Workshop 02 · Users, problems & scope
A shared record of the decisions made in the second workshop — pricing model, platform shape, MVP scope, data residency, and how the two bots and the prototype evolve before development begins.
What we decided. The credit-based usage model is dropped in favour of fixed-price products with an internal blended calculation. Version 1 ships as a mobile-optimised web app — a native wrapper is a later option. Both the customer bot and the doctor bot are part of the MVP from day one, sharing the same data basis but with separate chat histories.
The central USP. Data stays in Switzerland for every customer, regardless of location. This is now a hard requirement that constrains LLM selection — Swiss hosting (Google Cloud Zürich, a Swiss provider, or an on-prem open-source LLM) is the only acceptable path. Cost is still a black box: optimise for margin at scale, not at the start.
What we need from you. Decide which sensitive content the customer bot should restrict, confirm the medication list and active substances, and review the updated Workshop 1 minutes. The prototype extension begins on Monday with an MVP/Vision toggle for clean separation.
A three-column read-out of everything Workshop 2 settled — what ships in V1, what waits for the Vision phase, and what is explicitly out of scope.
In V1 / MVP
Vision / later phase
Not included
Credit-based usage is dropped — credits are not tangible for end customers and distract from the core value. The platform now presents fixed-price products to clients.
Customer-facing model. Fixed-price products only. No credit display, no top-ups, no per-message metering.
App download free, AI behind payment. The app is downloadable at no cost — AI usage unlocks only after direct payment to SwissDnaCode. Payments never run through the app stores.
CHF cost basis follows the LLM choice. Once the LLM is picked, Mendelio calculates AI usage + cloud costs in CHF so SwissDnaCode has a defensible basis for the fixed prices.
Version 1 ships as a mobile-optimised web app — strictly web — and its UI is styled to look like a native app. A true native app is a follow-up step that only makes sense when the financial case justifies it. The architecture below is set up so the later native build is faster and cheaper.
MVP · NOW
Mobile web, styled native
Phone-optimised web app. UI looks like a native app. One codebase. Instant updates.
PHASE 2
Native app
Frontend only inside the native shell; backend logic stays remote and is consumed via API.
Architecture choice now, native path later: the frontend technology is picked already in V1 so the future native build can reuse it — the native app then carries only the frontend, with the backend reached through the same API the web app uses.
No URL to type — desktop and mobile: the customer should launch via an icon or button on either device, never by opening a browser and typing an address.
Consent for sharing customer data with the doctor is captured as early as possible, during onboarding. It is a mandatory statement — not an optional question — and the user cannot proceed without it. Because it's mandatory at onboarding, the platform avoids repeated per-upload prompting later in the chat.
Onboarding consent — mandatory statement. "First Steps" includes a binding data-sharing statement covering doctor-bot access to all uploaded data. Without consent, no proceeding — and no meaningful analysis from Dr. Farkas is possible.
Parallel attachment. Customer uploads automatically appear in the doctor bot, attached to the patient. The data flows once, not twice.
Chat stays private. The customer's chat conversation is not shared. Only documents and findings cross the boundary into the doctor bot's context.
Privacy line: the customer's chat history with their bot is theirs alone. The doctor's chat history contains only the doctor's questions. A customer should never feel that what they typed conversationally is read by the team.
Both bots ship in the first release. They share the same underlying data basis but maintain separate chat histories and produce different kinds of answers — medical depth for the doctor, reduced and safe guidance for the customer. The doctor bot is accessible directly from the patient detail page.
Customer bot MVP
Doctor bot MVP
Internal V1 sequence — doctor first, customer fast-follow
Within V1 itself, Dr. Farkas gets her bot first — the priority is to put a working chatbot in her hands as quickly as possible. Customer login is not yet relevant in that very first step.
Then, still in V1: the customer-side minimum lands — at least a web login where the customer can ask questions. Everything beyond that is added incrementally on top of the same V1 surface.
Same data basis, two interfaces. The doctor bot is the medically open assistant; the customer bot is the supervised, safer variant — both running on the same uploaded findings. Clean separation between them is mandatory.
Medication recommendations are driven by the customer's DNA. Because Germany, Switzerland, and Austria use different product documents and brand names, the logic runs over active substances (Wirkstoffe) rather than the broader ingredient lists (Inhaltsstoffe) — active substances are unambiguous across borders.
Active-substance basis
Wirkstoffe vs. Inhaltsstoffe
Physical supplements and creams will not be sold directly on the platform — they are too sensitive to bundle with medical guidance. Printed reports are fine. An affiliate link to a supplement shop (commission, possible first-order discount) is acceptable as long as the storefront sits outside the platform itself.
In scope for MVP
Vision — not in MVP
First step on orders: the doctor or admin internally triggers product orders, so SwissDnaCode keeps the overview before the function is exposed to end customers.
Data must stay in Switzerland for every customer — this is the most important USP. The requirement constrains LLM choice: any model that cannot keep data in CH is out. Once that constraint is locked, we then choose the LLM that fits the project best.
