How we handle your data
This is a plain-language statement of what we actually do with the information you give us. It was written by the people building the service, not by lawyers, and it describes the system as it works today.
A formal privacy policy and terms of service will replace this statement before registration opens to everyone. Until then, this page is the commitment, and we would rather say plainly what we do than publish boilerplate that says less.
What we collect
- Your account email. Needed to create an account, sign you in, and verify that the address is yours.
- The medical documents you choose to upload. Nothing is collected from anywhere else. We do not connect to your doctor, your hospital, or My Health Record; the only records we hold are the ones you upload yourself, along with what we read out of them (the values, dates and quoted lines that appear in your reports).
- Your email address, if you join the early access list. That list is stored separately from any account.
- Basic operational logs. Ordinary records of requests to the service and errors it hits, plus an audit trail of actions taken on your account — an upload, a read, a sign-in. The audit trail records the fact of an action, its timestamp, and the account and document identifiers involved — never document content.
How we use it
Your documents are used to provide the service you came for, and for nothing else: reading your records back in plain language, drawing out the trends and inconsistencies across them, answering your questions about your own records, and preparing the questions you might ask your practitioner.
If you joined the early access list, we use that address for launch and early access updates only — a handful of messages at most, telling you when registration opens and what has changed in the meantime. Never marketing for anything else, never sold or shared, and you can unsubscribe at any time. Ask us and we will take you off the list.
What we never do
- Your data is never sold, never shared with advertisers, and never used to train AI models.
- No advertising. There are no ad networks, no trackers for advertising, and no third-party analytics built on your health information.
- Your documents are never sent to a third-party AI provider. The models that read your records run on our own machines. Your records are not sent to OpenAI, Google, or any other outside AI service to be processed.
Where it lives
Your records are stored and processed in our own private data centre, on hardware we own, rather than on a big-cloud provider's storage. That data centre is in Australia, and we operate under Australian privacy law. Every file you upload is encrypted before it is stored, under a key that belongs to your account alone.
What you control
- Export everything, whenever you want. Your records are yours, in a form you can take elsewhere.
- Delete your account, and the records go with it. Deleting your account removes your uploaded documents, the text and facts extracted from them, your chat history, your intake answers and any reports prepared from them, your encryption keys and your account details. The database records go first, in a single transaction, and the stored files are erased straight after. If that last step ever fails — a disk fault, say — what is left behind cannot be read by anyone: your encryption keys were destroyed with the account, so the leftover files are unreadable, and we reclaim the disk space afterwards.
- What deletion leaves behind. The audit trail outlives the account on purpose, so there is a durable record that actions took place. It holds the fact of an action, its timestamp, and the account and document identifiers involved — not your documents or anything read out of them. The early access list is separate from your account; ask us and we will remove you from it.
Email we send you
Emails such as address verification are delivered through a commercial email service, so those messages and the address they are sent to pass through that provider the same way any email does. We send them from that provider's Australian region, in Sydney, so the delivery stays in Australia too. The content of your records is never included in them: what we send is a link or a notification, never your health information. Once a message has been sent, the copy of it queued on our side is blanked.
Asking us about any of this
Write to hello@mymedicalrecord.axoquant.com with any question about your data, including a request to see it, export it, or delete it. The commitments this service is built on are set out in what we stand for.