Zarina CRM Medical · psychology profile

Software for psychology practices, with session notes encrypted in the database

Session notes are the most sensitive data a practice holds. In a notebook on the desk or a file on a laptop, anyone who reaches them can read them. Zarina CRM writes them encrypted to the database, with a key derived from the installation secret: anyone opening the table sees only an unreadable string. On top of that it adds the PHQ-9 and GAD-7 scales with automatic scoring, a treatment plan with goals and frequency, and score progression over time. It is installed on the practice’s own server, with a lifetime licence.

Screenshot from Zarina CRM Medical: the service catalogue and fees for a psychology and psychotherapy practice
Clinic workflow

From the first appointment to score progression, in 6 steps

The same route you follow today with a diary and a notebook, except each step leaves a trace you can search.

1

The appointment

The client goes into the calendar under their therapist, with the real session length and the room, if several of you work in the same space.

2

The record

Contact details, the signed consent and the session history sit in one place, not three.

3

The assessment

Complete PHQ-9 or GAD-7 at the start of the work. The score and the range it falls in are calculated, not added up by hand.

4

The plan

Therapeutic goals and session frequency — weekly, fortnightly, monthly — are written once and ticked off along the way.

5

The session note

It is saved encrypted, under the session date and its author. Nothing can be read in the database table.

6

Reassessment

Repeat the scale after a few sessions. The chart shows whether the score is falling, stagnating or rising.

Session notes

The only data in the CRM that cannot be read from the database

The rest of the record is ordinary text. The content of the session note is written encrypted, in a separate column, and decrypted only in the application, for the user entitled to see it.

Encrypted on write

The note’s content enters the database already encrypted. The key is derived from the installation secret, which sits in the configuration file, not in the database.

  • A database backup does not expose the notes
  • Direct MySQL access does not help read them
  • Decryption happens only in the application
  • The rest of the record stays searchable as normal

By date and author

Each note carries the session date and the user who wrote it. In a practice with several therapists you can see who worked with whom and when.

  • Session date, separate from writing date
  • The note’s author, from their own account
  • Number of notes per client
  • Deletion is logical; it does not destroy history

A history, not a pile

Notes are read in order, per client, with sessions numbered. You no longer have to leaf through a notebook to remember where you left off.

  • List of sessions, in chronological order
  • How many sessions have been done out of the agreed plan
  • Search by client, not by date
  • Export on the client record, on request
Standardised scales

PHQ-9 and GAD-7, scored by the application

The questionnaires come configured with their questions, answer options and thresholds. You tick the answers; the application adds up the score and shows which range it falls in.

PHQ-9

The screening questionnaire for depressive symptoms. Nine items, total score, the range shown in its colour.

  • Questions and answers, preconfigured
  • Score calculated on save
  • Range shown in its colour
  • Completion date and who completed it

GAD-7

The screening questionnaire for anxiety symptoms. Seven items, the same scoring logic and the same configured thresholds.

  • Can be completed in the same session as PHQ-9
  • Completion history, per client
  • Comparison between two points in time
  • Nothing to add up on paper

Progress over time

Each completion is added to a chart per client. You see whether the score is falling, staying the same or rising between sessions.

  • Chart per scale, per client
  • Points are the real completions
  • Useful for reassessment and reporting
  • No manual export to Excel
What the application does not do

Scales are screening tools, not diagnoses

We say this explicitly, because it is the only honest way to sell software that touches mental health.

  • It does not diagnose. A PHQ-9 or GAD-7 score is not a diagnosis. The application calculates and displays; clinical interpretation remains entirely the specialist’s.
  • It does not recommend treatment. There is no automatic suggestion of therapy, medication or referral. You write the plan.
  • It does not replace assessment. A questionnaire completed between sessions is extra information, not a substitute for the session itself.
  • It sends data nowhere. There is no transmission to an external analysis service, not even anonymised. Installation is on your server.
  • It does not detect risk. The application does not flag or alert on risk situations; it is not a crisis intervention tool.
Treatment plan

Goals and frequency, written once

The plan sits on the client record, not in a separate document you have to open before every session.

