Privacy Policy

Last updated: August 2026. Applies to the Kite early-access web app and marketing site. This policy will be reviewed by counsel before general public launch; contact us with questions.

Overview

Kite ("we", "us", "our") is a patient health information organiser. This policy describes how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Kite does not diagnose conditions or provide medical advice.

Information we collect

We may collect:

• Account information — name, email address, and role (patient, carer, or clinician)
• Health information — appointment recordings, visit summaries, medical profile data, medications, and journey entries you create or approve
• Usage data — how you interact with the Kite app and website, device type, and log data for security and improvement
• Waitlist and contact forms — information you submit via our website

How we use your information

We use your information to:

• Provide and improve the Kite health memory service
• Generate plain-language visit summaries and organise your health record
• Communicate with you about your account, waitlist status, and product updates
• Comply with legal obligations and protect the security of our platform

We do not sell your personal or health information to third parties.

Health information

Health information is sensitive under Australian law. We apply additional safeguards including encryption in transit and at rest, access controls, and consent mechanisms for appointment recording. You control what is captured and stored in your health memory.

Data storage and security

Your data is stored on secure infrastructure with industry-standard protections. We retain information only as long as needed to provide the service or as required by law. You may request deletion of your account and associated data subject to legal retention requirements.

Your rights

Under the Privacy Act, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Make a complaint about how we handle your information

Artificial intelligence

In production, Kite may use Google Gemini (e.g. Gemini 2.5 Flash / Flash-Lite) via a server-side API to summarise visits, extract text from documents you upload, organise information you already provided, and power administrative chat. Prompts may include the text you submit for that feature. We do not use your health content to train our own models. Configure or disable AI features by contacting support during early access.

On web, live speech-to-text may use your browser’s Web Speech API (e.g. Chrome may send audio to Google during recording). Kite does not store audio recordings — only text you capture or type.

Contact

For privacy enquiries, access requests, or complaints, contact us at jfaus.ventures@gmail.com.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.