Privacy Policy

Dr Scribble™ is operated by SUMMITWEBCRAFT (Pty) Ltd. We are committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).

What we process

• Clinician details: name, title, HPCSA number, practice information
• Patient name and WhatsApp number (where provided)
• Consultation transcripts and AI-generated clinical notes

Audio and transcription

No audio is ever stored. Audio is sent to a third-party transcription service for real-time transcription and discarded immediately. We do not retain, archive, or replay any recording.

Data storage

Records are hosted under GDPR-equivalent protection, in line with POPIA's requirements for storing personal information outside South Africa. Encrypted in transit (TLS) and at rest (AES-256). Cross-border transfer is permitted under POPIA where the recipient provides adequate protection.

Your rights

You have the right to access, correct, or request deletion of your personal information at any time. Patients should contact their treating clinician in the first instance. Clinicians, whose own details we also process, may contact the Information Officer directly using the details below.

Our role

SUMMITWEBCRAFT acts as Operator under POPIA. Your clinician is the Responsible Party for your patient data. We process data only on their documented instructions.

The Travel Vault

The Travel Vault can be held by a traveller with no clinician on Dr Scribble™. For what a traveller keeps there, the sections above on clinicians and consultations do not apply, and the following does.

• What we hold: your name, your mobile number and the email address you gave for your receipt; the travel documents you add; your trip dates; the emergency details you type; photos of your medical aid card, with the scheme, plan and member number if you save them; and a record of what you paid and when. Card details are entered on the payment provider's own page. We never see them.
• What we do with it: we store it so that you can open it. We do not read, check or interpret your documents. The one exception is your medical aid card, which is read once, only when you ask, to fill in the scheme, plan and member number for you to check. We do not sell your information and we do not use it to train models.
• Who can see it: you, with your mobile number and a passcode sent to it; a person you share a document with, by a single-use code valid 14 days that you can stop at any time; and anyone who scans your emergency code, who sees only the emergency details you entered. Your medical aid card is never shown on your emergency code. A clinician cannot see your travel documents.
• How long we keep it: until you remove it. When a pass ends nothing is deleted.
• Your rights: you can remove any document and change your emergency details yourself. To have everything we hold deleted, write to the Information Officer below.
• Our role: for what you keep in your Travel Vault, SUMMITWEBCRAFT is the Responsible Party under POPIA. There is no practice or clinician in between.

Contact