Mac · iPhone · iPad · Windows
Therafolio.Your clients' records stay with you.
Client files, session notes and an appointment calendar for therapists in private practice. Everything it writes is a plain Markdown file in a folder you choose. There is no server, no account and no database held by us. The AI runs on your computer.
Screenshots
The main screens, added with the beta
- Today
- Client file
- Session note
- Calendar
The problem
Practice software keeps your clients' records on its own servers
Records today sit in Word files in a folder, in a notebook, or in a subscription cloud system. Every cloud system we found holds the records in its own database, behind an account. A breach at the provider exposes them, and a cancelled subscription can cut off records you are required to keep for years.
In a cloud system, the record lives in the vendor's database
Reading it depends on the account, the subscription and the company, for the whole retention period.
In Therafolio, the record is a file in your folder
Every client file, session and appointment is a Markdown file in a folder you pick: local, or in iCloud Drive, Dropbox or OneDrive. The folder opens in Obsidian and stays readable without the app.
The cost of having no server: no receipts, no SMS reminders and no online booking. The list is further down this page.
Features
The client file, session notes, the calendar and the official record
Client file
The treatment frame: session length, fee, cancellation policy, recurring slot. Also ICD‑10 diagnosis, funder with authorised sessions, referral source and guardians for minors.
Session notes by template
SOAP, narrative or any template you write as a Markdown file. Each client has a default template.
Process notes kept apart
Personal notes live in a separate folder and are never included in the exported official record.
Today and calendar
Appointments, recurring series, working hours and conflict detection. An appointment and its session note are one item, not two.
Device calendar sync
Through the calendars already on the device, so Google Calendar works with no sign-in and no token. Export to .ics as well.
Official record as PDF
Hebrew right-to-left typeset correctly, built from an allow-list of what belongs in the record.
Risk and measures
Dated risk assessments that flag the client file. Questionnaires tracked over time, per each instrument's licence.
App lock
Passcode, Touch ID, Face ID or Windows Hello, with automatic lock. On iPhone the app-switcher preview is blurred.
Sync conflicts surfaced
When two devices edit the same file, both versions are shown rather than one silently overwriting the other.
Plain files
Records that outlive the app
No vendor database
The records never reach a server of ours, because there is none. There is nothing at our end to breach, subpoena or lose in a shutdown.
Readable in ten years, without us
Plain Markdown files open in any text editor or in Obsidian. Leaving needs no export.
Your own storage, any sync
The folder can sit in iCloud Drive, Dropbox, OneDrive or on one machine only. The app neither provides sync nor requires it.
The AI default sends nothing
The on-device model works offline once downloaded. Network use is limited to that one download, and to Claude if you enter a key. The direct downloads also check for updates, with no client data. No telemetry, no analytics, no crash reporting.
AI
AI that runs on your computer
Every Israeli competitor we found that offers AI runs it on its servers. Here, in the desktop app, the default model runs on your own Mac or Windows PC. Four tasks: session preparation, a periodic summary, professional wording of a rough note, and a dictation transcript turned into a draft.
On-device model, in the desktop app
Gemma 4 runs inside the app on your computer. The model file (3.3 or 5.2 GB) is downloaded once and checked against its SHA‑256. After that no clinical text leaves the computer. Available on Mac and Windows; not on iPhone or iPad.
Claude, optional, with your own key
Before anything is sent, names, ID numbers and contact details from the client file are replaced. You see exactly what will be sent, and the client's consent date must be recorded. The request goes from your device straight to Anthropic; nothing passes through us.
Every AI result is a draft
You accept or discard it; nothing is written into the record on its own. An audit log records when, which client, which file versions, which model and how many tokens, never the content.
Psychologists in Israel: the Israel Psychological Association's ethics guidelines on AI (23.3.26) forbid entering client information into public commercial AI tools, Claude included, even with identifying details changed. Replacing names does not change that. Use the on-device model. The guidelines (PDF, Hebrew)
Protection
The app does not encrypt your files. This is what protects them.
The records are plain Markdown on purpose, so they open in any editor and stay readable after the app is gone. Encryption inside the app would add a failure with no way back: a forgotten password would lose every record, backups included.
The app lock
Passcode, Touch ID, Face ID or Windows Hello. It guards the app, not the files on the disk.
Your device's encryption
FileVault on the Mac, BitLocker on Windows, the built-in encryption of iPhone and iPad. This is the main protection, and switching it on is yours to do.
Your sync provider's encryption
If the folder sits in iCloud Drive, Dropbox or OneDrive, that provider encrypts its copy. Folder names are coded (c-0042), so a client's name does not appear in Finder or in the provider's file list.
What the app stores, where, and what it never sends, is in the privacy policy.
Limits
What Therafolio does not do
Every practice system we compared in Israel has receipts and SMS. This one has neither, by design.
No receipts or invoices
There is no link to invoicing software either.
No SMS reminders and no online booking
Both need a server, and there is none.
Download
App Store, Mac App Store, and direct downloads for Mac and Windows
The beta is free. None of the four is open yet; each one is linked here when it opens.
-
iPhone and iPad
From the App Store.
Free beta · coming soon -
Mac App Store
From the Mac App Store.
Free beta · coming soon -
Mac, direct download
A notarized DMG from this site, with automatic updates.
Free beta · coming soon -
Windows
An installer from this site, with automatic updates.
The installer is not code-signed yet, so Windows SmartScreen warns the first time it runs.
Free beta · coming soon
Interface in Hebrew, English, Spanish and French.