Use AI for Session Notes Without Breaking Client Confidentiality
You'd love to stop writing session notes at night. Then the question hits: is it OK to put client info in AI? Most advice says "get consent and redact" and leaves you to figure out what that means. This workflow gives you the exact consent sentences, the settings to change in each AI tool, a list of what to strip before you paste, and a notes prompt that won't summarize the things it shouldn't. It's the safety layer under the session recap workflow.
Is it OK to put client info into AI for session notes?
For most coaches, yes, if all three of these are true:
- The client agreed in writing, and you know what you told them (tool, what's captured, who sees it, how to opt out).
- Your AI tool isn't training on your chats: training turned off, or a temporary chat.
- You strip names and identifying details before you paste, and you never paste the sensitive categories listed in step 4.
Not on a consumer plan if you're a licensed clinician whose notes count as health records (for example under HIPAA in the US). Consumer ChatGPT, Claude, and Gemini plans aren't set up for that. Talk to whoever handles compliance for your license first. This page is practical guidance, not legal advice.
Time check: about 45 minutes once to write your consent wording, change your settings, and make your strip list. After that, about 2 minutes per session to strip details before pasting. On its own it doesn't save time. It's what makes the recap workflow safe to use, and that one is where the 30 to 45 minutes a session comes back. These are estimates, not measured results.
Who it's for
Coaches, consultants, and service providers who talk with clients about personal or work situations and want AI to help with notes and recaps. It covers one-to-one, group, and sponsor-paid (company-paid) coaching. If you're a therapist or other licensed clinician, read the short answer above before anything else.
What you need
- Any AI chat tool: ChatGPT, Claude, Gemini, or Grok. You'll change one or two settings in step 3.
- Your coaching agreement or intake form: Wherever clients sign or tick a box before you start. You'll add one clause.
- A doc with find and replace: Google Docs, Word, Pages, or a notes app. This is where you strip details, before anything touches AI.
- A strip key, kept outside AI: A private note that maps real names to stand-ins (for example "Client A", "Manager M"). It never gets pasted anywhere.
- Optional: a recorder that makes transcripts: Zoom, Google Meet, Fathom, Otter, or your phone. Only if your consent covers recording.
Example business (fictional): Lakeside Transitions Coaching
Lakeside is a made-up coaching business we use to show the workflow. The coach helps mid-career teachers move into training and instructional design roles. Sessions are 50 minutes on Zoom, six per package.
The client is just as fictional: Dana, a high school teacher in her eleventh year who's nervous about telling her principal she's leaving. You'll see a raw note, the stripped version, and the notes the AI produced from it.
The steps
Pick your level before you write any consent wording
Consent only means something if you can say exactly what happens. So decide first which of these three levels you're using. You can use different levels for different clients.
- Level 1, your notes only. No recording. You jot rough notes during or right after the session, strip them, and paste those into AI. The AI never hears the session. Lowest risk, and still saves most of the writing time.
- Level 2, transcript, stripped. You record with a tool that makes a transcript, strip it, then paste. More detail, more stripping work.
- Level 3, AI notetaker in the session. A notetaker (Zoom AI Companion, Fathom, Otter, Fireflies) joins the call and its vendor processes the audio. Most convenient, and the client's words go to that vendor before you can strip anything.
If you're unsure, start at Level 1. Plenty of coaches never need more.
Done when: you've written down which level you use, and for which clients.
Copy the consent wording: once in writing, once out loud, once a session
Clients don't object to AI as often as coaches fear. They object to finding out later. Ask yourself the client's version of the question: if they later found out this was automated, would it feel helpful or disappointing? Saying it upfront is what makes it feel helpful. Use all three versions below. Swap the bracketed parts for your real tool and level.
Copy this promptAgreement clause (paste into your coaching agreement or intake form)
AI-assisted notes I may use [tool name, e.g. ChatGPT] to help me write session notes and recaps. Here is exactly what that means: - What goes in: [Level 1: my own written notes from our session] / [Level 2: a transcript of our session] / [Level 3: the audio of our session, processed by (notetaker name)]. - Before anything goes into the AI tool, I remove your name and details that could identify you or anyone you mention. - I have turned off the setting that lets the AI company train on my chats, and I delete the chats after [7] days. - Your notes are stored in [where, e.g. my private Google Drive] and only I can see them. If your company pays for coaching, they never see them. - You can say no now, or stop at any time, just by telling me. Nothing about our work changes; I'll write notes by hand.Copy this promptSay this at the start of the first session
Before we start: as we covered in the agreement, I use an AI tool to help with my notes so I can listen properly instead of typing. I take your name and identifying details out first, and only I see the notes. Are you still comfortable with that? You can change your mind anytime.Copy this promptSay this at the start of every recorded session (Level 2 or 3)
Quick check before I hit record: still OK to record for my notes? If anything comes up today you'd rather keep out of the notes, just say "off the record" and I'll pause.Done when: the clause is in your agreement, and you've said the first-session version out loud at least once (to a mirror counts).
Change your AI tool's privacy settings (5 minutes)
Do this once, on every device you use. Check the setting again every few months, because names and defaults change.
