Privacy

DocResult is run by WickedSelf LLC, a Delaware limited liability company, at 2810 N Church St #578615, Wilmington, DE 19802.

Questions about privacy go to support@wickedself.com, and a real person reads it.

Only what the product needs to work. In practice that is:

• —Your email address, so you can sign in and we can send you a reminder. A phone number is never required and we do not ask for one.
• —The names you give the people you look after. Whatever you call them is what we store; we never ask for a date of birth, a condition, an insurer, or a relationship.
• —Appointments, questions, follow-ups, medicines and documents you enter or photograph.
• —Audio you record at an appointment, and the transcript and summary made from it.
• —A record of who was given access to what, and when it was changed.
• —Ordinary server logs kept by our hosting provider, which include IP addresses.

We do not run analytics on your records, we load no third-party fonts or scripts, and there is no advertising identifier anywhere in the product.

• —We never sell your information, and we never share it for anyone else's advertising.
• —We do not build a de-identified dataset out of your records and license it. There is no export table for that purpose and there never will be.
• —We do not use your recordings, transcripts or summaries to train models, our own or anyone else's.
• —We do not read your records except where you ask us to fix something, or where the law compels us.

What plays back is byte-for-byte what your microphone captured. We do not re-encode, normalise, denoise or trim it. A checksum is taken on your device before upload and the file cannot be repointed or altered afterwards.

Summaries are made by machine and can be wrong. Every line is anchored to the second of audio it came from so you can check it yourself, and a line that cannot be checked cannot be created.

Whether it is lawful for you to record a particular conversation depends on where you are and who is in the room. We tell you the rule for your state and give you a way to ask. We never tell you that a recording is lawful.

Only the people you invite, and only as far as you allow. There are three levels: the calendar alone, the calendar plus what needs doing, or everything. Access is granted per person, so inviting someone to help with your mother does not show them anything about your father.

You can see who has access and what they are told, and you can withdraw it at any time. It stops working on their next click.

A share link you create can be opened by anyone holding it, which is why they expire and can be revoked. Unknown, expired and revoked links are indistinguishable from outside.

We keep this list short on purpose, and none of them is permitted to use your information for their own purposes.

• —Supabase holds the database, the audio and document files, and your email address for signing in. There is no password to hold, because we do not use one.
• —Vercel hosts and serves the site, and keeps request logs.
• —Resend delivers our email, so it processes your address and the contents of what we send you.
• —Deepgram turns the audio of an appointment into text. It receives the recording and returns the words.
• —OpenAI reads two things for us: the text of an appointment, to draft the summary you check, and a photograph of a medicine label, to fill in the medicine form you check. It receives that text or that photograph and returns what it read.
• —Anthropic reads the same two things, for a different reason. Every medicine photograph goes to both companies at the same time, and the two readings are compared: where they disagree, we leave the field blank for you to fill in. For an appointment, Anthropic does not write the summary; it checks the summary OpenAI wrote, line by line, and marks anything it doubts.

A photograph of a medicine label carries your name, your address and your prescriber, because that is what a pharmacy prints on it. Anthropic and OpenAI receive the whole photograph, because that is the only way to read it. Neither is permitted to use it for their own purposes, and neither is sent anything unless you take the photograph and ask us to read it.

Records stay until you delete them. Audio can be set to expire after a period you choose, keeping the transcript and summary, and it will not expire until somebody has checked the summary against it.

The history log is append-only and cannot be edited, including by us. If you delete your account it goes with everything else.

Settings has both. Export gives you one file containing everything, with links to download the audio and photographs. Deleting asks you to type the word DELETE, tells you exactly how many of each thing will be destroyed, removes the files before the rows, and leaves behind a receipt containing no medical content so the deletion is something you can point to.

A product holding a medical record you cannot take elsewhere is holding it.

Every query runs through row-level security keyed to your sign-in, rather than a filter written by hand that somebody could forget. Files are private and reachable only through short-lived signed links, and permission is decided by the record rather than by the file path.

No system is perfect. If you find a problem, write to support@wickedself.com and we would rather hear it than not.

DocResult is for adults. We do not knowingly collect information from anyone under 18.

If we change this notice in a way that matters, we will say so in the app rather than quietly changing the date at the top.