have signed months as a supervisor, your typed attestation name remains on those trainees' records as part of their professional evidence; everything else about you is erased or anonymised.
When a supervisor signs a month it becomes immutable, and a SHA-256 fingerprint of its content is stored so tampering is detectable. Amendments to signed months are recorded separately and visibly; the original record never changes.
Lantern is registered with the Information Commissioner's Office, registration number 00014826466. Questions and data requests: hello@my-lantern.app. See also the terms of service.