INTERSESH | PASSPORT SHARE AUTHORIZATION

Share your between-session history with a named practice

You are choosing whether to allow the receiving practice identified by name in your InterSesh consent review to connect to your InterSesh Passport. The source practice is also identified by name in that review. This is a voluntary, recipient-specific choice. It is not general permission for every clinician or practice and does not replace treatment consent.

What the receiving practice may access

A Passport connection currently adds an active receiving-practice connection and clinician assignment. It does not create a separate export of individual records or let you select particular dates, entries, or categories. While the connection remains active, authorized staff at the receiving practice may view eligible client-level information through the ordinary InterSesh access controls. Depending on the records that exist, these views can include:

• Your profile and identifying information needed to connect you to the receiving practice.
• Client-reported check-in responses, including responses and reported mood information.
• Client-authored journal entries designated as portable.
• Goals, homework and between-session commitments, including reported progress, follow-through, barriers, events and revisions.
• Related client-level evidence used to prepare summaries. A clinician must independently assess whether a generated summary is accurate and clinically appropriate.

This connection is not necessarily read-only. A properly authorized connected clinician may create, edit or delete eligible portable goals/homework, change shared Agreements and add or correct follow-through events. Those changes may be visible in other authorized connections.

Some of these records may have been created before this Passport connection or while working with another practice. A connection is not limited to records created by the named source practice unless the application implements and verifies such a restriction. Clinician-authored private notes, the source practice's treatment plans and its practice-scoped private summaries are not automatically copied as Passport records. The receiving practice may create and retain its own treatment plans and notes.

Who receives it and how long access lasts

Only the named receiving practice, and its appropriately authorized clinicians or clinical team, should be able to use that connection under the application's role, membership and assignment checks and applicable practice agreements. The share link normally expires seven days after it is created. Its actual expiration date and time are shown in your consent review. Link expiry limits initial redemption and does not by itself end an already established practice connection. You can revoke ongoing connection access through Passport controls. A different receiving practice or a new share requires a new recipient-specific authorization.

Revocation does not recall, erase, or necessarily require deletion of information the receiving practice previously viewed, documented or lawfully retained. Contact the relevant practice or submit an appropriate privacy request for questions about retained records.

Where information may be processed

The main InterSesh application/database are hosted in Google's Toronto region. Automated Cloud SQL backups currently remain in the US multi-region, and some necessary account, support, authentication or service-provider processing may occur outside Canada. The receiving practice may operate under different provincial, state or national professional and privacy rules. See the App Privacy Policy and the receiving practice's own information. Cross-jurisdiction transfers require independently approved scope; merely crossing a border does not automatically make sharing impermissible.

No crisis monitoring

InterSesh is not an emergency or crisis monitoring or alert service. Client entries do not guarantee prompt clinician review. Use your clinician's established emergency arrangements or appropriate local emergency services if you need urgent assistance.

Make four separate choices

• [ ] Sharing scope and activity: I understand that the named receiving practice may have ongoing access to eligible client-level Passport history, including information from before this connection. I cannot currently select individual entries, categories or dates for the share. Authorized clinicians may also make changes to eligible portable records that other connected practices can later see. Private clinician notes are not automatically copied.
• [ ] Revocation: I understand I may stop ongoing access, but information already obtained may be retained where lawful.
• [ ] Emergency limitations: I understand InterSesh does not provide real-time crisis monitoring or automatic clinician alerts.
• [ ] Voluntary choice: I voluntarily authorize this specific receiving practice, and I understand this does not consent to treatment.