Privacy notice

Draft, to be reviewed by a lawyer before launch.

Doc As My POC (Pty) Ltd (registration number 2026/856070/07) runs Doc as my POC and is responsible for your personal information under POPIA.

What we collect about you

• Account details you give at registration: name, email, profession, HPCSA number, facility, province and mobile number.
• Your password, stored only as a one-way hash.
• Payment records: amount, date and the reference from PayFast, the App Store or Google Play. We never see or store your card details. In the iPhone and Android apps, a random account identifier (not your name or email) is passed to Apple or Google with your purchase so it can be linked to your Doc as my POC account.
• Sign-in records: the type of device and browser used and the time of each sign-in, plus a random device identifier stored in a cookie. These enforce the one-user-per-account rule.
• Usage counts: the number of interpretations and follow-up questions, the AI model used, token counts and estimated cost. We do not store the clinical content.

Clinical information you enter

Case details and images you submit are passed from your browser through our server to Anthropic for analysis, using your own Claude API key, and the result is returned to your browser. This server does not save the case details, images or results. Anthropic's handling of that data is governed by your agreement with Anthropic. Do not enter information that identifies a patient.

Your API key

Your Claude API key is stored only in your own browser. It is sent with each request so the server can forward it to Anthropic, and is never written to our database or logs.

Why we use your information

To create and secure your account, manage your subscription, confirm you are a health professional, and contact you about your subscription.

Sharing

We share payment details with PayFast, Apple or Google, depending on how you pay, to process and confirm payments. We do not sell your information, show advertising or use tracking or analytics services.

Your rights

You may ask to see or correct your personal information, object to how it is used, or ask us to delete it. Send your request to our Information Officer (below). If you are not satisfied with our answer, you may complain to the Information Regulator at inforegulator.org.za.

Information Officer

Dr Sailesh Mahadeo, Managing Director, is our Information Officer, registered with the Information Regulator.
Email: privacy@docasmypoc.co.za

Deleting your account

You can delete your account at any time from the Account page, on the website or in the app. This permanently removes your profile, sign-in history and usage records and signs you out everywhere. Payment records are kept for five years without your name or contact details, as tax law requires.