Dokima

Dokima — Privacy Policy

Effective date: July 22, 2026
Last updated: July 22, 2026

Welcome to Dokima ("Dokima," "we," "our," or "us"). We respect your privacy and are committed to protecting the personal information you share with us.

This Privacy Policy explains how Dokima collects, uses, discloses, stores, and protects information when you visit our website, use our services, participate in verified patient stories, or otherwise interact with us. By using our website or services, you agree to the practices described in this Privacy Policy.

1. Who We Are

Dokima is a service operated by Score Digital LLC (30 N Gould St Ste N, Sheridan, WY 82801, USA). Dokima provides independent, consent-based trust-building services for healthcare practices — verified patient stories, trust profiles, website trust widgets, and related services.

Our mission is to help patients make informed healthcare decisions by publishing authentic, consent-based patient experiences.

Dokima is not a healthcare provider and does not provide medical advice, diagnosis, or treatment. Dokima is not a HIPAA covered entity or business associate; information shared with Dokima is provided voluntarily for the purpose of a public testimonial or a practice's own trust profile, not in the course of receiving medical care, and is not protected health information (PHI) in our hands.

Every practice profile we publish is for a practice that has signed up with Dokima. We do not publish profiles about practices or providers who have not chosen to participate.

2. Scope of This Policy

This Privacy Policy applies to:

It does not apply to third-party websites we link to, each of which has its own privacy practices (see §18).

3. Information We Collect

Depending on how you interact with Dokima, we may collect the following categories of information.

A. Information You Provide

B. Patient Story Information

When participating in a verified patient story, we may collect, with your consent:

Participation is entirely voluntary. Story content may include health-related information you choose to share; we treat this as sensitive personal information (see §8).

C. Practice Verification Information

When a practice signs up, we verify the practice and its credentials so that a profile can be marked "verified." To do this we may look up the practice's own license and credential information in public registries (for example, the NPPES NPI Registry and applicable state licensing boards). We use these lookups only to confirm the credentials of a practice that has chosen to work with us — we do not build profiles from these sources for non-participating practices.

D. Provider-Connected Google Data

If a practice chooses to connect its Google Business Profile via Google OAuth, we import data the practice owns and authorizes us to access — its Google reviews, ratings, and Google-hosted media. OAuth tokens are encrypted at rest and refreshed server-side. A practice can disconnect at any time. See §10 for our Google API disclosure.

E. Billing Information

Dokima is a paid service for practices, billed on a recurring subscription basis. Payments and subscriptions are processed by Stripe, our third-party payment processor. Stripe collects and processes your payment details under its own privacy policy; we receive limited billing details (such as plan, subscription and transaction status, and contact information) and do not store full payment card numbers.

F. Automatically Collected Information

When visiting our website, we may automatically collect: IP address, browser type, device information, operating system, referring website, pages viewed, session duration, clickstream data, cookies, and analytics information.

4. Cookies and Similar Technologies

We use cookies and similar technologies to remember preferences, improve website performance, measure traffic, understand visitor behavior, and enhance security. These include essential cookies required for the site to function and analytics cookies from Google Analytics 4, which helps us understand website usage. Google processes analytics data under its own privacy policy. We have configured Google Analytics to limit data collection, including a 14-month data-retention window and disabling Google's advertising features, and we do not use cookies for cross-site advertising.

We present a cookie notice describing our use of cookies. You can also disable or remove cookies through your browser settings, although some website functionality may be limited. We honor recognized browser opt-out signals, including Global Privacy Control (GPC), which you can use to opt out of non-essential (analytics) cookies.

5. How We Use Information

We use information to: provide our services; produce verified patient stories; verify authenticity and practice credentials; publish practice trust profiles; create website trust widgets; process payments and administer accounts; improve our platform; respond to inquiries and provide customer support; prevent fraud; maintain security; analyze website usage; comply with legal obligations; and enforce our agreements.

We do not sell personal information, and we do not use patient story content to train third-party advertising models.

6. Verified Patient Stories

Verified patient stories are a core part of Dokima's services. Stories are created only with the participant's consent. Depending on the participant's authorization, a published story may include: first name, video interview, photographs, treatment category, patient quotes, interview transcript, verification date, and practice information.

We do not create fictional testimonials or knowingly publish fabricated experiences.

Editing may include trimming, color correction, captioning, audio improvements, formatting, translation, and social-media versions. Editing will not intentionally alter the meaning of a participant's statements.

7. Consent

Where required, we rely on consent to collect and publish patient stories. Participants may withdraw consent at any time by contacting us; on withdrawal we remove the story from the Service.

Withdrawal of consent does not affect processing that occurred before consent was withdrawn and may be subject to contractual or legal obligations, including circumstances where published content has already been distributed or relied upon.

