Privacy Policy

Last updated: 1 October 2026

1. Who we are

Yr Med (“we,” “us,” “our”) provides a platform for organising medical information across multiple healthcare providers. This policy explains what information we collect, why, and how it’s protected.

2. Health information is sensitive information

Under the Australian Privacy Act 1988, health information is classified as “sensitive information” and receives a higher standard of protection than ordinary personal information. We collect and handle health information only with your explicit, informed consent, given at sign-up.

3. What we collect

• Account information: name, email, password (encrypted)
• Health information you choose to enter: medical conditions, allergies, medications, supplements, symptoms, appointment notes, uploaded documents (e.g. specialist letters, test results), and provider details
• Profile information: date of birth, Medicare number, emergency contacts, next of kin, advance care directive status, and similar details you provide
• Usage information: how you use the app, to help us improve it

4. How we use your information

• To provide the core service: organising your medical information and generating outputs like emergency summaries and appointment briefs
• To check for possible medication and supplement interactions, using licensed third-party medical reference data (see section 6)
• To communicate with you about your account and, where you’ve opted in, notifications
• To improve the product and provide customer support

5. Family and shared access

If you invite family members to a profile, you control what permission level they have (Admin or View-only). You are responsible for who you invite. We do not independently verify the identity or relationship of people invited to a profile.

6. Who we share information with

We do not sell your information. We share it only with:

• Service providers who host and run the app (e.g. cloud hosting and database providers), bound by confidentiality obligations
• The AI provider used to generate outputs (Anthropic, provider of Claude), which processes relevant information to generate summaries and briefs
• Licensed medical reference data providers (for checking medication and supplement interactions), which receive medication/supplement names but not your broader profile
• Payment processors (for subscription billing), which receive payment details directly and do not have access to your health information
• Law enforcement or regulators, only where required by law

Some of these providers may process data on servers located outside Australia. Where this occurs, we take reasonable steps to ensure your information continues to receive a comparable standard of protection.

7. How we protect your information

• Encryption at rest and in transit
• Role-based access control matching each profile’s Admin/Viewer permissions
• Two-factor authentication required at sign-up
• Regular security review of our infrastructure providers

8. Your rights

You can request access to, correction of, or deletion of your information at any time. To do so, contact us at hello@yrmed.app. If you’re not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

9. Data retention

We retain your information for as long as your account is active, plus a reasonable period afterward for legal and operational purposes, after which it is securely deleted.

10. Changes to this policy

We’ll notify you of significant changes to this policy before they take effect.

11. Contact us

Yr Med (ABN pending)
hello@yrmed.app

See also our Medical Disclaimer and Terms of Service.