Privacy Policy

Effective Date: June 2026

1. Compliance & Framework

OIT Harmony is owned and operated by PST (ABN ** *** *** ***). We collect, use, and manage personal and sensitive health information in strict compliance with the Privacy Act 1988 (Cth), the 13 Australian Privacy Principles (APPs), and the Privacy and Other Legislation Amendment Act 2024.

2. Identity & Pseudonymity (APP 2)

To protect patient identity, we actively encourage and support the use of initials, nicknames, or pseudonyms for all child profiles. Legal names are not required. Secure alignment with your supervising clinic is facilitated through a Clinic Patient ID or MRN alias, ensuring raw PII remains insulated in our databases.

3. Information We Collect

We collect only the minimum necessary information to support oral immunotherapy (OIT) progress logging and clinical summary generation:

  • Account Information: Caregiver's email address and login credentials.
  • Patient Profile: Child's nickname/initials and optional date of birth.
  • Clinical Logs: Daily dosing histories, adverse reaction logs (graded using the 4-tier ASCIA scale), cofactor details (such as exercise, poor sleep, or cold/virus), and daily contextual variables.

4. Data Sovereignty & Residency (APP 8)

All active databases, backups, and user records are hosted and processed securely on cloud servers located exclusively within Australia. No personal or sensitive health information is transferred or stored outside of Australia by us.

5. Data Security & Access Controls

We employ strict administrative and technical safeguards to secure your data:

  • Data Segregation: Personal identifiers (such as caregiver names and email addresses) are stored separately from clinical logs (dosing histories and reactions) to protect patient privacy.
  • Restricted Access: Access to patient profiles is strictly limited to the account creator and any clinics or caregivers you explicitly choose to link.

6. Disclosure & Clinical Sharing

Your OIT progress data is private. It is shared only with your explicit action, such as adding a clinic linkage code to sync with your care team. We do not sell, rent, or trade your data. De-identified, aggregated clinical records may be utilised for research or product improvement only if you choose to opt-in through a separate, unbundled consent agreement. We guarantee that no patient or clinical data is used to train or develop third-party AI models.

7. Data Retention & Erasure

Active OIT progress data is retained as long as your account is active. You may delete your profiles or account at any time. Account deletion triggers a cascading deletion process (subcollections first, parent document last) that permanently erases all profile, dosing history, and authentication details on the server within 30 days. In compliance with AHPRA guidelines and Australian records retention acts, clinical audit logs are retained for at least 7 years or until the patient reaches 25 years of age, whichever is longer.

8. Statutory Privacy Tort & Redress

In accordance with Australian legislation (effective from June 2025), individuals retain the right to seek court remedies for serious invasions of privacy independent of the Office of the Australian Information Commissioner (OAIC) complaint pathway.

9. Contact & Complaints

For questions, correction requests (APP 13), or complaints, please contact our Privacy Officer at privacy@purespeechtechnology.com. Unresolved privacy complaints can be escalated to the OAIC (www.oaic.gov.au).