The problem, stated properly
The practice has been running since the early 2000s with no real online presence beyond a Facebook page. Two things were needed: somewhere for people searching 'doctor near Kwandengezi' to land, and a way to collect patient information before the patient is standing at the desk.
The form builder exists because the alternative was paying per response for something the practice fills in a few hundred times a month. Patients fill forms one question at a time on any phone, no account needed. Staff build them, share the link over SMS, WhatsApp or a QR code, and export responses.
The rule that shaped it
Raw IP addresses are never stored.
POPIA applies to health data, so a few things are enforced in code rather than policy: only an irreversible hash of the IP, used for rate-limiting; a password-gated staff area with auth-gated export; responses purged on a schedule, with the retention query written down in the README rather than left to memory.
