BlueNote
All articles

September 14, 2026 · 4 min read

Update 0.2

Technical patch notes for BlueNote Update 0.2: session hosting, booking and calendar fixes, payments, notes, security hardening, six languages and new legal disclosures.

Update 0.2 collects a week of work on BlueNote. Most of it is invisible in the best way: sessions that start on the first click, emails that arrive in the right language, and a practice that keeps running while we improve the parts underneath it.

Here is everything that shipped.

Sessions and video

  • Therapists now join their own room with host rights automatically. No second login, no waiting for someone else to start the call.
  • Rooms are created privately per booking, with short-lived access tokens issued at join time rather than shared links that stay valid forever.
  • The in-call layout was rebuilt so tiles fit properly on phones and laptops, and third-party branding was removed from the meeting screen.
  • Camera and microphone permission prompts now fire correctly on iOS, which previously failed silently on some devices.
  • Recording is available on the higher tier, retained for a year, and never deleted automatically.

Bookings, clients and the calendar

  • Booking links go live the moment a therapist signs up. An empty schedule shows a clear message instead of a broken page.
  • The booking page shows the therapist's real name rather than a generic label, and the client's name is prefilled where we already know it.
  • Confirmation emails now include an add-to-calendar action for both the client and the therapist, titled with the therapist's name.
  • Clients choose a preferred language when they book. Their confirmation arrives in that language, and the therapist can see which language the client chose.
  • A client record can now be deleted permanently from the bottom of their page, behind an explicit irreversible-action confirmation that removes sessions, notes and uploads along with it.

Payments

  • An optional automated email goes out thirty minutes after a session ends, asking the client to pay for that session. Therapists can turn it off.
  • Each session carries a paid or unpaid tag so a therapist can see at a glance what is outstanding.
  • Therapists can store a payment QR code for in-person sessions, kept in private storage rather than on a public URL.
  • Checkout now calculates tax at the point of sale for EU customers, treats both plans as software subscriptions, and emails an invoice.
  • Client payments continue to go straight to the therapist. We take no cut of a session fee.

Notes and records

  • Notes can be captured with the camera and converted to text, typed, or written by hand on a tablet, then saved against a date.
  • Per-client note search was added, with database indexes so it stays fast as a caseload grows.
  • AI summaries are opt-in, tier-limited, and never run on a session without the therapist starting them.

Accounts, security and reliability

  • Fixed a redirect loop that could bounce a signed-in therapist back to the sign-in screen and then to a blank page.
  • Access tokens now refresh before they expire instead of failing mid-action.
  • Every row-level access rule was re-audited, and all server-side actions were reviewed for authentication, ownership checks and correct not-found handling.
  • Roles are read from a dedicated roles table through a security-definer check, never from a client-side value.
  • Public scheduled endpoints are guarded by a shared secret compared in constant time.

Interface and content

  • Settings became a single place, reached by the gear icon, holding profile, practice, booking, availability, clients, payments, cancellation, billing, language, installation and legal controls.
  • Erasure requests moved out of the home screen and into the schedule area.
  • Cards across the whole site swapped their grey outlines for a soft shadow.
  • Loading states use the BlueNote mark cycling through brand colours instead of three generic dots.
  • Desktop visitors are offered a real desktop install rather than phone-only instructions.
  • The homepage was rewritten for therapists with an established caseload, with a new editorial feature strip that stacks vertically on phones.
  • A How it works page was added: philosophy, a tool-by-tool explanation, and how we meet GDPR obligations, in collapsible sections.
  • Every em dash was removed from the site copy.

Language

German, Spanish, Italian and French joined English and Serbian. Every page is translatable, the switcher is a dropdown, transcription handles all six, and therapists pick a preferred language at signup that the app and their emails then use.

Legal

  • The operator is named, with a real registered address and contact route.
  • Terms, Privacy and Refund policies were rewritten, with Idaho governing law.
  • GDPR disclosures cover lawful basis, retention periods, EU rights and the right to deletion.
  • US therapists see a blocking acknowledgement that BlueNote is not HIPAA compliant, recorded with a version stamp.

What is next

Publishing continues three times a week here. On the product side we are watching real usage numbers before touching pricing again, and keeping an eye on storage as recordings accumulate.