Workshop 02 · Users, problems & scope

SwissDnaCode — scope summary

A shared record of the decisions made in the second workshop — pricing model, platform shape, MVP scope, data residency, and how the two bots and the prototype evolve before development begins.

SwissDnaCode · Mendelio From open questions to MVP decisions Completed

Executive summary

What we decided. The credit-based usage model is dropped in favour of fixed-price products with an internal blended calculation. Version 1 ships as a mobile-optimised web app — a native wrapper is a later option. Both the customer bot and the doctor bot are part of the MVP from day one, sharing the same data basis but with separate chat histories.

The central USP. Data stays in Switzerland for every customer, regardless of location. This is now a hard requirement that constrains LLM selection — Swiss hosting (Google Cloud Zürich, a Swiss provider, or an on-prem open-source LLM) is the only acceptable path. Cost is still a black box: optimise for margin at scale, not at the start.

What we need from you. Decide which sensitive content the customer bot should restrict, confirm the medication list and active substances, and review the updated Workshop 1 minutes. The prototype extension begins on Monday with an MVP/Vision toggle for clean separation.

Scope overview

A three-column read-out of everything Workshop 2 settled — what ships in V1, what waits for the Vision phase, and what is explicitly out of scope.

In V1 / MVP

  • Web-first app, mobile-optimised, UI styled like a native app
  • Customer bot — login + ability to ask questions
  • Doctor bot for Dr. Farkas
  • Admin area with patient file
  • Three roles — doctor, admin, client
  • Intro / explainer videos for DNA sample collection

Vision / later phase

  • Native app (App Store / Play Store download)
  • Save & retrieve content (menus, training plans, summaries)
  • Automated lab connection (expansion)
  • Fully automated onboarding (no invitation required)
  • Therapist role
  • Extended learning videos

Not included

  • Credit-based usage (rejected)
  • Data migration of the 10 existing clients
  • Sale of supplements & creams
  • Category tabs (Sleep, Nutrition, Fitness, Supplements)

Pricing & billing model

Credit-based usage is dropped — credits are not tangible for end customers and distract from the core value. The platform now presents fixed-price products to clients.

Customer-facing model. Fixed-price products only. No credit display, no top-ups, no per-message metering.

App download free, AI behind payment. The app is downloadable at no cost — AI usage unlocks only after direct payment to SwissDnaCode. Payments never run through the app stores.

CHF cost basis follows the LLM choice. Once the LLM is picked, Mendelio calculates AI usage + cloud costs in CHF so SwissDnaCode has a defensible basis for the fixed prices.

Exact fixed-price tiers — to define once the LLM is chosen and the CHF cost basis lands

Web vs. native app

Version 1 ships as a mobile-optimised web app — strictly web — and its UI is styled to look like a native app. A true native app is a follow-up step that only makes sense when the financial case justifies it. The architecture below is set up so the later native build is faster and cheaper.

MVP · NOW

Mobile web, styled native

Phone-optimised web app. UI looks like a native app. One codebase. Instant updates.

PHASE 2

Native app

Frontend only inside the native shell; backend logic stays remote and is consumed via API.

Architecture choice now, native path later: the frontend technology is picked already in V1 so the future native build can reuse it — the native app then carries only the frontend, with the backend reached through the same API the web app uses.

No URL to type — desktop and mobile: the customer should launch via an icon or button on either device, never by opening a browser and typing an address.

Data sharing & consent (doctor access)

Consent for sharing customer data with the doctor is captured as early as possible, during onboarding. It is a mandatory statement — not an optional question — and the user cannot proceed without it. Because it's mandatory at onboarding, the platform avoids repeated per-upload prompting later in the chat.

Onboarding consent — mandatory statement. "First Steps" includes a binding data-sharing statement covering doctor-bot access to all uploaded data. Without consent, no proceeding — and no meaningful analysis from Dr. Farkas is possible.

Parallel attachment. Customer uploads automatically appear in the doctor bot, attached to the patient. The data flows once, not twice.

Chat stays private. The customer's chat conversation is not shared. Only documents and findings cross the boundary into the doctor bot's context.

