Effective Date: 15th September 2025

Last Updated: 15th September 2025

Healthful AI Pty Ltd ("we", "us", "our") provides software-as-a-service (SaaS) solutions for healthcare providers. We are committed to protecting the privacy of individuals and ensuring the secure handling of personal and health information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs) and, where applicable, state-based health privacy laws.  Use of data is specifically and only for the purpose of automated coding of health-related information to support hospital funding, compliance, and reporting requirements.

We may collect the following types of information:

- Personal Information: Name, contact details, date of birth, job title, and organisation.

- Health Information: Medical history, treatment details, clinical notes, diagnostic results, and other sensitive health data.

- Technical Information: IP address, device identifiers, browser type, usage logs, and access times.

We only collect health information where it is necessary for the provision of our services and with appropriate consent or legal authority. We do not use identifiable health information for marketing, profiling, or unrelated product development.

We collect information:

- Directly from users (e.g. healthcare providers or authorised representatives)

- Through our platform during service delivery

- From integrated third-party systems (e.g. electronic health records, diagnostic tools)

- Via cookies and analytics tools (for platform performance and security)

We collect and use personal and health information to:

- Provide, maintain, and improve our healthcare SaaS solutions

- Enable healthcare providers to deliver clinical services

- Ensure data integrity, security, and compliance

- Communicate with users and provide support

- Meet legal and regulatory obligations

Healthful AI does not directly collect consent from patients. Hospitals and health services remain responsible for ensuring that they have the appropriate legal authority or patient consent to provide information for automated coding. We act as a processor of health information on their behalf and under their instructions.

We may disclose personal or health information to:

- Authorised healthcare providers and their staff who require coding services

- Third-party service providers (e.g. cloud hosting, analytics, support) who support our coding platform

- Regulatory bodies or law enforcement, where required by law

- Overseas recipients (only where necessary and with safeguards in place)

We do not sell or rent personal or health information to third parties.

We do not disclose health information to other parties, and we do not sell or rent data.

Our platform is hosted on secure servers located in Australia.

We implement industry-standard security measures including:

- End-to-end encryption

- Role-based access controls

- Regular security audits and penetration testing

- Secure data backups

We retain personal and health information only as long as necessary for the purposes to provide automated coding services and related support, at which point data is retained or deleted in accordance with the health service's instructions or as required by law.

You may request details of the personal information that we hold about you.  An administrative fee may be payable for the provision of such information.  In certain circumstances, as set out in the Privacy Act 1988 (Cth), we may refuse to provide you with personal information that we hold about you. 

If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us using the details below. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading or out of date. 

Requests can be made by contacting:

Email: enquiry@healthfulai.com.au

Phone: 0385972942

We may require verification of identity before processing requests.

If you have a concern about how we handle your information, please contact us. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

Website: www.oaic.gov.au

We may update this Privacy Policy from time to time. The latest version will always be available on our website.