Phased direction
LLM options on the table
Cost vs. quality: cost is still a black box. The approach is to not optimise for cost at the start — pick the model that delivers quality and optimise margin later at scale.
LLM selection — Mendelio prepares a positive / negative comparison and provides candidates; SwissDnaCode tests with real DNA / blood findingsDr. Farkas does not want to bring the 10 existing clients across. The new bot will intentionally answer differently — more medical and doctor-led than the lifestyle tone of the old one. The chosen path is to inform existing customers and let them prepare with some input of their own, rather than try to migrate transcripts.
No data migration. Existing chat histories stay on ChatGPT. The new platform is a fresh start.
Inform existing customers. Customers are told that a better AI is available and that it will give somewhat different answers — more medical, doctor-led.
Customers prepare with some input. Each carry-over customer is asked to contribute the preparation input themselves; continuity is bridged through that input, not through old transcripts.
One IT professional — free access. One existing client — an IT professional — gets free access as an intensive user so SwissDnaCode gathers good early feedback.
How many of the 10 will continue is still open. Treat each as a re-acquisition rather than a guaranteed carry-over.
Each role (Super-Admin, Arzt-Admin, patient) gets its own settings — the current admin view is symbolic and will be split out. The patient detail becomes the working surface for doctors: findings, patient context, and the doctor bot all live in one place, with no switching between views.
Doctor side
Customer menu V1
Notifications — pending SwissDnaCode confirmation (decided out in the latest review; still listed as a clarification item).
Academy / videos: the "Academy" area may be renamed initially since it carries only intro / explainer videos at first — covering DNA sample collection and how the whole system works. Extended learning videos arrive later. Implementation choice: Memberspot.de API integration or a self-coded basic version.
Not in V1: the category tabs (Sleep, Nutrition, Fitness, Supplements). These return in later phases once the V1 surface is stable.
Specific fields of the customer registration form — to define by SwissDnaCodeThe main complaint about today's ChatGPT bot is that it hallucinates, intermittently stops accessing stored data, and gets erratic under intensive use. The new platform must contain this. Restrictions are partly LLM-dependent — the chosen model self-restricts on medical advice — but the strategy does not rely on base settings alone.
Negative-prompt layer
Storage & categorisation
Three roles ship in the MVP: doctor, admin, and client. They are designed so additional roles can be added later without a rewrite — expanding the role model after the fact is costly. The doctor and admin roles are kept as separate concepts from day one, so a doctor can advise without holding admin privileges.
Doctor. Clinical answers, full medical context, doctor-bot access. Can assign Admin and Client roles.
Admin. Separate from doctor. Manages users and configuration. Can assign a second Admin. Differentiated in V1 into Super-Admin and Arzt-Admin.
Client. Own bot, own findings, private chat history.
Therapist role — Vision, not MVP: external therapists arrive in a later phase, slotting into the same model without breaking the doctor / admin separation already in place.
"Done" for V1 is defined by four unified criteria. They tie the technical quality of the AI to the business signals that show the platform actually working for customers.
Accurate AI answers. The chatbot reliably delivers correct, on-data answers — across normal and power-user load.
Revenue visibility. It's clear how much revenue the software itself can generate.
Positive customer feedback. Customers actively report that the platform helps them.
3-month re-booking. Customers re-book after three months and continue with the platform.
Staged feature release as a retention lever
Features unlock per user on a time basis — the customer starts with 2 features, gets +1 after one month, another after two months, and so on. The price stays the same; the platform grows around the customer.
Plus general features for everyone: a baseline set of features is available to every customer regardless of tenure — the staged plan layers on top of that baseline, not in place of it.
Why it works: avoids onboarding overwhelm, gives the sales narrative a phased plan, smooths quality risk (no flood of simultaneous "talk to a doctor" requests when everyone hits the same restriction at the same time), and creates a long-term reason to stay.
The core motivation is to live healthier and optimise daily life based on DNA. Customers expect everyday answers tied to their genetics, plus the ability to save useful results and come back to them later.
Nutrition & menus. Carb-vs-fat metabolism guides daily eating — the bot suggests dishes that fit.
Sport & training. Matching training type to genetic predisposition — endurance vs. strength bias.
Weight. Tied to metabolic SNPs; targeted goals over generic calorie counting.
Doctor-bot value. Efficiency and complexity-handling — summarising many findings and correlations to deliver better care on a shared data basis.
This summary captures every decision and open question from the second workshop. Prototype extension begins on Monday in parallel with the LLM and cloud-cost research.
SwissDnaCode — to-dos
Mendelio — to-dos
Open points — still to decide
The next workshop steps into the AI design itself: what the assistant does, what it refuses, how it uses the customer's data, and what guardrails apply — before any technical decisions on model and infrastructure are finalised.
Meeting 05 · Behaviour & refusals
Meeting 06 · LLM choice & data flow
Workshop 3 deliverables