Terms of Service

1. Identification of the Parties

This document sets forth the Terms of Service of the Dopu platform, owned and operated by:

Hereinafter referred to simply as "Dopu", "the Platform", "we" or "our".

2. Object

Dopu is a management platform for psychologists and psychology clinics that provides:

• Patient and registration management
• Appointment and session scheduling
• Electronic medical records compliant with CFP standards
• Recording of clinical evolutions
• Issuance of clinical documents (declarations, certificates, reports)
• Financial control and billing
• Reports and statistics

3. Acceptance of the Terms

By accessing, registering or using the Dopu platform, you ("User") declare to have read, understood and fully agreed with these Terms of Service, as well as with our Privacy Policy.

If you do not agree with any provision of these Terms, please do not use the platform.

4. Registration and Account

4.1. Requirements

To use the platform, the User must:

• Be at least 18 years old or civilly emancipated
• Hold an active registration with the Regional Council of Psychology (CRP), when applicable
• Provide truthful, complete and up-to-date information
• Keep their access credentials confidential

4.2. Account Responsibility

The User is fully responsible for all activities carried out under their account, and must immediately notify Dopu in case of unauthorized use or any security breach.

5. User Obligations

The User agrees to:

• Use the platform ethically and in accordance with applicable legislation
• Observe the Brazilian Psychologist's Professional Code of Ethics (CFP Resolution No. 010/2005)
• Comply with the Brazilian Federal Council of Psychology rules on medical records (CFP Resolution No. 001/2009)
• Ensure the confidentiality and secrecy of their patients' information
• Not share access credentials with third parties
• Not use the platform for illicit or unauthorized purposes
• Not attempt to access restricted areas or data of other users
• Maintain their own backup of data critical to their professional activity

6. Intellectual Property

All intellectual property rights over the Dopu platform, including but not limited to software, design, brand, logos, texts and other elements, are the exclusive property of Dopu or its licensors.

The User receives a limited, non-exclusive, non-transferable and revocable license to use the platform under these Terms, acquiring no ownership rights over it.

Data entered by the User (patient records, medical records, documents) remains their property and responsibility.

7. Plans and Payment

7.1. Available Plans

Dopu offers different subscription plans, whose features, limits and prices are described on the pricing page of the website. Plans may be changed with 30 (thirty) days' prior notice.

7.2. Billing and Renewal

Subscriptions are billed on a recurring basis (monthly or annually, at the User's choice) and renewed automatically unless previously cancelled by the User.

7.3. Cancellation

The User may cancel their subscription at any time through the account settings. Access will remain active until the end of the period already paid. There is no proportional refund for unused periods, except as provided in the Brazilian Consumer Defense Code.

8. Service Availability

Dopu undertakes to use its best efforts to keep the platform available 24 hours a day, 7 days a week. However, scheduled maintenance interruptions or unscheduled ones due to technical reasons or force majeure may occur.

Scheduled maintenance will be communicated at least 24 hours in advance and preferably performed during low-usage periods.

9. Limitation of Liability

Dopu shall not be liable for:

• Content entered by Users on the platform
• Inappropriate use of the platform by the User
• Clinical decisions made based on platform information
• Interruptions arising from acts of God or force majeure
• Internet connection failures or User infrastructure issues
• Data loss arising from User action or omission
• Indirect, incidental, special or consequential damages

In any event, Dopu's total liability shall be limited to the amount paid by the User in the last 12 (twelve) months of subscription.

10. Suspension and Termination

Dopu reserves the right to suspend or terminate the User's access, without prior notice, in the following cases:

• Violation of these Terms of Service
• Illegal or unethical conduct
• Default exceeding 30 (thirty) days
• Judicial or administrative determination
• Risk to the security of the platform or other users

10.1. Effect on Clinical Records

Terminating the account revokes access to the platform but does not delete clinical records. The professional has a legal duty to retain the patient record — a minimum of 5 (five) years under art. 4, §1 of CFP Resolution 001/2009 — and Dopu keeps those records in custody for the periods stated in the Privacy Policy, item 6.3. Deleting them when the subscription ends would put the professional in breach before the Council.

The professional may export their data at any time through the platform while the account is active and, after termination, by request to the Data Protection Officer (dpo@dopuapp.com). The current scope of that export and its planned extension are set out in item 13 of the Privacy Policy; a request to the Officer reaches the full record set in any case.