  • Goals you can tick off. Write therapeutic goals as a list. As they are achieved, they are ticked off, and at reassessment you see at a glance what remains.
  • Session frequency. Weekly, fortnightly, monthly or your own rhythm. It is the information used to judge whether the plan is being followed.
  • Sessions done against the plan. The application counts the sessions held, so you see immediately if the agreed rhythm has slipped.
  • Revision, not rewriting. The plan is updated, with a trace of who last changed it.
The rest of the clinic

What else is included, from the Medical edition

The psychology profile sits on top of the complete Medical edition; it is not a separate, smaller application.

Appointments and calendar

Calendar per therapist and per room, with the real session length and reminders beforehand.

  • Day, week and month view
  • Reminders to clients
  • No-shows marked
  • Recurring sessions

Consents and data protection

Consent forms, the data processing agreement and their records, linked to the client record.

  • Your own consent templates
  • Record of consents given
  • Personal data requests
  • Encrypted session notes

Invoicing and payments

The invoice for a session or a session package, with payments and outstanding amounts up to date.

  • Your own series and numbering
  • Payments and outstanding amounts
  • Session packages
  • VAT invoices, where applicable

Client portal

Access with their own account to appointments and the documents you choose to publish.

  • Access with their own account
  • Visible appointments
  • Documents published selectively
  • Session notes never appear

Users and roles

In a practice with several therapists, each sees what they need to see, not everything.

  • Roles by job
  • Access log
  • Restrictions per module
  • Notes visible by permission

Documents and reports

Certificates, assessment reports and activity summaries, generated from existing data.

  • Your own document templates
  • PDF generation
  • Activity per period
  • Export for accounting
Transparency

What to know beforehand

The things we would rather you hear from us, not after signing the contract.

  • 2 scales, not all of them. PHQ-9 and GAD-7 come configured. Other instruments can be added on request, as separate work; they are not in the standard package.
  • The encryption key is your responsibility. If the installation secret is lost and you have no copy, notes already written can no longer be decrypted. We show you during implementation where it is and how to keep it.
  • Encryption protects the database, not the account. Anyone with an account allowed to read notes will read them in the application. Real security lies in roles and passwords.
  • There is no native mobile app. The interface is web-based and works on a phone too, but there is no app in the App Store or Google Play.
  • We are not a healthcare provider. We sell a working tool. Professional liability and reporting obligations remain with the clinic.
Where you are today

3 things that happen without a system

These are not hypotheses: they are the reasons clinics come to us.

The notebook on the desk

Session notes sit in a notebook or in files on a laptop. A lost laptop or a wrongly shared folder immediately becomes a confidentiality problem, not just an organisational one.

Notes go into the database encrypted, on the practice’s server.

The score added up by hand

The questionnaire is completed on paper, added up in pencil and written down somewhere. At reassessment nobody can find the score from three months ago.

The score is calculated on save and stays on the client’s chart.

The forgotten plan

Goals were set in the second session and stayed on a page of the notebook. Two months later nobody remembers what frequency was agreed.

The plan sits on the record, with goals ticked off and the frequency in plain sight.

Licensing model

A lifetime licence, not a monthly subscription

You pay once for the licence. There is no per-user cost and no monthly fee to keep using the application.

  • Unlimited users. A practice with two therapists and one with twelve pay the same licence.
  • It runs on your side. On the practice’s server or on hosting of your choice. Data does not pass through us.
  • Prices are not invented here. You will find them on the pricing page, together with what is and is not included in each package.
  • Maintenance is optional. The application works without a support contract. The contract buys intervention and updates, not the right to use it.
Implementation

What you get when you sign the contract

Installation and the secret

We install the application, configure the psychology profile and show you where the encryption secret is and how to keep it safe.

