Privacy Policy

1. Who we are

Anthrovium (“Anthrovium”, “we”, “us”, “our”) provides a personal health-data platform that helps you bring your blood-test results together, track them over time, and prepare information to discuss with your GP. This policy explains what personal information we collect, how we use and protect it, and the choices and rights you have.

Anthrovium is operated by Anthrovium Labs, Australia. If you have any questions, contact us at privacy@anthrovium.ai.

Anthrovium is a record-keeping and organisation tool. It is not a medical device, does not provide medical advice, and does not diagnose. Your clinician remains responsible for all clinical decisions.

2. The information we collect

Information you give us:

• Account details - name, email address, password (stored only in hashed form).
• Health information you choose to add - blood-test and pathology results, other test or scan results and reports, biomarkers, protocols and plans, and notes. This is sensitive information under Australian privacy law and is treated with the highest level of care.
• Communications you send us (support requests, feedback).

Information we collect automatically:

• Basic technical and usage data needed to run and secure the service - e.g. log data, device/browser type, and pages accessed. We use privacy-respecting analytics to understand product usage in aggregate.
• We do not run advertising trackers, and we do not sell data (see section 6).

Information from third parties:

• If you choose to import or upload documents (e.g. a pathology PDF), we process the contents you provide. We do not retrieve your health records from third parties without your action.

3. How we use your information

We use your information to:

• Provide the service - store your results, build your timeline, generate trends, and prepare information you can take to your GP.
• Maintain, secure, and improve the platform.
• Communicate with you about your account, service changes, and (if you opt in) product updates.
• Comply with our legal obligations.

We rely on your consent to collect and handle your health information, which you provide when you add it to Anthrovium. You can withdraw consent at any time by deleting the information or your account (see sections 7-8).

We do not use your health information to make automated decisions that have legal or similarly significant effects on you.

4. Aggregate and de-identified data

We may create de-identified, aggregate statistics from user data (for example, general product-outcome figures or population reference patterns). De-identified data does not identify you and is not personal information. We take care that aggregate figures cannot be re-identified. Where we present outcome statistics publicly, they describe observed product usage in aggregate and are not medical or efficacy claims about any individual.

5. How we share information

We share personal information only as follows:

• Service providers who help us operate the platform (e.g. cloud hosting, database, transactional email) under contracts that require them to protect your information and use it only for our purposes. Our key providers include hosting and infrastructure (e.g. Render), and transactional email (e.g. Resend). A current list is available on request.
• People you choose - if you use sharing features to lend access to a partner, carer, or clinician, you control what they see and can revoke access.
• Legal reasons - where required by law, court order, or to protect rights, safety, or security.
• Business transfer - if Anthrovium is involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction, subject to this policy.

We do not sell your personal information, and we do not share it with advertisers.

6. Our business model - no ads, no data sales

Our only business model is the tool itself. We charge (or will charge) for the product. We never sell your data and never run advertising against it. This is a core commitment, not a temporary position.

7. Your rights and choices

You can:

• Access and export - download your results, trends, and plans at any time.
• Correct - update inaccurate information.
• Delete - delete specific data or your entire account. On account deletion we remove your personal information from active systems, subject to any legal retention obligations and routine backup cycles (see section 9).
• Withdraw consent - for health information, by deleting it or your account.
• Object or complain - contact us at privacy@anthrovium.ai. You also have the right to complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We will respond to requests within the timeframes required by law.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the service. When you delete data or your account, we remove it from active systems promptly. Residual copies may persist briefly in secure backups before being overwritten on our normal backup cycle. We retain limited information where the law requires.

9. Security

We protect your information with appropriate technical and organisational measures, including encryption in transit, access controls, and owner-scoped data access (your record is yours). No system is perfectly secure, but we design Anthrovium so that access to your health data is tightly limited and auditable. If a data breach occurs that is likely to cause serious harm, we will notify you and the OAIC as required under the Notifiable Data Breaches scheme.

10. Where your data is stored (overseas disclosure)

Your information is stored and processed on cloud infrastructure located in the United States. This means your personal information - including health information - is stored and processed overseas. By using Anthrovium and adding your information, you consent to this overseas storage and handling. We take reasonable steps to ensure your information is protected consistently with Australian privacy law, including through contractual protections with our hosting and infrastructure providers.

11. Children

Anthrovium is not intended for people under 18. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. If we make material changes, we will notify you (e.g. by email or in-app) before they take effect. The “last updated” date shows the current version.

13. Contact

Questions, requests, or complaints: privacy@anthrovium.ai.

Anthrovium is a record, not a doctor. It does not diagnose or provide medical advice. Always consult your GP or a qualified health professional about your health and before making changes based on your results.