What stays private
Journal opt-in, family exclusions, and data the dashboard does not expose.
Even with consent granted, some things are deliberately kept private from you. Being plain about this builds trust with your patients and saves you from looking for data that does not exist. Here is exactly what stays off-limits.
The journal needs a separate opt-in
The journal is private by default. Ordinary care-data consent does not give you access. You can ask through Customizations → Ask to share journal, but the patient must turn on share my journal with my care team in their own app.
Once they opt in and sync, shared entries appear under Patient's Notes in Clinical Notes for authorized clinicians. Turning sharing off removes the shared copy when the change syncs. Family access never includes journal entries.
The optional Reflect with Pippa action separately sends entry text to generate an AI reflection. It is not an on-device-only operation and does not itself turn on journal sharing. See Journaling and optional sharing.
The reasons behind coins and streaks
Pippa's pet, coins, and streaks are motivational, not clinical. You will not find an explanation of why a specific reward was given or exactly how a coin total was reached.
- Coin amounts are opaque on purpose. The app never tells the patient (or you) the precise formula behind an award. Making rewards legible invites the kind of score-keeping that is unsafe for eating-disorder recovery.
- Streaks are soft. They are designed to forgive missed days and rest days rather than punish them, so a streak number is not a measure of adherence you should read into.
You do see meal-logging behavior, adherence, weight trend, measures, and chat content once consent is granted. Those are the clinical signals. The gamification layer is there to keep patients engaged, not to be a clinical readout.
Things that are never collected at all
Some data simply never exists to be shown:
- No face or biometric processing. Meal photos are never run through face recognition or any biometric analysis.
- Location is stripped. Photos have their EXIF and GPS data removed before upload, so no location trail is attached to a meal.
If a patient asks what you can see, this page is a good answer: their care data once they consent, journal entries only with separate opt-in, and no detailed reward mechanics.