Entriva — Privacy Notice

Entriva is a patient-intake service operated by Praxiva (Pty) Ltd (CIPC 2026/392940/07). When you complete an intake, the healthcare practice that invited you is the responsible party — it determines how your information is used for your care. Praxiva (Pty) Ltd is the operator— it processes your information on the practice's behalf.

privacy@praxiva.co.za

Personal details, contact details, medical aid information, medical history, and the reason for your visit, together with the clinical summary and ICD-10 suggestions generated from your intake.

We process your information to provide patient intake to your practice, so your practitioner is prepared for your appointment. Health information is processed for the provision of medical treatment by your health professional and with your consent, captured at intake.

We use the following service providers, each bound by data-protection terms:

• Supabase — secure database and hosting; your data at rest is stored in the European Union (Ireland).
• Twilio Inc. — delivery of your intake over WhatsApp (United States). Your intake messages travel over the WhatsApp platform, which you choose to use.
• Anthropic — AI generation of the clinical summary, ICD-10 suggestions, and risk flags (United States).

We do not sell your information or use it for our own marketing.

Your data at rest is held in the EU. AI processing occurs in the US. These transfers are made under POPIA §72 safeguards — our providers are bound by data-processing agreements incorporating standard contractual clauses offering protection substantially similar to POPIA.

Your personal and health information is encrypted at rest (AES-256-GCM) and in transit (TLS). Access is limited to your practice's authorised users, and every action on your data is written to a tamper-evident audit log (POPIA §17 and §19).

Your practice retains your records for at least 6 years, in line with HPCSA Ethical Rule 5 and the National Health Act. Entriva holds them on the practice's behalf and deletes or returns them on the practice's instruction.

You may request access to, correction of, or deletion of your information. Contact your practice, or privacy@praxiva.co.za. You may also lodge a complaint with the Information Regulator of South Africa.