Venues get five separate staff permissions for appointment-linked treatment
records (view own, record own, view all, manage, export). A technician sees
and records treatments for the appointments they performed; seeing colleagues'
records, editing them or exporting records are separate grants a venue gives
on purpose. Export is owner-level by default.

Clients can read their own treatment history in the app through a limited
view: date, service, professional, and products used. Formulas, staff notes,
photos and pay information are never shown to clients. Recording a colour
formula or patch test still requires the client's consent.

The Business app screens for this, treatment photos and a client-visible
aftercare note are still being completed. This is not deployed and no
Nailtech settings or client communications were changed.