Privacy line: the customer's chat history with their bot is theirs alone. The doctor's chat history contains only the doctor's questions. A customer should never feel that what they typed conversationally is read by the team.

Doctor bot and customer bot — both in the MVP

Both bots ship in the first release. They share the same underlying data basis but maintain separate chat histories and produce different kinds of answers — medical depth for the doctor, reduced and safe guidance for the customer. The doctor bot is accessible directly from the patient detail page.

Customer bot MVP

  • Login + ability to ask questions — the basic functions must be there
  • Reduced medical statements, with phrasing like "we've already discussed this"
  • Refers to Dr. Farkas for therapeutic questions
  • Chat history is private to the customer

Doctor bot MVP

  • Full medical statements, including correlations
  • History contains only Dr. Farkas's own medical questions
  • Accessible directly from the patient detail page
  • Patient uploads attach automatically once consented

Internal V1 sequence — doctor first, customer fast-follow

Within V1 itself, Dr. Farkas gets her bot first — the priority is to put a working chatbot in her hands as quickly as possible. Customer login is not yet relevant in that very first step.

Then, still in V1: the customer-side minimum lands — at least a web login where the customer can ask questions. Everything beyond that is added incrementally on top of the same V1 surface.

Same data basis, two interfaces. The doctor bot is the medically open assistant; the customer bot is the supervised, safer variant — both running on the same uploaded findings. Clean separation between them is mandatory.

Medication list & DNA-based recommendations

Medication recommendations are driven by the customer's DNA. Because Germany, Switzerland, and Austria use different product documents and brand names, the logic runs over active substances (Wirkstoffe) rather than the broader ingredient lists (Inhaltsstoffe) — active substances are unambiguous across borders.

Active-substance basis

  • CH / DE / AT product names differ — active substances are stable
  • SNP correlations map cleanly to substances, not brand SKUs
  • Reduces churn when product portfolios change

Wirkstoffe vs. Inhaltsstoffe

  • Wirkstoffe — pharmacologically active substances; what the recommendation engine indexes
  • Inhaltsstoffe — the full ingredient list including excipients and carriers; not used for matching
  • Selection of medications and active substances to be defined
Medication selection + the active-substance set — to define from a clinical perspective

Products, shop & fulfillment

Physical supplements and creams will not be sold directly on the platform — they are too sensitive to bundle with medical guidance. Printed reports are fine. An affiliate link to a supplement shop (commission, possible first-order discount) is acceptable as long as the storefront sits outside the platform itself.

In scope for MVP

  • DNA & blood findings — manual upload by the customer
  • Printed reports as a paid product
  • Doctor / admin-triggered internal orders (overview before public rollout)

Vision — not in MVP

  • Affiliate link to an external supplement shop
  • Direct supplement / cream storefront on-platform
  • Automated DNA test-kit fulfillment (Progenom integration already exists)

First step on orders: the doctor or admin internally triggers product orders, so SwissDnaCode keeps the overview before the function is exposed to end customers.

Swiss data residency & LLM hosting — the central USP

Data must stay in Switzerland for every customer — this is the most important USP. The requirement constrains LLM choice: any model that cannot keep data in CH is out. Once that constraint is locked, we then choose the LLM that fits the project best.

Phased direction

  • Long-term: open-source LLM, locally installable — accepts the ongoing update workload as the trade-off for full control
  • Short-term: Chris recommends starting with a common online LLM, because the cost of the local setup is still unclear for SwissDnaCode
  • Final LLM choice still open — driven by quality fit and the CH-residency constraint

LLM options on the table

  • Google's medical LLM — configurable so no data is used for further training (contractual)
  • Microsoft Azure Cloud
  • Open-source LLM with local install + service contract for updates

Cost vs. quality: cost is still a black box. The approach is to not optimise for cost at the start — pick the model that delivers quality and optimise margin later at scale.

