How TouristDr protects your information and uses AI technology
At TouristDr, your trust is the foundation of our service. This page answers the most important questions about how we protect your data and how we use AI. For full details, see our Privacy Policy.
Data Security
Is my information safe with TouristDr?
Yes. Sculpté AB protects your data with technical and organisational security measures appropriate to the sensitivity of healthcare information. These include strong encryption for data in transit and at rest, strict role-based access controls, continuous security monitoring, and regular security assessments. All clinical staff are bound by professional confidentiality under Patientsäkerhetslagen 2010:659.
Where is my data stored?
Your medical records and clinical data are stored exclusively within the EU/EEA on security-certified infrastructure. Non-clinical data such as payment references may involve processors with US operations (Stripe), but all such transfers are conducted under EU-approved safeguards.
Are my video consultations recorded?
No. Video consultations via Whereby are not recorded. No audio or video is retained after the session ends. Written chat exchanges within the consultation interface may be saved as part of your consultation record.
Who can access my medical records?
Access is strictly limited to: the licensed physician conducting your consultation; Sculpté AB administrative staff with a documented need; and you, via your account. TouristDr does not connect to Swedish national record-sharing systems (NPÖ, NLL).
What happens if there is a data breach?
In the event of a security incident posing meaningful risk to you, we are legally required under GDPR to notify the Swedish Data Protection Authority (IMY) within 72 hours and to notify you directly without undue delay.
AI
Does TouristDr use AI?
Yes, in one specific and clearly defined way. TouristDr offers an optional AI-assisted medical history intake that you may choose to activate before your consultation. This feature uses automated processing to collect and structure the symptoms and background information you enter.
What does the AI actually do?
The AI intake asks you structured questions about your symptoms, duration, medical history, current medications, and allergies, then organises your answers into a summary for the physician. It does not access any external data about you.
Does the AI diagnose me or make clinical decisions?
No — never. The AI feature has no clinical function. Every clinical decision — diagnosis, prescription, referral, treatment recommendation — is made by the licensed physician who reviews your AI-structured summary independently.
Will I always know when I am interacting with an automated system?
Yes. The AI-assisted intake is clearly labelled as an automated feature. This is both a legal obligation under the EU AI Act (Regulation (EU) 2024/1689) and a commitment we consider fundamental to patient trust.
Does TouristDr use AI for triage or access decisions?
No. TouristDr does not use AI to decide whether you can access a consultation, to triage or prioritise your case, or to make any decision that affects your access to care.
Is my data used to train AI models?
No. Your personal data is not used to train AI models, improve third-party AI products, or for any secondary commercial purpose. All AI technology vendors are contractually prohibited from using patient data for model training.
How do you ensure the AI is safe in a medical context?
Before any AI feature is deployed, Sculpté AB conducts a structured assessment covering: technical review of the AI vendor; patient safety and medical quality risk assessment; realistic use-case testing; and evaluation against applicable legal requirements including the EU AI Act.
What legal framework governs your use of AI?
Sculpté AB's AI use is governed by the EU AI Act (Regulation (EU) 2024/1689), GDPR, and, where applicable, the EU Medical Device Regulation (MDR). We classify AI systems by risk level and apply controls proportionate to that classification.
Your rights and questions
Can I opt out of the AI-assisted intake?
Yes. The feature is optional and requires explicit consent. You may skip it and proceed directly to a standard consultation. Withdrawal does not affect your access to care.
How do I contact you about data security or AI?
Contact us at privacy@mindr.se. We aim to respond within 5 working days. For formal data subject rights requests, see our Privacy Policy, Section 9.