Privacy Collection Notice

1. Introduction

This notice explains how Digitalis Health collects, uses and discloses personal and health information through the Triage Platform under the Privacy Act 1988 (Cth), the Australian Privacy Principles and, where applicable, the My Health Records Act 2012.

2. Health information collected

Health information is sensitive information. The Platform requires explicit consent before collecting or processing it.

• Demographics such as name, age, sex and location.
• Symptoms, duration, medical history, risk factors and supplied vital signs.
• Clinical identifiers generated during assessment, including SNOMED CT-AU codes.
• Audit data such as timestamps, device information and Platform interactions.

3. Purpose

• Assess symptoms and support triage and referral pathways.
• Maintain an audit trail for safety, quality and regulatory obligations.
• Improve clinical logic through anonymised or pseudonymised analysis.
• Meet Australian health, privacy and medical-device obligations.

4. Disclosure

Digitalis Health does not sell or trade health data.

Information may be disclosed to consented healthcare providers, secure service providers operating under privacy controls, authorities where required by law, or research partners only in anonymised or de-identified form.

5. Storage and security

Production health information is stored in Australian data regions where Australian residency is required. Data is encrypted in transit and at rest, and access is restricted through role-based controls.

6. AI, LLM and voice processing

The Platform uses artificial intelligence and large language models to assist clinical reasoning. Deterministic safety and governance controls check AI output, but inaccuracies remain possible.

In browser voice triage, microphone audio is streamed to the configured realtime AI provider for live transcription. Digitalis does not store a replayable raw audio recording from that browser flow. Transcripts, assessment responses, results, consent and audit records may be retained under applicable privacy and legal controls.

7. Your rights and withdrawal

You may request access or correction and may withdraw consent for future processing where applicable. Legal, clinical-safety or regulatory obligations may require retention of defined audit records.