Privacy Policy

This is a starting template aligned to the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). Have it reviewed by a qualified lawyer before relying on it.

1. What we collect

We collect the account details you provide (name, email, optional username, and profile details such as sex, date of birth, ethnicity, height, weight, and notes), the pathology reports you upload and the marker results extracted from them, and the supplements, protocols, and timeline events you record. Health information is "sensitive information" under the Privacy Act, and we handle it accordingly.

2. How we use it

We use your data only to provide the service to you: extracting and displaying your results, charting trends, overlaying your protocols, and operating your account. We do not sell your data, use it for advertising, or share it with insurers.

3. Extraction and third parties

By default, reports are processed on this server using on-device OCR and rule-based parsing. If you opt in to "bring your own key" AI extraction, the report text or images you choose are sent to the AI provider you configured (such as Anthropic or OpenAI) using your own API key. Your provider API key is encrypted at rest. We minimise retention of raw report text and remove it once you confirm your results.

4. Storage and security

Data is stored on the infrastructure operated by this Hemalytics instance. We use encryption for credentials and stored API keys, enforce access controls so you can only see your own data, support two-factor authentication, and keep audit logs of administrative actions.

5. Access, correction, and deletion (APP 12 and 13)

You can view and correct your information in the app, export a full copy of your data from Settings at any time, and permanently delete your account and all associated data from Settings. Deletion is irreversible.

6. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to remember referral attribution. We do not use third-party advertising or tracking cookies.

7. Complaints and contact

If you have a privacy concern, contact the operator of this Hemalytics instance. You may also contact the Office of the Australian Information Commissioner (OAIC).