Our commitments
Your health data, protected as such.
This page states what Doto collects, who can see it, how it is protected and how long it is kept. It is updated with every release.
Last verified: 16 September 2026
What we collect
To book an appointment: your name, your phone number, your date of birth and the consultation reason if you choose to give it. For a doctor: identity, licence number, specialties, availability, prices. Nothing else. Doto keeps no medical record.
Who sees what
- The patient sees their appointments, documents and notifications.
- The doctor sees the appointments in their agenda, with the reason and the appointment's documents.
- A facility's administration sees the date, time, service, doctor and status. Never the reason, never the documents.
- Doto (the Ydrus Software team) sees what is needed to validate accounts and run the service, and every document access is logged.
How it is protected
Per-facility isolation in the database
Every query on a facility's data is filtered by PostgreSQL itself, on top of application code.
Medical documents encrypted and scanned
Encrypted storage at rest, antivirus scan on upload, file types verified.
Patient sign-in with a one-time code
Six digits, five-minute validity, lock after five failures.
Protected professional accounts
Hashed passwords, single-use invitation tokens valid 48 hours.
Technical logs free of health data
Reasons, phone numbers and tokens are masked in logs.
Nothing medical on WhatsApp
No health data is requested or sent through consumer messaging.
How long
Appointments and their history are kept as long as your account exists. Pilot sign-ups and demo requests are deleted when the account opens or after 12 months.
Your rights
You can request access, correction or deletion of your data at contact@getdoto.app. Doto is designed for the framework of Benin's personal data protection authority (APDP).
Coming
SMS and WhatsApp reminders (Doto Pro). Audit log extended to appointment status changes. Detailed privacy policy and terms of use, being written.
What Doto does not do
Doto stores no medical record, gives no medical advice, sells no data and never shows a consultation reason to a facility's administration.
Frequently asked questions
Where is data hosted?
On servers administered by Ydrus Software in the European Union, with encrypted backups. Pilot sign-ups are stored with Supabase, in Ireland.
Can a facility get a security report?
Yes, on request, during contracting.
What if I lose my phone?
A new code is sent to the verified number; changing number requires double verification.