Privacy policy

DigiPatient helps doctors manage appointments, record consultations and prepare clinical documents. This policy explains what happens to information about doctors and patients when a practice uses DigiPatient.

Doctor accounts

Doctors sign in with credentials issued by their practice. DigiPatient uses their account and role to control access. Professional names, qualifications, registration and practice numbers, practice details and signatures identify the doctor on clinical documents. A doctor can enable a verification PIN for certain document actions.

Patient care

The practice records patient identifiers, contact details, medical aid information, appointments and consultation history. Records may include examination notes, allergies, medicines, investigation results and uploaded images or documents. Doctors use these details to provide care and create prescriptions, referrals and medical certificates.

Documents and delivery

When a doctor requests delivery, the document and relevant patient details go to the selected pharmacy, receiving doctor or patient. Brevo processes email delivery. WinSMS processes the patient’s mobile number and message when sending a prescription PIN. Delivery records contain the destination, status and attempt history so the practice can investigate failures.

Hosting, device features and security

The hosting provider processes account and clinical records on behalf of the practice. Cloudflare R2 stores uploaded files where configured. Mobile connections to the production service use HTTPS. Access to clinical functions requires a doctor account. If a doctor enables iOS booking notifications, the service uses a device token and Apple Push Notification service to send booking alerts without patient details. If dictation is used, the device or browser’s speech service may process speech to produce the text.

Retention and deletion

The treating practice determines how long it must keep clinical records for patient care and its recordkeeping obligations. Removing a doctor’s access does not erase the patient’s clinical history. Ask the practice which retention period applies to your records and which information can be deleted.

Privacy requests

Patients can contact the treating practice using the telephone number or address on their DigiPatient prescription, referral or certificate. Doctors can contact the administrator who issued their login. Ask for the person responsible for privacy to request access, correction or deletion of information, closure of a doctor account, or an explanation of how a record was shared. The practice may need to verify your identity before acting. Please do not include clinical attachments or passwords in an initial enquiry.