Privacy

Collection notice

This states plainly what Australian Privacy Principle 5 requires a full policy to cover in more detail. It applies from the moment you create an account.

• What’s collected: account details (name, email); health records you add or import (results, scans, wearable data, medications, logs, documents); and, only if you enable AI analysis, the health context needed to answer your question.
• Why: to store and present your own health data back to you, and — only with your explicit, revocable consent — to generate AI explanations, summaries and answers.
• Where it’s stored: your database and file storage live in Australia (AWS ap-southeast-2, Sydney).
• Overseas disclosure: when AI analysis is enabled, the relevant health context is sent to that feature’s AI provider (OpenAI or Anthropic) for processing on their infrastructure in the United States — outside Australia. This happens only for the specific request you make, never in the background, and never when AI analysis is turned off.
• Access, correction and deletion: export or permanently delete your data anytime from Settings → Privacy — no request or waiting period required.

Supported use

HealthM8 is informational software: it never diagnoses, prescribes, or predicts outcomes, and every AI-generated claim is expected to cite the record behind it. It is not a monitoring or emergency service — see the Safety page for the full detail. If a result looks abnormal or you feel unwell, contact your GP; in an emergency in Australia, call 000.

The commitments already built into the product

• Your records are scoped to your account with row-level security and private file storage. Nobody else’s account can read them.
• Full data export and permanent deletion are available to every account, on every plan, always.
• No third-party analytics run by default. Measurement is only added with consent and a privacy policy that supports it.
• AI features are optional. A report is sent to the configured AI provider only after you explicitly ask HealthM8 to analyse it, and extracted values are shown for review before import.
• Waitlist details are stored separately from health records and product accounts, contain no health information, and are deleted when you withdraw consent.

What this page will cover at launch

The full policy — covering data categories, retention, processors, Australian Privacy Principles alignment and contact details for privacy requests — is being finalised with the launch review and will replace this page before public signup opens.