Draft pending review by counsel. This text has not yet been reviewed by a lawyer and may change before it takes effect.
Veripres shows your health information to a doctor, clinic or pharmacy only when you say so. This page explains the permissions we ask for, the three ways to share, and how to stop.
The four permissions
When you sign up, we ask for four permissions, each with its own tick box. Only the first is required. You can change any of them later in the Consent centre.
1. Store my health record on Veripres (required)
This lets us keep your health record for you: your details and health profile, the documents you upload, visit notes from doctors, your prescriptions and what pharmacies gave you. Without it, Veripres cannot work for you.
If you later turn this off, your record is paused straight away. All sharing stops, and no doctor, clinic or pharmacy can be given access. Pausing does not delete anything. To delete your data, ask for deletion in the Consent centre.
2. Let doctors see my record when I approve or confirm an appointment (optional)
This allows you to share your record with doctors. It does not open your record by itself. A doctor can see it only after you share it in one of the three ways below.
When a doctor can see your record, they see all of it: visit notes from every clinic, conditions, allergies, medicines, vital signs, documents, prescriptions and what pharmacies dispensed. You cannot share only part of it. While they have access, the doctor can also add visit notes, documents and prescriptions.
If you say no, doctors cannot see your record through Veripres, even if you show your card. You can still book appointments.
3. Let pharmacies see my prescriptions when I approve (optional)
This allows you to share your prescriptions with a pharmacy. It opens nothing by itself.
A pharmacy sees only your active prescriptions: the medicines, the prescribing doctor and their registration number, and your name and age. It sees past prescriptions only if you tick "also share past prescriptions" when you share. It never sees your visit notes, diagnoses, symptoms, vital signs or documents. When it dispenses, it adds what it gave you to your record.
If you say no, pharmacies cannot open your prescriptions through Veripres. You can still show the PDF of your prescription at any pharmacy.
4. Use anonymised, aggregated usage data to improve the pilot (optional)
This lets us learn from how the app is used, for example which steps people find confusing. We count events, such as finishing sign-up, without your name, Veripres ID or health details, and we look only at totals across many people. If you say no, we leave your activity out. Veripres works the same either way.
Three ways to share
You decide each time. Your Veripres ID (it looks like VP-XXXX-XXXX) works like a username. It is safe to show, and on its own it opens nothing.
1. Show your Live QR
Tap "Show my Veripres card" in the app. Your card shows a QR code that changes every 30 seconds. Each code works only once and expires after 90 seconds. The clinic or pharmacy scans it, and sharing starts. If you last signed in more than 12 hours ago, the app may ask you to confirm with your passkey or a one-time code first.
At a pharmacy, you can tick "also share past prescriptions" before you show the code.
2. Give your Veripres ID, then approve
The clinic or pharmacy types in your Veripres ID. You get a request in the app, for example: "City Pharmacy wants to see your active prescriptions for 10 minutes". Tap Approve or Decline. If it is a pharmacy, you can tick "also share past prescriptions" when you approve.
We also send a one-time code to your own phone or email. If you prefer, read the code out to the person in front of you instead of approving in the app. The request expires after 10 minutes if you do nothing.
Only give a code to the doctor, clinic or pharmacy you are dealing with at that moment. Our staff will never ask you for one.
3. Confirm an appointment
When you book an appointment, or confirm one that a clinic booked for you, the confirm screen tells you exactly what you are agreeing to. For example:
Dr. Mehta will be able to see your health record from 30 minutes before to 2 hours after your appointment.
Confirming gives that doctor, and only that doctor, access for that time. If permission 2 is off, the doctor does not get access. If the clinic booked the appointment for you, you can confirm it in the app or by reading out a one-time code at the desk.
The clinic's reception can then see your name, age, sex and phone number, and your appointments at that clinic, so that they can manage your visit. Reception never sees anything clinical.
How long sharing lasts
| Who | What they see | For how long |
|---|---|---|
| The doctor of your appointment | Your full health record | From 30 minutes before the appointment to 2 hours after it ends |
| A doctor you see without an appointment | Your full health record | 90 minutes |
| A pharmacy | Your active prescriptions (past ones only if you ticked the box) | 10 minutes, or until it finishes dispensing |
| Clinic reception | Your name, age, sex, phone number and appointments at that clinic | Until 12 hours after the appointment ends, or 15 minutes when you share at the desk |
When the time is up, access ends by itself.
How to stop sharing
You can stop any sharing at any time:
- While it is happening. Your Veripres card shows who you are sharing with and until when, for example "Shared with City Pharmacy until 4:42 PM". Tap Stop sharing.
- From the Consent centre. See everything that is shared right now, and stop any of it.
- Before an appointment. Cancel the appointment, or turn off permission 2.
- For all doctors or all pharmacies. Turn off permission 2 or permission 3. This ends all sharing of that kind and blocks new sharing until you turn it back on.
When you stop sharing, access ends straight away, and your record closes on the other person's screen within a few seconds. Stopping cannot undo what someone has already seen or written down.
What your access log shows
Your access log lists every time a doctor, clinic or pharmacy was given access to your information. It reads like a bank statement. Each entry shows:
- Who: the clinic, its reception desk or the pharmacy, and for an appointment, the doctor.
- What: what they could see, in plain words, for example "your active prescriptions".
- How: for example "You showed your Veripres card", "You approved a request in the app", "You read out a one-time code" or "You confirmed an appointment".
- When: when access started and when it ended.
- What was opened: for example "your allergies" or "your visit notes".
- Status: live, scheduled, ended, stopped by you, or used (a pharmacy finished dispensing).
Entries appear the same day, usually straight away. The log is append-only: new entries are added, existing entries cannot be edited, and nothing is removed while your account is open.
If you do not recognise an entry, tap "I don't recognise this". The entry is marked as reported and flagged to the Veripres team. You can also contact our Grievance Officer.
Changing your mind
You can turn any permission on or off at any time in the Consent centre. Turning one off does not undo sharing that already happened. We keep a record of each permission you give or withdraw, with the date and the version of our Privacy Notice, so that we can show what you agreed to.