Scales and plan

We check PHQ-9 and GAD-7 together on a test client, and configure the frequencies and consent templates you use.

Team training

A working session with therapists and reception, on real practice cases, not a presentation.

Fit

Who it is for and who it is not for

It is for

Individual psychology and psychotherapy practices that want notes kept safe and scoring done by the application, not a pencil, and prefer to keep their data on their own premises.

It is for

Centres with several therapists, where it matters who worked with whom, who sees which note and what monthly activity looks like.

It is not for

Anyone looking for a teletherapy platform with built-in video, a store of licensed psychological tests or an app paid monthly and abandoned without consequences.

Security

Where the data lives and who is responsible for it

For a psychology practice, this question comes first. The answer is short.

  • On your server. Installation is on your premises or on the hosting you choose — in the UAE, if you wish. There is no copy of the data with us.
  • You are the controller. Under data protection law, the clinic is the data controller. We intervene only on request, for support.
  • Notes, encrypted separately. The content of the session note is the only data in the application that cannot be read directly from the database.
  • Role-based access, with a log. You see who logged in and when. Permissions are granted per module, not globally.
  • Backups in your hands. We show you how they are made and restored; you do not depend on us for that.
Frequently asked questions

Answers about the psychology profile

How are session notes encrypted?

The note’s content is encrypted before being written to the database, with a key derived from the installation secret. The secret sits in the configuration file on your server, not in the database. A copy of the database taken without the application files contains nothing readable from the notes.

If I lose the key, what happens to the notes?

They can no longer be decrypted. That is the direct consequence of real encryption, and we say it clearly before the contract. During implementation we show you where the secret is and how to keep it, and its copy goes into your backup procedure.

Is the PHQ-9 score a diagnosis?

No. PHQ-9 and GAD-7 are screening tools. The application adds up the answers and shows the range the score falls in, with its colour. Clinical interpretation, diagnosis and therapeutic management remain entirely the specialist’s.

Can I add scales other than PHQ-9 and GAD-7?

Yes, but as separate work. The structure supports defining a new scale with its items, answer options and thresholds. Two come configured in the standard package.

Does the client see session notes in the portal?

No. The portal shows appointments and the documents you choose to publish. Session notes are never exposed in the portal.

In a centre with several therapists, can you see who wrote what?

Yes. Each note carries its author and the session date, separate from the date it was written. Read permissions are granted by role, and access is logged.

Does deleting a note remove it permanently?

Deletion is logical: the note leaves the list but stays marked in the database. This preserves the integrity of the history and allows recovery if it was deleted by mistake.

Can session packages be invoiced?

Yes. Invoicing is the Medical edition’s: individual session or package, with your own series, payments and outstanding amounts tracked per client.

Does it work for psychiatry?

Partly. Encrypted notes, scales and the plan are used the same way. Prescriptions and medication schemes are not part of this profile; if you need them, we discuss it as an extension.

How do I see what it looks like before buying?

Ask for demo access to the psychology profile. You receive an email link that opens exactly this version, with sample data, without installing anything.

Other medical profiles

The same solution, configured for another practice

The Medical CRM is configured by speciality. If you do not work only in psychology, go straight to your own version.

Medical CRM

The complete solution: patient file, appointments, invoicing and portal, for a practice or clinic.

Paediatrics CRM

Growth charts on WHO references and the immunisation schedule with overdue doses calculated.

Dental CRM

The dental chart, the per-tooth treatment plan and the estimate that comes out of it.

Veterinary CRM

The animal record, vaccination schemes by species and the list of this week’s recalls.

Gynaecology CRM

The pregnancy file, with gestational age and each trimester’s tests at the right time.

All specialities

The 22 configured specialities, each with its own form and demo.

No monthly subscription

Encrypted notes, scales and plan, on the practice’s server

Lifetime licence, unlimited users, data on your side. Ask for a demo of the psychology profile and see the application on sample data before any price discussion.