LLM selection — Mendelio prepares a positive / negative comparison and provides candidates; SwissDnaCode tests with real DNA / blood findings

Migration of the existing ~10 clients

Dr. Farkas does not want to bring the 10 existing clients across. The new bot will intentionally answer differently — more medical and doctor-led than the lifestyle tone of the old one. The chosen path is to inform existing customers and let them prepare with some input of their own, rather than try to migrate transcripts.

No data migration. Existing chat histories stay on ChatGPT. The new platform is a fresh start.

Inform existing customers. Customers are told that a better AI is available and that it will give somewhat different answers — more medical, doctor-led.

Customers prepare with some input. Each carry-over customer is asked to contribute the preparation input themselves; continuity is bridged through that input, not through old transcripts.

One IT professional — free access. One existing client — an IT professional — gets free access as an intensive user so SwissDnaCode gathers good early feedback.

How many of the 10 will continue is still open. Treat each as a re-acquisition rather than a guaranteed carry-over.

Prototype refinements — UI changes for Monday

Each role (Super-Admin, Arzt-Admin, patient) gets its own settings — the current admin view is symbolic and will be split out. The patient detail becomes the working surface for doctors: findings, patient context, and the doctor bot all live in one place, with no switching between views.

Doctor side

  • Patient list with search — essential at scale
  • Patient detail = central file ("one universe per patient") — findings, context, and the doctor bot all inside it
  • Three standalone tabs removed: "Patient detail", "Doctor bot", and "All findings" — all folded into the patient file
  • Each role has its own settings (V1 symbolic)

Customer menu V1

  • Dashboard
  • First Steps (with doctor data-sharing consent)
  • DNA Chat Bot
  • My Findings
  • Settings

Notifications — pending SwissDnaCode confirmation (decided out in the latest review; still listed as a clarification item).

Academy / videos: the "Academy" area may be renamed initially since it carries only intro / explainer videos at first — covering DNA sample collection and how the whole system works. Extended learning videos arrive later. Implementation choice: Memberspot.de API integration or a self-coded basic version.

Not in V1: the category tabs (Sleep, Nutrition, Fitness, Supplements). These return in later phases once the V1 surface is stable.

Specific fields of the customer registration form — to define by SwissDnaCode

Bot restrictions, hallucinations & prompting strategy

The main complaint about today's ChatGPT bot is that it hallucinates, intermittently stops accessing stored data, and gets erratic under intensive use. The new platform must contain this. Restrictions are partly LLM-dependent — the chosen model self-restricts on medical advice — but the strategy does not rely on base settings alone.

Negative-prompt layer

  • Explicit list of restricted responses, layered on top of the LLM
  • Stays in our control when model updates change behaviour
  • Built after the LLM is chosen — test, collect good refusals, copy/adapt
  • Tightened actively where the model is too open

Storage & categorisation

  • Store questions, answers, and summaries
  • Tag by category: sleep, weight, stress, sport…
  • AI reads prior summaries first — long-term answer stability
  • Categories confirmed jointly with SwissDnaCode (clinical view)
Question categories (sleep/weight/stress/sport…) — SwissDnaCode to confirm and expand from a clinical perspective

Architecture & role extensibility

Three roles ship in the MVP: doctor, admin, and client. They are designed so additional roles can be added later without a rewrite — expanding the role model after the fact is costly. The doctor and admin roles are kept as separate concepts from day one, so a doctor can advise without holding admin privileges.

Doctor. Clinical answers, full medical context, doctor-bot access. Can assign Admin and Client roles.

Admin. Separate from doctor. Manages users and configuration. Can assign a second Admin. Differentiated in V1 into Super-Admin and Arzt-Admin.

Client. Own bot, own findings, private chat history.

Therapist role — Vision, not MVP: external therapists arrive in a later phase, slotting into the same model without breaking the doctor / admin separation already in place.

Success metrics & retention strategy

"Done" for V1 is defined by four unified criteria. They tie the technical quality of the AI to the business signals that show the platform actually working for customers.

Accurate AI answers. The chatbot reliably delivers correct, on-data answers — across normal and power-user load.

Revenue visibility. It's clear how much revenue the software itself can generate.

