Intended Purpose Statement

DoctoPal is an AI-powered web application providing health information based on scientific literature (PubMed, NIH, Europe PMC).

DoctoPal's intended purpose is EXCLUSIVELY health information:

• Drug-herb interaction information (with scientific references)
• General health information
• User health profile management (medication list, allergies, chronic conditions)
• SBAR report generation for doctor visits
• Herbal product information based on scientific research references

DoctoPal does NOT and is technically prevented from:

• Diagnosing diseases
• Recommending treatments or creating treatment plans
• Writing prescriptions or determining medication dosages
• Providing clinical decision support
• Providing remote healthcare (telemedicine) services
• Practicing traditional and complementary medicine (GETAT)
• Interpreting medical imaging for definitive diagnosis
• Recommending emergency medical intervention (except 112 referral)

DoctoPal is NOT a medical device under the Medical Device Regulation (02.06.2021, Official Gazette 31499). Rationale:

• Medical device: product "designed for diagnosis, treatment, or prevention"
• DoctoPal is not designed for diagnosis, treatment, or prevention
• Per MDCG 2019-11: "If manufacturer's intended purpose is only information, it is not a medical device"
• DoctoPal's intended purpose is information — not clinical decision support

DoctoPal uses a 9-layer security architecture:

1. Emergency detection and 112 referral
2. Drug interaction engine (OpenFDA + AI)
3. Scientific source verification (PubMed RAG)
4. Algorithmic safety (contraindications, dosage limits)
5. KVKK prompt anonymization (no identity data to AI)
6. Prompt injection protection (jailbreak prevention)
7. 4-layer output filter (diagnosis → informational, prescription → research reference)
8. AI disclaimer + KVKK Art.11 objection mechanism
9. Privacy notice / consent separation (KVKK 2026/347 decision)

DoctoPal complies with:

• KVKK (Law 6698) — Articles 3, 5, 6, 7, 9, 10, 11, 12, 16
• KVKK Decision 2026/347 on privacy notice separation
• KVKK Generative AI Guide (November 2025)
• Turkish Criminal Code Art.90, 134-136
• Law 1219 Art.1, 25 (medical practice licensing)
• Remote Healthcare Services Regulation (out of scope — information tool)
• Medical Device Regulation (out of scope — intended purpose: information)
• Traditional and Complementary Medicine Regulation (out of scope)
• Turkish Consumer Protection Law (service definition: information, not healthcare)