September 14, 2026 · 4 min read
Update 0.2
Technical patch notes for BlueNote Update 0.2: session hosting, booking and calendar fixes, payments, notes, security hardening, six languages and new legal disclosures.
Update 0.2 collects a week of work on BlueNote. Most of it is invisible in the best way: sessions that start on the first click, emails that arrive in the right language, and a practice that keeps running while we improve the parts underneath it.
Here is everything that shipped.
Sessions and video
- Therapists now join their own room with host rights automatically. No second login, no waiting for someone else to start the call.
- Rooms are created privately per booking, with short-lived access tokens issued at join time rather than shared links that stay valid forever.
- The in-call layout was rebuilt so tiles fit properly on phones and laptops, and third-party branding was removed from the meeting screen.
- Camera and microphone permission prompts now fire correctly on iOS, which previously failed silently on some devices.
- Recording is available on the higher tier, retained for a year, and never deleted automatically.
Bookings, clients and the calendar
- Booking links go live the moment a therapist signs up. An empty schedule shows a clear message instead of a broken page.
- The booking page shows the therapist's real name rather than a generic label, and the client's name is prefilled where we already know it.
- Confirmation emails now include an add-to-calendar action for both the client and the therapist, titled with the therapist's name.
- Clients choose a preferred language when they book. Their confirmation arrives in that language, and the therapist can see which language the client chose.
- A client record can now be deleted permanently from the bottom of their page, behind an explicit irreversible-action confirmation that removes sessions, notes and uploads along with it.
Payments
- An optional automated email goes out thirty minutes after a session ends, asking the client to pay for that session. Therapists can turn it off.
- Each session carries a paid or unpaid tag so a therapist can see at a glance what is outstanding.
- Therapists can store a payment QR code for in-person sessions, kept in private storage rather than on a public URL.
- Checkout now calculates tax at the point of sale for EU customers, treats both plans as software subscriptions, and emails an invoice.
- Client payments continue to go straight to the therapist. We take no cut of a session fee.
Notes and records
- Notes can be captured with the camera and converted to text, typed, or written by hand on a tablet, then saved against a date.
- Per-client note search was added, with database indexes so it stays fast as a caseload grows.
- AI summaries are opt-in, tier-limited, and never run on a session without the therapist starting them.
Accounts, security and reliability
- Fixed a redirect loop that could bounce a signed-in therapist back to the sign-in screen and then to a blank page.
- Access tokens now refresh before they expire instead of failing mid-action.
- Every row-level access rule was re-audited, and all server-side actions were reviewed for authentication, ownership checks and correct not-found handling.
- Roles are read from a dedicated roles table through a security-definer check, never from a client-side value.
- Public scheduled endpoints are guarded by a shared secret compared in constant time.
Interface and content
- Settings became a single place, reached by the gear icon, holding profile, practice, booking, availability, clients, payments, cancellation, billing, language, installation and legal controls.
- Erasure requests moved out of the home screen and into the schedule area.
- Cards across the whole site swapped their grey outlines for a soft shadow.
- Loading states use the BlueNote mark cycling through brand colours instead of three generic dots.
- Desktop visitors are offered a real desktop install rather than phone-only instructions.
- The homepage was rewritten for therapists with an established caseload, with a new editorial feature strip that stacks vertically on phones.
- A How it works page was added: philosophy, a tool-by-tool explanation, and how we meet GDPR obligations, in collapsible sections.
- Every em dash was removed from the site copy.
Language
German, Spanish, Italian and French joined English and Serbian. Every page is translatable, the switcher is a dropdown, transcription handles all six, and therapists pick a preferred language at signup that the app and their emails then use.
Legal
- The operator is named, with a real registered address and contact route.
- Terms, Privacy and Refund policies were rewritten, with Idaho governing law.
- GDPR disclosures cover lawful basis, retention periods, EU rights and the right to deletion.
- US therapists see a blocking acknowledgement that BlueNote is not HIPAA compliant, recorded with a version stamp.
What is next
Publishing continues three times a week here. On the product side we are watching real usage numbers before touching pricing again, and keeping an eye on storage as recordings accumulate.