Positive customer feedback. Customers actively report that the platform helps them.

3-month re-booking. Customers re-book after three months and continue with the platform.

Staged feature release as a retention lever

Features unlock per user on a time basis — the customer starts with 2 features, gets +1 after one month, another after two months, and so on. The price stays the same; the platform grows around the customer.

Plus general features for everyone: a baseline set of features is available to every customer regardless of tenure — the staged plan layers on top of that baseline, not in place of it.

Why it works: avoids onboarding overwhelm, gives the sales narrative a phased plan, smooths quality risk (no flood of simultaneous "talk to a doctor" requests when everyone hits the same restriction at the same time), and creates a long-term reason to stay.

Feasibility of time-based, per-user feature unlocking — Mendelio to validate internally

User problems & everyday expectations

The core motivation is to live healthier and optimise daily life based on DNA. Customers expect everyday answers tied to their genetics, plus the ability to save useful results and come back to them later.

Nutrition & menus. Carb-vs-fat metabolism guides daily eating — the bot suggests dishes that fit.

Sport & training. Matching training type to genetic predisposition — endurance vs. strength bias.

Weight. Tied to metabolic SNPs; targeted goals over generic calorie counting.

Doctor-bot value. Efficiency and complexity-handling — summarising many findings and correlations to deliver better care on a shared data basis.

Workshop 2 deliverables & next step

This summary captures every decision and open question from the second workshop. Prototype extension begins on Monday in parallel with the LLM and cloud-cost research.

Scope summary — decisions & open points (this document)
CHF cost basis — AI & cloud costs (once the LLM is chosen)
LLM positive / negative comparison + test candidates
Extended prototype in two variants (MVP + Vision) — rollout begins Monday
Workshop 3 agenda (AI requirements & behaviour)

SwissDnaCode — to-dos

  • Provide change requests and the final wording so the MVP is set up correctly
  • Decide which sensitive content the customer bot should restrict
  • Define the medication list and active substances (clinical view)
  • Confirm and expand the question categories with Dr. Farkas (sleep / nutrition / stress / sport …)
  • Define the specific fields of the customer registration form
  • Confirm whether "Notifications" stays in the V1 customer menu

Mendelio — to-dos

  • Extend prototype from Monday in two variants — MVP and Vision — with all changes integrated in parallel
  • LLM / cloud research with a positive / negative comparison; deliver test candidates
  • Calculate AI & cloud costs in CHF once the LLM is chosen
  • Validate time-based, per-user feature unlocking
  • Technical concept for storing Q&A summaries by category — stable long-term answers
  • Work internally toward the V1 offer

Workshop 3 — AI requirements & behaviour

The next workshop steps into the AI design itself: what the assistant does, what it refuses, how it uses the customer's data, and what guardrails apply — before any technical decisions on model and infrastructure are finalised.

Meeting 05 · Behaviour & refusals

  • Where exactly are the lines between customer-bot and doctor-bot statements?
  • The negative-prompt list — what does the customer bot always refuse?
  • Standard refusal copy that refers to Dr. Farkas
  • Categorisation rules: how questions are tagged and stored
  • How prior summaries feed the next answer
60–120 MIN · ONLINE

Meeting 06 · LLM choice & data flow

  • Walkthrough of the candidate LLMs with test results
  • Confirm Swiss data residency for each candidate
  • Local vs. cloud decision tied to the chosen model
  • Data flow from upload → doctor bot → customer bot
  • Audit trail & consent enforcement at the LLM boundary
90–150 MIN · WORKSHOP
AI behaviour spec (statements, refusals, escalation paths)
Negative-prompt layer — first version
LLM recommendation with CH-residency confirmation
Workshop 4 agenda

Abbreviations

APIApplication Programming Interface
CHFSwiss Franc (currency)
FADPFederal Act on Data Protection (Switzerland)
GDPRGeneral Data Protection Regulation (EU)
LLMLarge Language Model
MVPMinimum Viable Product
SNPSingle Nucleotide Polymorphism (a DNA variant)
TBDTo Be Decided
USPUnique Selling Proposition