Privacy Policy

Effective September 27, 2026

What Did the Doctor Say? (the "app") is made by Desert Gate Holdings ("we", "us"). This policy explains what the app collects, where it goes, and your choices.

The short version

• Your health information stays on your iPhone. Recordings, transcripts, summaries, symptoms, photos, documents, doctors, your insurance card and your health profile are stored only on your device, encrypted, and are not backed up to iCloud by the app.
• An account is optional. If you create one, it holds contact details and your choices, never health information.
• We do not sell your information, use it for advertising, or track you across other apps or websites.

What stays on your iPhone

Everything health related: recordings and transcripts, visit summaries, your health profile and medicines, information read from Apple Health, symptom, mood and food entries and their photos, scanned or imported records and the tests found in them, your doctors and notes, your insurance card, and AI reports. Transcription happens on the device. Summaries are made on the device, or with Apple Private Cloud Compute if you allow it in Settings.

Apple Health

If you allow it, the app reads information from Apple Health, such as your date of birth, sex, measurements, heart rate, heart rate variability, sleep, breathing rate, wrist temperature, blood pressure, glucose, mindful minutes, moods you log (State of Mind) and connected health records. It uses them to fill in your health profile and to show readiness and stress. The app never writes to Apple Health. Apple Health information is never used for advertising or marketing, is never sold, and is only sent to an AI service if you choose it as a source for an analysis, as described below.

What we collect

Account information (optional). If you sign in with Apple or Google we receive your email address and, if shared, your name (Apple may give us a private relay address). You may add a phone number, country and state or region. We store these with your email choices (product updates, newsletters, research invitations), each off unless you turn it on, with the date and wording of your choice.

Provider details (clinicians only). If you use provider mode while signed in, we store the details you enter about yourself as a clinician: name, credentials, specialty, practice, practice phone, fax, email and address, and NPI. These never include anything about your patients.

Subscription status. If you subscribe to Plus, Apple tells us whether your subscription is active. We never see your payment details.

AI usage. If you use included AI with Plus, we record the cost of each request against your monthly allowance. We do not store what you sent or what came back.

Approximate location, only when you search. When you use Doctors near me, your location (or the ZIP code or city you type) is rounded to about 6 miles on your iPhone before the search is sent. The search is not tied to your account or to any health information, and we do not keep it.

When information leaves your iPhone

1. AI analysis, when you ask for it. Before anything is sent, the app removes personal details on your iPhone (names, birth dates, contact details, addresses, record numbers and more; dates become day numbers such as "Day 15"). You see the exact text and approve it. With your own key, it goes directly to the AI company you chose: Groq, OpenAI (ChatGPT) or Anthropic (Claude), whose own policies then apply. With Plus, it goes to Anthropic through our relay, which does not store it.
2. Sharing with a clinician, when you approve it. Transfers by QR code go directly between two iPhones in the same room, encrypted, and never through our servers. A clinician who receives your records is responsible for them under the rules that apply to them.
3. Exports and backups you make. PDFs and encrypted backups go wherever you choose to send or save them.

Service providers

Account and subscription information is stored with Supabase, our database host, in the United States. Our website is served by Cloudflare. Included AI for Plus is provided by Anthropic. These providers process information only to run the service for us.

Your choices

• Use the app without an account; only Plus needs one.
• Change your email choices any time in Settings, or use the unsubscribe link in any email.
• Delete your account in Settings, Account, Delete account. This removes your account, contact details and provider details from our systems. Health information on your iPhone is not affected; delete it in the app or by deleting the app.
• Ask for a copy of your account information, or for it to be corrected, at support@whatdiddocsay.com.

Children

The app is not directed to children under 13, and we do not knowingly collect information from them.

Security

Health information is encrypted on the device with iOS Data Protection and locked behind Face ID or your passcode. Account information is protected in transit and at rest, and each person can reach only their own account.

Changes

We will post changes here and, for significant changes, tell you in the app.

Contact

Desert Gate Holdings, support@whatdiddocsay.com.