8. Healthcare and Sensitive Information

Dokima is not a medical practice and does not diagnose, treat, or recommend medical procedures. As noted in §1, Dokima is not a HIPAA covered entity or business associate.

Information voluntarily shared by patients is processed solely for verification, storytelling, publication, and related trust-building services. Because patient stories may include health-related details, we treat that content as sensitive personal information and limit its use to the purposes described in this policy. Participants should avoid sharing sensitive medical information they do not intend to appear in their approved story.

Participation in verified patient stories is limited to adults (18 years of age or older). We do not knowingly interview or publish stories featuring minors.

9. Practice Profiles

Healthcare practice profiles published by Dokima — for practices that have signed up — may contain: practice name, doctor information, business address, contact information, treatment specialties, office photographs, verified patient stories, trust indicators, and publicly available business information.

These profiles are intended to help prospective patients better understand participating practices. A practice may request correction or removal of its profile by contacting us; we aim to acknowledge such requests within 5 business days and to resolve them within 10 business days.

10. Google API Services Disclosure

Where a practice connects its Google Business Profile, Dokima's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google-provided data only to provide and improve the practice's Dokima profile features, do not transfer it except as necessary to provide those features or as required by law, and do not use it for advertising. Any Google-sourced content displayed carries the required Google attribution.

11. AI-Assisted Processing

Dokima may use artificial intelligence technologies to assist with video transcription, caption generation, translation, content organization, editing assistance, quality improvement, and search optimization. Where appropriate, AI-assisted outputs are reviewed by humans before publication. We do not make legally significant decisions about individuals solely by automated means.

12. How We Share Information

We may share information with trusted service providers (sub-processors) that help us operate. These providers are permitted to process information only as necessary to provide services to Dokima. Our key sub-processors currently include:

This list may change as our services evolve; a current list is available on request at connect@dokima.co.

We may also disclose information to comply with applicable law, respond to lawful requests from authorities, protect our rights, investigate fraud or misuse, or in connection with a merger, acquisition, financing, or sale of assets.

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.

13. International Data Transfers

Dokima is operated by a US company, and our data is hosted and stored on infrastructure located in the United States (see §12). Our operations and support team is based in India, and authorized personnel there may access and process personal information to provide and support the Service. As a result, personal information may be transferred to, accessed from, and processed in both the United States and India.

If you access the Service from another country, your information will be processed in these locations. Where applicable, we implement appropriate safeguards (such as Standard Contractual Clauses and access controls) designed to protect personal information during international transfers.

14. Data Retention

We retain information only as long as reasonably necessary to provide our services, maintain published content, meet contractual obligations, resolve disputes, comply with legal requirements, and enforce our agreements. Retention periods vary depending on the nature of the information and applicable law. Our general retention periods are:

Where we are required to keep information longer to comply with legal, tax, or regulatory obligations, or to resolve disputes, we retain it for that longer period.

15. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information, which may include encryption, secure cloud infrastructure, access controls, authentication mechanisms, monitoring, and backup procedures. Access to patient story media and practice account data is limited to personnel who need it to operate the Service.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

16. Your Rights

Depending on your jurisdiction, you may have rights to: access your personal information; correct inaccurate information; request deletion; withdraw consent; restrict or object to processing; limit the use of sensitive personal information; request data portability; and lodge a complaint with an appropriate supervisory authority.

To exercise your rights, contact us at connect@dokima.co. We will verify your request and respond within the timeframe required by applicable law.

17. Children's Privacy

Our services are not directed to children, and participation in verified patient stories is limited to adults (see §8). We do not knowingly collect personal information from children. If you believe a child has provided personal information to Dokima, please contact us so we can investigate and, where appropriate, remove the information.

18. Third-Party Websites

Our website may contain links to third-party websites or services (for example, a practice's own website or its page on Google). We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing personal information.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When changes are made, we will revise the Effective Date at the top of this page. Material changes may also be communicated through our website or other appropriate channels.

20. California Privacy Notice

If you are a California resident, you may have rights under applicable California privacy laws, including rights to know, access, delete, correct, and limit certain uses of personal information (including sensitive personal information), subject to applicable exceptions. We honor Global Privacy Control signals (see §4). Dokima does not sell or "share" personal information as defined under applicable California privacy laws.

21. European Privacy Rights

Where the General Data Protection Regulation (GDPR) or similar laws apply, Dokima processes personal information on lawful bases that may include consent, contractual necessity, legitimate interests, and compliance with legal obligations. Patient story content that reveals health information is processed on the basis of the participant's explicit consent, recorded at the time of the interview. Individuals covered by these laws may exercise the rights described in §16.

22. Contact Us

Score Digital LLC (Dokima)
Website: https://dokima.co
Email (privacy requests and general inquiries): connect@dokima.co
Mail: 30 N Gould St Ste N, Sheridan, WY 82801, USA

Please include sufficient information to allow us to verify your identity and process your request.