- ChatGPT (Free, Plus, Pro): Settings > Data controls > turn off "Improve the model for everyone". For the most private option, start a Temporary Chat (the Temporary button at the top of a new chat). Temporary chats aren't used for training and don't stay in your history, though OpenAI says it may keep them up to 30 days for safety. Don't press thumbs up or down on a chat with client details: feedback can send the whole conversation for training.
- Claude (Free, Pro, Max): Settings > Privacy > turn off "Help improve Claude". With it off, Anthropic says chats are kept up to 30 days. Incognito chats are never used for training. Reopening an old chat counts as "resuming" it under your current setting.
- Gemini: Settings & help > Activity > turn off Keep Activity (it used to be called Gemini Apps Activity). Or use a Temporary Chat. Google says chats with Keep Activity off are still kept up to 72 hours.
- Memory: in any tool, turn off memory for client work, or check what it has saved and delete client details. You don't want a client's situation showing up in next week's content draft.
- Team or business plans (ChatGPT Business or Enterprise, Claude Team, Google Workspace with Gemini) generally don't train on your data by default. Check your plan's terms rather than assuming.
Done when: training is off (or you're using a temporary or incognito chat), memory is off or clean, and you've noted the date you checked.
Strip details before you paste, using your strip key
Strip in your own doc, not in the AI. Asking AI to remove names means you've already pasted the names. Open your rough notes or transcript in a doc, then use find and replace with your strip key.
Replace:
- The client's name, and everyone they mention: partner, kids, boss, coworkers ("Client A", "Partner P", "Manager M").
- Company, school, and team names ("the school", "Company X").
- Places smaller than a big city, plus addresses, dates of birth, and phone numbers.
- Unusual details that point to one person: a rare job title, a news story they were in, a very specific number.
Never paste, even stripped. Keep these in your own notes only:
- Health, mental health, medication, or diagnosis details
- Anything about abuse, safety, self-harm, or risk to anyone
- Legal matters, immigration status, or anything they asked you to keep private
- Money specifics tied to them (account numbers, exact debts, salary offers)
Then run the check prompt on the stripped text. It catches the details you missed.
Copy this promptPrompt: Leftover-identifier check (run on stripped text only)
This text has already had names replaced with stand-ins like "Client A". Don't summarize it. Only list anything still in it that could identify a real person or organization: names, places, job titles, dates, numbers, or unusual details. Quote each one exactly and say why it could identify someone. If you find nothing, say "Nothing found." TEXT: [paste stripped notes or transcript]Done when: the check prompt says "Nothing found", or you've replaced everything it listed.
Example: Dana's rough note, before and after stripping (fictional)
Raw note (stays in the coach's private doc):
Dana, session 3. Still at Ridgeview High, 11th year. Scared to tell Principal Okafor before contracts are due Mar 1. Husband Sam supportive but worried about the pay cut. Wants an instructional design job at Brightpath Learning. Mentioned her anxiety meds were changed last week. Agreed: draft resignation timeline, send 2 portfolio samples to me by Thu.After find and replace with the strip key, and the never-paste rule:
Client A, session 3. Still at the school, long tenure. Scared to tell Manager M before the contract deadline in early spring. Partner P supportive but worried about the pay cut. Wants an instructional design role at Company X. Agreed: draft resignation timeline, send 2 portfolio samples to me by Thu.What changed: names, the school, the company, and the exact year count are gone. The medication detail isn't stripped, it's removed entirely, and it lives only in the coach's own notes. The check prompt came back "Nothing found".
Where this breaks
- Stripping in the AI instead of before it. "Remove the names from this" means the names were already pasted. Fix: strip in your own doc with find and replace, every time.
- The detail nobody thinks of. A rare job title, a small town, or a news story can identify someone with no name at all. Fix: run the leftover-identifier check and ask, "Could their coworker recognize them from this?"
- Consent that doesn't match reality. If your clause says Level 1 and you're running a notetaker, the consent doesn't cover what you're doing. Fix: update the clause whenever you change tools or levels, and tell current clients.
- Settings drift. Tools rename settings and add new defaults. A setting you turned off on your laptop may not apply to an old signed-out browser. Fix: sign in everywhere, and check the settings every few months.
- Feedback buttons. A thumbs up or down can send the whole conversation to the AI company, even with training off. Fix: never rate a chat that has client material in it.
- Licensed clinicians on consumer plans. Health-record rules may apply to you even when stripped. Fix: get compliance advice first and use a tool built for clinical notes.
Start with 3 complete workflows, free
Steps 5 to 7, including the guardrailed notes prompt, how to store and delete notes on a schedule, the hard-case rules (groups, company-paid coaching, opt-outs, risk disclosures), the opt-out reply, and Dana's finished notes, live in the members library. To try the approach first, grab the free guide: 3 complete workflows for weekly posts, client recaps, and call prep.
Check your inbox and tap the confirm link to get your guide. Free, plus one new workflow idea a week. Unsubscribe anytime.
Want this full workflow now? Founding members get the whole library for $19/mo, locked in. First 25 members, closes Oct 29.
*Time saved is an estimate based on typical manual effort for this task, not a measured result. Your mileage will vary. Always review AI output before sending or publishing.
Next: Are Prompt Packs Worth It? Turn the Few You'd Use Into Workflows →