Privacy Policy

1. Who we are

Anthrovium (“Anthrovium”, “we”, “us”, “our”) provides a personal health-data platform that helps you bring your blood-test results together, track them over time, and prepare information to discuss with your GP. This policy explains what personal information we collect, how we use and protect it, and the choices and rights you have.

Anthrovium is operated by Anthrovium Labs, Australia. If you have any questions, contact us at privacy@anthrovium.ai.

Anthrovium is a record-keeping and organisation tool. It is not a medical device, does not provide medical advice, and does not diagnose. Your clinician remains responsible for all clinical decisions.

2. The information we collect

Information you give us:

• Account details - name, email address, password (stored only in hashed form).
• Health information you choose to add - blood-test and pathology results, other test or scan results and reports, biomarkers, protocols and plans, and notes. This is sensitive information under Australian privacy law and is treated with the highest level of care.
• Communications you send us (support requests, feedback).

Information we collect automatically:

• Basic technical and usage data needed to run and secure the service - e.g. log data, device/browser type, and pages accessed. On our public website only (never inside the app), we use Google Analytics to understand, in aggregate, how visitors find and use the site. It sets its own cookies and never receives your health information.
• We do not run advertising trackers, and we do not sell data (see section 6).

Information from third parties:

• If you choose to import or upload documents (e.g. a pathology PDF), we process the contents you provide. We do not retrieve your health records from third parties without your action.

3. How we use your information

We use your information to:

• Provide the service - store your results, build your timeline, generate trends, and prepare information you can take to your GP.
• Maintain, secure, and improve the platform.
• Communicate with you about your account, service changes, and (if you opt in) product updates.
• Comply with our legal obligations.

We rely on your consent to collect and handle your health information, which you provide when you add it to Anthrovium. You can withdraw consent at any time by deleting the information or your account (see sections 7-8).

We do not use your health information to make automated decisions that have legal or similarly significant effects on you.

4. Aggregate and de-identified data

We may create de-identified, aggregate statistics from user data (for example, general product-outcome figures or population reference patterns). De-identified data does not identify you and is not personal information. We take care that aggregate figures cannot be re-identified. Where we present outcome statistics publicly, they describe observed product usage in aggregate and are not medical or efficacy claims about any individual.

5. How we share information

We share personal information only as follows:

• Service providers who help us operate the platform (e.g. cloud hosting, database, transactional email) under contracts that require them to protect your information and use it only for our purposes. Our key providers include hosting and infrastructure (e.g. Render), transactional email (e.g. Resend), and analytics for our public website (Google Analytics). A current list is available on request.
• People you choose - if you use sharing features to lend access to a partner, carer, or clinician, you control what they see and can revoke access.
• Legal reasons - where required by law, court order, or to protect rights, safety, or security.
• Business transfer - if Anthrovium is involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction, subject to this policy.

We do not sell your personal information, and we do not share it with advertisers.

6. Our business model - no ads, no data sales

Our only business model is the tool itself. We charge (or will charge) for the product. We never sell your data and never run advertising against it. This is a core commitment, not a temporary position.

7. Your rights and choices

You can:

• Access and export - download your results, trends, and plans at any time.
• Correct - update inaccurate information.
• Delete - delete specific data or your entire account. On account deletion we remove your personal information from active systems, subject to any legal retention obligations and routine backup cycles (see section 8).
• Withdraw consent - for health information, by deleting it or your account.
• Object or complain - contact us at privacy@anthrovium.ai. You also have the right to complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We will respond to requests within the timeframes required by law.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the service. When you delete data or your account, we remove it from active systems promptly. Residual copies may persist briefly in secure backups before being overwritten on our normal backup cycle. We retain limited information where the law requires.

9. Security

We protect your information with appropriate technical and organisational measures, including encryption in transit, access controls, and owner-scoped data access (your record is yours). No system is perfectly secure, but we design Anthrovium so that access to your health data is tightly limited and auditable. If a data breach occurs that is likely to cause serious harm, we will notify you and the OAIC as required under the Notifiable Data Breaches scheme.

10. Cookies and staying signed in

Inside the Anthrovium app, we use cookies for one purpose: to keep you signed in. Our public website also uses Google Analytics cookies to understand how visitors find and use the site (see section 2). We do not use cookies for advertising, tracking across other websites, or building a profile of you. This is consistent with our business model above.

When you sign in, we store a small authentication cookie in your browser. It identifies your session so you don’t have to re-enter your password on every page. These cookies are set to be read only by Anthrovium’s servers and sent only over an encrypted connection.

If you tick “Remember me” at sign-in, we keep you signed in on that browser for up to 30 days, extending while you keep using Anthrovium. If you don’t tick it, your session ends when you close your browser, or after a period of inactivity. “Remember me” is off unless you choose it. Please only use it on a device you trust, as anyone with access to that device could open your health record.

You can end a remembered session at any time by signing out, or by signing out of all devices in your settings. Changing your password also ends every remembered session. You can clear cookies through your browser at any time; doing so will sign you out.

We also save a few settings, such as your display preferences, in your browser’s own storage; these never contain your health information.

Because these cookies are needed for Anthrovium to work at all, you cannot use the app without them.

11. Where your data is stored (overseas disclosure)

Your information is stored and processed on cloud infrastructure located in the United States. This means your personal information - including health information - is stored and processed overseas. By using Anthrovium and adding your information, you consent to this overseas storage and handling. We take reasonable steps to ensure your information is protected consistently with Australian privacy law, including through contractual protections with our hosting and infrastructure providers.

12. Children

Anthrovium is not intended for people under 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We may update this policy. If we make material changes, we will notify you (e.g. by email or in-app) before they take effect. The “last updated” date shows the current version.

14. Contact

Questions, requests, or complaints: privacy@anthrovium.ai.

Anthrovium is a record, not a doctor. It does not diagnose or provide medical advice. Always consult your GP or a qualified health professional about your health and before making changes based on your results.