Privacy Policy

Overview

In this Privacy Policy, ‘us’, ‘we’ or ‘our’ means InflaMed Pty Ltd (ABN 16 660 044 548) of Victoria, Australia.

We are committed to respecting and protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

InflaMed provides technology infrastructure that supports healthcare providers to deliver services to patients. Clinical care is provided by independent healthcare professionals, not InflaMed.

This Privacy Policy explains how we collect, store, use and disclose personal and sensitive information about clinicians, patients, guardians and other users (‘you’) who use the Continua platform (including the app, website, clinician portal, telehealth platform, widgets and any interactive facilities or services accessed through these products), collectively referred to as ‘Online Services’.

By providing personal information to us, you consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy and any other arrangements that apply between us.

We may change this Privacy Policy from time to time by publishing changes on our website. We encourage you to check our website periodically to ensure that you are aware of our current Privacy Policy. This policy is also reviewed annually or upon significant product, legal or data handling changes.

Personal information includes information or an opinion about an individual that is reasonably identifiable. For example, this may include your name, age, gender, postcode and contact details.

1. Types of Information We Collect

Personal Information

• Full name
• Date of birth
• Age, gender, postcode
• Address
• Contact details (email and phone)

Clinician Information

• AHPRA registration details (not retained after verification)
• Identity verification information (e.g. driver’s licence, professional referees)
• Practice information and availability

Health Information

• Self-reported symptoms, food logs, environmental exposures and wellbeing check-ins
• Metrics from supported wearables, Apple Health, HomeKit sensors or integrated partners
• Telehealth-related information including audio, video, chat messages, transcripts, clinician notes, summary reports and shared files
• Uploaded media (photos, videos) for progress tracking or clinical review
• Aggregated trend summaries and visualisations generated from user-entered information to assist presentation and organisation of health data (not diagnostic or predictive)

Technical Information

• Device identifiers, device type and geo-location information
• IP address, session metadata and standard web log information
• Computer and connection information
• Statistics on page views, traffic to and from the sites
• Audit logs, crash reports and product interaction analytics

Financial Information

• Payment information is processed securely by Stripe
• InflaMed does not store full credit card details

Other Information

• Details of the products and services we have provided to you or that you have enquired about, including any additional information necessary to deliver those products and services and respond to your enquiries
• Any additional information relating to you that you provide to us directly through our website or app, or indirectly through your use of our website or app or online presence, or through other websites or accounts from which you permit us to collect information
• Information you provide to us through customer surveys
• Any other personal information that may be required to facilitate your dealings with us

2. How We Collect Information

We collect information when you:

• Create an account
• Use the Continua app or other Online Services
• Participate in telehealth consultations
• Connect Apple Health or supported sensors
• Submit forms or logs
• Upload media
• Communicate with clinicians

We may also receive information from:

• Treating clinicians
• Integrated partners when authorised by you

Health information is collected with your knowledge and consent, including during telehealth consultations.

3. Purpose of Collection

We collect personal and health information to:

• Provide, operate and maintain the Online Services, including the Continua app
• Enable secure telehealth consultations and communication
• Generate transcripts and structured summary notes for clinicians
• Display summaries and visualisations of user-entered information over time
• Allow clinicians to review patient-entered information relevant to care
• Deliver products and services you have requested and respond to your enquiries
• Facilitate secure payments for programs and sessions
• Improve functionality through analytics and performance monitoring
• Meet legal, regulatory, cybersecurity and audit requirements
• Provide customer support and technical troubleshooting

4. Telehealth Recordings, Transcripts and Generated Content

Telehealth sessions may be recorded only when both the clinician and the patient consent to the recording. Consent is obtained before or at the start of the consultation.

If either party does not consent, the session will not be recorded.

Where recording is enabled with mutual consent:

• Recordings may include audio, video, chat and shared content
• Transcripts may be generated
• Structured summary notes or draft clinical reports may be created to support clinician workflows
• These materials form part of the clinical record

Automated systems used for transcription or documentation are assistive tools only and must be reviewed by a qualified clinician.

You must not record consultations independently without the consent of all participants.

5. Use and Disclosure of Information

Information is shared only with:

• Your nominated clinicians or care team
• Authorised healthcare providers involved in your care

We may disclose information where legally required.

Consented de-identified datasets may be used internally for service improvement, quality assurance or aggregated analytics.

We do not sell personal or health information.

6. Third-Party Service Providers

InflaMed relies on secure third-party processors including cloud hosting, payment processors, communication infrastructure, analytics services and AI-supported documentation processing services.

We take reasonable steps to ensure third-party providers handle data in accordance with privacy obligations.

7. Data Storage Location and Cross-Border Access

Health information, including telehealth recordings, transcripts and clinical documentation, is stored securely within Australia.

In limited circumstances, authorised technical service providers may access systems from outside Australia to provide support services.

8. Security of Personal Information

We apply ISO/IEC 27001-aligned controls including encryption, multi-factor authentication, role-based access, audit logging and regular security testing.

9. Access and Correction

You may request access to, or correction of, your personal or health information by contacting us.

10. Account Deletion

To request deletion of your account and associated non-health data, contact [email protected].

Health records must be retained for a minimum of 7 years in accordance with Australian health records legislation.

Non-health records are retained for a period of 2 years and can be requested for deletion.

11. Data Breach Response

If a data breach is likely to cause serious harm, InflaMed will follow the OAIC Notifiable Data Breach scheme.

12. Complaints and Enquiries

Privacy complaints can be submitted to [email protected]. If unresolved, you may contact the Office of the Australian Information Commissioner.

13. Cookies and Website Analytics

We use cookies and similar technologies to support secure login sessions, improve functionality, monitor performance and understand usage patterns.

These technologies may collect technical data such as IP address, browser type, device information and pages visited.

You can control cookies through your browser settings, although disabling them may affect site functionality.