1. Everything clinical stays ON YOUR PHONE, encrypted: patients, consult notes, prescriptions, sick notes, referrals, invoices, your CPD logbook, the dispensing register and your proof log. None of it is uploaded to us. We hold only your account (email, HPCSA number) and your subscription — so we cannot read your records, and we cannot restore them for you if the phone is lost. Your backup is the only copy that can.
2. The one thing that leaves the phone is a patient you deliberately share with a practice team — and that copy is end-to-end encrypted, readable by your practice and by nobody else, including us.
3. Open Account → “Backup, export & restore”. One tap creates four files: an encrypted .ppbackup (the only one the app can restore from), a patients spreadsheet (.csv), a consultation-notes spreadsheet (.csv) and a full records PDF you can read with no app at all. Each file is offered in its own share sheet — if one does not appear, tap Share next to that file on the backup screen.
4. Choose a strong passphrase — only it can open the backup, and nobody can recover a forgotten one. Save the files in more than one safe place (cloud drive AND an email to yourself).
5. YES, your proof log is in the backup. The whole tamper-evident issuance ledger travels with it, hash chain intact.
6. On a new phone: install PracProof, sign in with your usual email, open Account → Backup, type the passphrase and tap “Choose file & restore”. Do this BEFORE you issue any document on the new phone — the proof log only restores onto a phone that has no ledger of its own yet, because two hash chains cannot be merged without destroying the tamper-evidence.
7. Two things do not come across, by design: your NHLS Labtrak login (reconnect it under Account → NHLS Labtrak login) and your document signing key (the new phone makes a fresh one; every document you already issued still verifies from its own QR code). Restoring only ADDS records — it never overwrites or deletes anything already on the phone.
8. If you run a practice, the backup also carries your practice keys, so a solo practice can be recovered onto a replacement phone. Keep your practice recovery code as well — it is the other way back in (Practice screen → “Show recovery code”).
9. The HPCSA expects records kept for at least six years — back up regularly (e.g. every Friday) so your phone is never the only copy.