Visit+
Privacy policy
The short version
Visit+ keeps your doctor visits on your phone. Your questions, your notes, your recordings, the transcripts, the key points and the things to do all stay there. We do not have an account for you. We cannot see your visits.
Two things leave your phone, and only these two:
- The recording, once, if your doctor said yes. It is sent to be written up and comes back as key points and things to do. Nobody keeps it.
- Usage events. Short names of features you used, such as "visit created". Never what you wrote, never what was said, never your name.
If you delete the app, your visits are gone. There is no copy anywhere else.
1. Who we are
Heartworks Pty Ltd makes Visit+. Under data protection law we are the controller for the little that reaches our server. For everything that stays on your phone, nobody but you has it.
Write to us at hello@heartworks.com.au or by post to Heartworks Pty Ltd, Australia.
2. What stays on your phone
Everything you put into Visit+ is stored in a file on your iPhone, inside the app's own folder:
- Visits: date, time, kind of doctor, name if you typed one.
- Your questions, and whether you starred or asked them.
- Recordings, as audio files.
- Transcripts, when a recording has been written up.
- Key points, things to do, the answers to your questions, and your note of what you were told.
- Pictures and documents you chose to keep with a visit.
- Reminders, which the phone itself schedules. They never go through a server.
- The countdown and the recording clock on your lock screen. They run on the phone.
Nothing in this list is sent to us. We cannot read it. Your visits, questions, notes, transcripts and write-ups are backed up to your own iCloud account (Apple's CloudKit, private database), so a new phone or a reinstall gets them back when you sign in to the same iCloud account. Recordings, pictures and documents are never backed up by Visit+ and stay on the phone. If iCloud is off, everything stays on the phone only, and deleting the app deletes it.
Visit+ does not use Apple Health. It does not read your contacts, your location, or anything else on the phone.
3. What leaves your phone, and when
3.1 The recording, to be written up
This happens only if all of the following are true:
- You set up a visit and opened the room.
- You read the line on the screen to your doctor. It says you would like to record, and that the recording will be written up.
- Your doctor said yes, and you tapped They said yes. The app does not record before that tap.
- You tapped Start recording.
- Your phone's language is English. In other languages the recording is kept on the phone and nothing is sent.
- This phone has not used up its four write-ups this month.
When the recording stops, the audio is sent once, over an encrypted connection, to our own server. The server passes it on for two jobs and returns the result to your phone:
| Who | What they receive | What they send back | What they keep |
|---|---|---|---|
| A transcription service | The audio of the conversation | The words, as text | Nothing. The account is set to zero retention. |
| Anthropic (Claude, the write-up) | The transcript, and the questions you wrote for this visit | Key points, things to do, and answers to your questions | Nothing. The account is set to zero retention. Nothing is used to train models. |
| Our server (a Cloudflare Worker run by Heartworks) | The audio in transit, then the transcript in transit | The write-up, to your phone | No recording and no transcript. It holds them only while the request runs. |
The four write-ups a month are counted on your phone. Nothing is sent to count them, and no code for your phone is made or sent.
The write-up is marked on your phone as written by Claude from the recording. Every line of it can be removed by you.
If your doctor says no, nothing records and nothing is sent. The visit still works: you take notes instead.
3.2 Usage events
Visit+ sends short event names to our own server so we can see which features are used. An event looks like "visit created" or "write-up landed". Each is a name and a time.
An event never contains the words of a visit, a question, a note, a name, a doctor's name, a date you typed, or any free text. There is no third-party analytics kit in the app, no advertising kit, no advertising identifier, and no tracking across apps or websites.
Like any server, ours receives your phone's internet address in order to answer the request. We use it for nothing else.
3.3 Crash reports
If the app crashes, a crash report goes to Google's Firebase Crashlytics: the stack trace, the app version, the phone model and iOS version, and an installation identifier Firebase makes for the app. Never a word of a visit, never a recording, never your name. Google processes it under its Firebase terms.
4. What we do not collect
- No account, no email address, no phone number, no name.
- No sign-in of any kind.
- No payment: Visit+ is free with nothing to buy inside it.
- No location.
- No contacts.
- No Apple Health data.
- No browsing or search history.
- No advertising identifier.
- Nothing is sold, and nothing is shared for advertising.
5. Permissions the phone asks for
| Permission | When it is asked | Why | What leaves the phone |
|---|---|---|---|
| Microphone | The first time you tap Start recording, after your doctor said yes | To record the conversation | The recording, only as described in 3.1 |
| Notifications | When you save your first visit | Reminders the evening before, when the visit starts, after it, and on the day something is due | Nothing. Reminders are scheduled on the phone. |
| Calendar (read only) | Only if you tap Check my calendar | To find an appointment in the next three months and offer it as a visit | Nothing. The app never writes to your calendar and never sends it anywhere. |
| Photos and files | None. The phone's own picker opens. | To keep a picture or document with a visit | Nothing. Attachments are never sent to anyone, including the write-up. |
6. Legal basis (for people in the EU, the EEA, the UK and Switzerland)
- The write-up. We process the recording and the transcript on the basis of your consent (GDPR Article 6(1)(a)), and, because a conversation with a doctor is health data, your explicit consent (Article 9(2)(a)). You give it by tapping They said yes and Start recording for a visit that will be written up. You can withdraw it at any time by not recording, by deleting the audio, or by deleting the visit. Withdrawing does not undo a write-up already done, but nothing from it is held anywhere but your phone.
- Usage events. Our legitimate interest in knowing which features of the app are used (Article 6(1)(f)). The events carry no content and cannot be joined to you.
- Your doctor's voice. The recording also contains your doctor. The app does not record until you have told it your doctor agreed. You are responsible for asking, and the app says so before the room. Laws on recording a conversation differ by country. Some require everyone's agreement; the app is built for that case.
7. Where data is processed
- Your visits: on your phone, wherever you are.
- Recordings made in the EU are transcribed and written up in the EU.
- Recordings made elsewhere are processed through the providers' standard regions, which may include the United States.
- Usage events: on our server, run on Cloudflare's network.
8. How long data is kept
| Data | Kept for |
|---|---|
| Everything on your phone | Until you delete it, or delete the app |
| The recording and transcript at the two services above | Not kept. Zero retention. |
| The recording and transcript on our server | Only while the request runs. Not stored. |
| Usage events | As long as we need to see whether a feature is used, then deleted. They never identify you. |
9. Your rights, and how to use them
Because your visits never reach us, most of your rights are things you do on the phone yourself:
- Delete one recording and keep the rest of the visit: open the visit, the room step, Delete the audio.
- Delete one visit: hold the visit on the home screen, or open it, and choose Delete visit. The questions, the recording and anything you wrote go with it.
- Delete everything: Settings, Delete everything. Every visit, recording and note on the phone is removed. It cannot be undone, because there is no copy.
- Take your data with you: a visit can be shared as a PDF from the follow-up step and from the room, and the questions as text.
- Delete the app: everything in it goes.
For data protection law you also have the right to ask us what we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent. Because we hold no visits and no account, the answer to a request for your data will almost always be that we have none. We will say so in writing. Email hello@heartworks.com.au. We answer within one month.
If you think we have handled your data wrongly, you can complain to the data protection authority in your country.
10. Children
Visit+ is not directed at children under 13, and we do not knowingly collect anything from them. Because there is no account, we have no way of knowing a user's age. If you believe a child has sent us something through the app, email hello@heartworks.com.au and we will remove it.
11. Security
Your visits are stored in the app's own folder on your iPhone, protected by the phone's own encryption and your passcode. Anything sent to our server travels over an encrypted connection and is accepted only with a key the app carries. Nobody can make Visit+ send a recording except you, from the room, after your doctor said yes.
12. What Visit+ is not
Visit+ is not a medical device. It does not diagnose and it does not give advice. It records and writes down what your doctor said, and the write-up can miss things. Nothing in it replaces your doctor.
13. This website
doctorvisit.plus is a plain static site. It sets no cookies, runs no analytics and loads nothing from a third party: no fonts, no tags, no embedded players. The support page remembers the email address you typed, in your own browser, so you do not have to type it twice; nothing else is stored. Like any web server, ours sees your internet address in order to send you the page, and uses it for nothing else.
The support form sends what you write, and the email address you give, to us so we can answer you. Never send a recording or a transcript with it: we do not need it and would rather not have it.
14. Changes to this policy
When the policy changes, we change the date at the top and publish the new text at doctorvisit.plus/privacy. If a change means something new leaves your phone, the app will tell you before it happens and ask you first.
15. Contact
Heartworks Pty Ltd
Australia
hello@heartworks.com.au