Back

Kinetta Privacy Policy

Last updated: [DATE] · Version 0.4-draft

This policy is different from the Privacy Collection Notice, which is a short notice shown at the point where information is collected.

1.1 Who we are

Kinetta is operated by [FULL LEGAL ENTITY NAME], referred to in this policy as “Kinetta”, “we”, “us” or “our”.

We provide a digital platform designed to support physical-health engagement, educational information and interaction with participating clinics.

Contact details:

  • Privacy email: [PRIVACY EMAIL]
  • Support email: [SUPPORT EMAIL]
  • Business address: [BUSINESS ADDRESS]
  • ABN: [ABN]

1.2 Information we collect

The information Kinetta collects depends on the features you use and whether you connect your account to a participating clinic.

Account information

  • name;
  • email address;
  • account identifier;
  • login and authentication information;
  • communication preferences.

Profile information

  • goals;
  • interests;
  • preferred activities;
  • information you choose to add to your profile.

Health-related information, where relevant to the features used

  • check-in responses;
  • symptoms or concerns you enter;
  • movement or activity responses;
  • questionnaires;
  • personal goals;
  • care-related information;
  • appointment information;
  • information you include in messages;
  • documents, photographs or videos you choose to upload.

Clinic connection information

  • clinic name;
  • practitioner connection;
  • information shared with or received from a connected clinic;
  • connection and sharing history.

Ask Kinetta information

  • questions submitted;
  • relevant context used to produce a response;
  • feedback or reports regarding AI-generated responses.

Technical and security information

  • device and browser information;
  • approximate network information;
  • login and security events;
  • usage events;
  • application errors;
  • audit and fraud-prevention information.

Kinetta aims to collect only information reasonably necessary for the features being provided and the secure operation of the platform.

1.3 How we collect information

Kinetta may collect information:

  • directly from you;
  • when you use Kinetta features;
  • when you connect to a participating clinic;
  • from your connected clinic where the relevant feature permits;
  • from approved providers that support authentication, hosting, analytics, security or AI functionality;
  • when you contact support or make a privacy request.

1.4 Why we collect and use information

Kinetta may collect and use information to:

  • create and manage your account;
  • provide the Kinetta features you choose to use;
  • support communication and information sharing with a connected clinic;
  • operate Ask Kinetta and other approved AI-assisted features;
  • provide educational and activity content;
  • protect account and platform security;
  • prevent misuse and investigate incidents;
  • respond to support, access, correction and deletion requests;
  • comply with legal and regulatory obligations;
  • improve reliability, accessibility and user experience using appropriately controlled information.

Kinetta does not sell personal or health information.

Kinetta does not use health information for advertising to third parties.

1.5 Health information

Some information provided to Kinetta may be health information or sensitive information under Australian privacy laws.

Kinetta handles health information with additional care and only for approved purposes connected with the features used, the operation of the platform, a participating clinic relationship, or as otherwise permitted or required by law.

1.6 Clinic connections and sharing

You may choose to connect your Kinetta account to a participating clinic.

The information available to a connected clinic depends on the features used, your sharing choices, information supplied by the clinic and the clinic’s own professional and legal obligations.

Before you actively share selected information, Kinetta will show what will be shared and which clinic will receive it.

Important limits on your control

Disconnecting a clinic may stop future sharing through Kinetta, but it may not remove information that the clinic has already received, created or is required to retain as part of its records.

A participating clinic may have its own privacy policy and may be independently responsible for information it collects or holds.

1.7 How Kinetta uses AI

Some Kinetta features use artificial intelligence to provide educational information, explanations or summaries.

AI-generated information may contain errors. Kinetta does not diagnose medical conditions and AI-generated information should not replace advice from a qualified health professional.

Kinetta is not an emergency service.

Depending on the feature, relevant information may be sent to an approved third-party AI provider to generate a response.

  • AI provider: [AI PROVIDER]
  • Processing location: [AI PROCESSING LOCATION]
  • Provider retention setting: [RETENTION SETTING]
  • Provider model-training setting: [MODEL TRAINING SETTING]

Patient Voice messages are excluded from all AI processing, including summaries. See How Kinetta uses AI.

1.8 Service providers

Kinetta may use service providers to support functions such as:

  • cloud hosting;
  • database and storage services;
  • authentication;
  • email delivery;
  • security monitoring;
  • customer support;
  • AI processing;
  • application performance and error monitoring.

1.9 Overseas processing and disclosure

Some Kinetta service providers or their subprocessors may process or access information outside Australia.

1.10 Security

Kinetta uses administrative, technical and organisational safeguards designed to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

Read more on our Security and trust page.

1.11 How long information is retained

Kinetta retains different categories of information for different periods, taking account of why the information was collected, legal and regulatory requirements, clinic record obligations, security requirements and whether the information remains necessary.

1.12 Access and correction

You may request access to personal information held about you by Kinetta and ask for inaccurate or incomplete information to be corrected.

1.13 Account closure and deletion requests

You may request closure of your Kinetta account and deletion of eligible information.

1.14 Communications and marketing

Kinetta may send essential account, security and service communications.

1.15 Privacy complaints

If you have a concern about how Kinetta has handled personal information, contact us using [PRIVACY EMAIL].

1.16 Changes to this policy

Kinetta may update this Privacy Policy when its services, providers, legal obligations or information-handling practices change.