Privacy & support.

No clinical uploads. No cloud archive. No training on your session.

SessionShield brings the AI to your device. Your conversation does not need to travel to our servers to become a note.

What stays on your device

The browser workspace processes recordings, imported audio, transcripts, notes and follow-up prompts locally. These clinical contents are not submitted to our account service, Stripe, or a remote AI provider. The deployed service has no clinical audio upload, transcription, or note-generation endpoint.

Clinical text and audio remain in tab memory, not your account database or persistent browser storage. Closing or clearing the workspace can lose unsaved work. Copying or saving creates your own copies. The app is not your clinical record or an archive.

What goes online

Page requests contact the site host. Account sign-in sends your account email, and account actions send access and billing requests. Stripe processes subscription payments and associated billing information. Account records contain email, account IDs, trial dates, payment-service references, access status and terms acceptance, which includes confirmation of California launch eligibility. We also retain the monthly subscription offer, affirmative-consent date and version, and delivery status of required billing notices. Subscription metadata also identifies the launch region. We do not collect a device location to verify eligibility.

Local AI setup downloads model assets from Hugging Face and runtime assets from approved hosts. These hosts receive ordinary request metadata such as an IP address. Model assets and application code are cached in browser storage. Signed account-access metadata and a setup-ready flag are saved alongside them. Setup requests download assets; they do not include encounter content. Clinical AI processing is enabled only after setup and access checks succeed.

During an encounter

Once setup and access checks finish, the app blocks its own network transports for clinical processing. Inference runs in a dedicated worker with downloads disabled after warm-up. There is no cloud fallback, analytics, advertising tracker, remote font, session replay or automatic clinical-error reporting in the workspace.

These controls do not prevent unsafe browser extensions, a compromised device, operating-system services, screenshots, crash dumps, clipboard copies, downloads or backups. They do not establish OS-level isolation or certified erasure. You must secure the device and review your practice’s requirements.

Access and retention

Paid access can be verified offline for up to seven days, capped by the paid-through date. Trial access ends on its trial date. Model caches can be removed by clearing site data, but that also removes saved access metadata and requires setup again. Clearing an encounter does not erase saved files or model caches.

Sign-in codes expire after ten minutes and sessions after thirty days. Expired records are removed on the corresponding account actions; expiry is not a promise of immediate deletion. The seller policy retains billing and consent evidence for seven years after a subscription ends, or longer under a documented legal hold. Account-deletion requests are reviewed within thirty days; records still required for those obligations are retained. The seller approved these operating policies on October 12, 2026.

Questions and account requests

Seller and contact details will appear after launch configuration. Do not send patient information to support.

We do not collect or sell your clinical content, or use it to train or improve any AI model. Clinical processing uses the downloaded models locally; your session does not update their model weights. Changes to how data is handled require updating this notice and the product’s safeguards before release.

Service and seller

SessionShield is offered by Alexander Emile Marshi. AI4U is the brand used for this service.

Terms version: 2026-10-12-v4. Seller-approved October 12, 2026. These terms do not certify legal or clinical compliance. The service is intended for appropriately qualified clinicians documenting their own work, subject to their professional and practice requirements.

California launch

The initial launch is limited to appropriately qualified clinicians based in California, United States. Trials and subscriptions require your confirmation of this service location. This declaration does not verify licensure or the location of any patient, or authorize practice in any jurisdiction.

Trial and subscription

A fourteen-day trial has no payment card requirement and does not automatically become paid. It begins when you explicitly start it after device setup. After the trial, a subscription is a separate choice at $19 USD per month, billed and renewing monthly until canceled. Any applicable tax is shown at checkout. Do not subscribe if your device fails setup.

You can cancel future renewals in the billing portal linked from your account. Access continues through the paid period. You may request a refund within fourteen days of the first subscription payment; renewal payments are not automatically refunded. Statutory rights remain unaffected. Email support to request a refund or if online cancellation is unavailable.

Clinical responsibility

SessionShield produces drafts and may make factual errors, omit details, confuse speakers, or misplace content. It is not a provider or clinical supervisor. Verify the source and every final statement; resolve conflicts, document risk and clinical decisions, satisfy supervision requirements, and retain and sign records in your normal clinical system.

Obtain and document appropriate recording consent and AI disclosures. Do not use the service to fabricate symptoms, findings, diagnoses, consent, duration, billing support, risk assessment or clinical actions. A note does not establish compliance, medical necessity, reimbursement or an audit outcome.

Local processing and availability

Browser support, hardware, memory, storage, cache eviction and model performance vary. Setup downloads model files; clinical processing runs on the device after setup. Access and billing checks use the account service. The software does not promise an isolated operating system, secure memory destruction, continuous availability or error-free drafts.

Protect your computer and browser. Do not enter clinical information in account forms, payment forms or support messages. Keep required records independently. Avoid closing an encounter until you have copied any reviewed note you need.

Limits and fair use

Browser recordings/imports are limited to one hour and 150 MB. Note-source requests are limited to 120 KB including follow-up instructions and edits, and 2048 source excerpts. Long sources are organized in bounded local batches. Oversized passages are rejected rather than silently truncated. A subscription is for one clinician’s personal professional use; do not share account codes or circumvent access controls.

Changes, disputes and mandatory rights

Material changes to price or service terms require notice before they apply. Existing paid periods are honored. Neither these terms nor a clinical disclaimer waives mandatory consumer rights or responsibility for the seller’s own conduct. These terms do not waive responsibility for the seller’s own conduct or guarantee availability, accuracy, reimbursement or compliance.

Contact details are pending configuration.

Start here

• The initial beta supports Apple Silicon Macs using Chrome, with WebGPU and sufficient storage. Windows and Safari remain unsupported until tested. Setup checks capabilities before clinical input is accepted.
• Keep the setup tab open during the one-time model download. An interrupted download can be retried using cached assets.
• If microphone access is unavailable, import a supported audio file or type a dictation.
• For a failed transcription, keep the tab open and use Retry or Save audio.
• For an invalid draft, your prior text stays in place. Check the source, shorten it if needed, and try again.
• For payment access, return to Account and refresh payment status. Do not pay twice to fix access.

Billing and cancellation

Open your account and choose Manage billing & cancel to stop future renewals, update payment details or access invoices. The trial does not automatically charge you. Support can review eligible refund requests without any clinical information.

Contact support

Account, privacy and billing questions: alex@alexmarshi.com. Never send patient information.

Include the browser and OS version, the step that failed, and the displayed generic error. Never include recordings, transcripts, notes, patient names, screenshots containing clinical text or payment-card data.

Support coverage

Alexander Emile Marshi handles support at alex@alexmarshi.com. The inbox is checked on California business days, with a target response within two business days. This is not emergency or clinical-care support.

Mac app beta

This app includes the workspace and its browser runtime. It uses the same on-device models as the browser product, requires compatible WebGPU hardware, and downloads the models once. Account and billing services still require internet access. This is a preview; paid access remains closed.