Non-clinical data — professional registration details, billing, and navigation logs — follow their own retention periods in item 6.3 of the Privacy Policy, after which they are deleted.

10.2. Access During Suspension

Where access is suspended for non-payment, Dopu guarantees the professional, upon request, read-only access to and export of the clinical records under their responsibility. The legal duty of retention and the patient's right of access (art. 5, II of CFP Resolution 001/2009) cannot be withheld over a billing dispute.

11. Changes to the Terms

Dopu may modify these Terms at any time. Substantial changes will be communicated at least 30 (thirty) days in advance via email or platform notification.

Continued use of the platform after the changes take effect constitutes acceptance of the new Terms.

12. General Provisions

12.1. Entire Agreement

These Terms, together with the Privacy Policy, constitute the entire agreement between the parties, replacing any prior understandings.

12.2. Severability

The eventual invalidity of any provision shall not affect the validity of the remaining ones.

12.3. Tolerance

Tolerance regarding the breach of any obligation does not imply waiver of the right to enforce it later.

13. Processing of Personal Data

This section governs Dopu's processing of the personal data the User enters into the platform — in particular their patients' data — and forms part of these Terms for the purposes of art. 39 of Lei nº 13.709/2018 (LGPD).

13.1. Roles of the Parties

For patient data, the User is the controller — they decide what data to collect, for what purpose, and for how long — and Dopu is the processor, processing it on the User's behalf and under their instructions. For the User's own account data, Dopu is the controller.

13.2. Dopu's Obligations

• Process the data solely to deliver the contracted service and under the User's instructions, never for a separate purpose of its own.
• Not use clinical content, recordings, transcripts, or notes to train, fine-tune, or evaluate artificial intelligence models — its own or third parties'.
• Bind everyone with access to the data to confidentiality, and keep that access to what is strictly necessary.
• Apply the technical and administrative measures described in item 6.2 of the Privacy Policy.
• Assist the User in responding to data subject requests and to the Brazilian data protection authority (ANPD).
• On termination, handle the data as set out in items 10.1 and 14 of these Terms.

13.3. Incident Notification

On becoming aware of a security incident that may pose relevant risk or harm to data subjects, Dopu will notify the User without delay, by email and by in-app notification, stating the nature of the data affected, the subjects involved, the measures taken, and the risks identified. The notice exists so the User, as controller, can meet their duty under art. 48 of the LGPD toward the ANPD and the data subjects.

13.4. Sub-processors

Dopu relies on third parties to deliver the service — hosting, database, messaging, payments, and monitoring. The full list, with what each one receives and where the data sits, is published on the Sub-processors page and kept current. Material changes will be announced at least 30 (thirty) days in advance. Dopu is answerable for its sub-processors' acts as if they were its own.

That page also serves the User in meeting art. 7, II and sole paragraph of CFP Resolution 09/2024, which requires the contract with the patient to specify the technological resources used and which of them safeguard confidentiality.

14. Discontinuation of the Service

Dopu may discontinue the platform, in whole or in part, upon 90 (ninety) days prior notice given by email and by in-app notification.

During the notice period the professional may export, at no cost, the full set of records under their responsibility — including patient records, session notes, and clinical documents — in an open, machine-readable format.

The custody described in item 10.1 ends upon delivery of the records. Note that the legal duty of retention has always been the professional's: under art. 4, caput of CFP Resolution 001/2009, custody of the documentary record is the responsibility of the psychologist and/or the institution where the service was provided. Dopu provides technical custody as part of the contracted service; it does not hold the duty itself. Once custody ends, that duty is exercised by the professional over the delivered copy, who is responsible for confidentiality and for the patient's right of access.

30 (thirty) days after the service is effectively discontinued, Dopu will permanently and irrecoverably delete any remaining clinical data, save for a court order or a determination by a competent authority to the contrary. Failure to retrieve the records within the notice period neither extends the custody nor transfers the duty of retention to Dopu.

15. Governing Law and Jurisdiction

These Terms are governed by the laws of the Federative Republic of Brazil, in particular:

• Law No. 10.406/2002 (Brazilian Civil Code)
• Law No. 8.078/1990 (Consumer Defense Code)
• Law No. 12.965/2014 (Internet Civil Framework)
• Law No. 13.709/2018 (General Data Protection Law - LGPD)

The forum of the District of São Paulo/SP, Brazil, is hereby elected to settle any disputes arising from these Terms, with waiver of any other, however privileged it may be.

16. Contact

For questions, suggestions or requests related to these Terms: