Your health information, on your terms.

This policy applies to people who use Nest of Kin in Australia, and to fertility clinics and healthcare providers who receive information a patient has chosen to share. Nest of Kin is a patient-controlled record — it is not a clinic, does not provide medical advice, and does not replace your clinic's own medical records.

• Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs), which govern how personal information is collected, used, disclosed, secured, accessed and corrected.
• Health information is sensitive information under the Privacy Act, so it generally requires your consent to collect and has a higher standard of protection.
• State and territory health records laws where they apply, including the Health Records and Information Privacy Act 2002 (NSW), the Health Records Act 2001 (Vic), the Health Records (Privacy and Access) Act 1997 (ACT) and equivalent legislation elsewhere.
• The Notifiable Data Breaches scheme in Part IIIC of the Privacy Act.
• The My Health Records Act 2012 (Cth) where a patient chooses to involve My Health Record. Nest of Kin does not connect to My Health Record without your explicit request.
• The Spam Act 2003 (Cth) for emails and messages we send you, and Australian Consumer Law for how we describe the product.

Nest of Kin claims no certification or accreditation. This policy describes intended practice and will be reviewed by qualified privacy and legal advisers before release.

• Account information: your name, email address, and the clinics you choose to connect with.
• Health information you give us: documents you upload such as pathology, ultrasound, embryology, consent, medication and invoice documents, and the journey entries, appointments, notes and questions you record.
• Information your clinic shares with you through Nest of Kin, where you have connected that clinic.
• Security and audit records: sign-ins, access events and sharing changes, recorded using the minimum information necessary.
• Optional feedback: short check-in answers about how clear a step was. These are always optional and can be skipped.

We do not collect your health information from third parties without your consent, and we do not buy or sell personal information. We do not use your information for advertising.

To provide the functions you asked for: keeping your documents in one place, organising them against the right treatment cycle, showing your journey, preparing you for appointments, and sharing only what you choose with your clinic. We apply data minimisation — we process only what is required for the function you requested.

• Location: health information is intended to be stored in Australian data centres operated by a major cloud provider in an Australian region.
• Encryption in transit: connections between your device and Nest of Kin use current TLS encryption.
• Encryption at rest: documents and sensitive fields are encrypted where they are stored.
• Key management: encryption keys are held in managed key infrastructure, separated from the application database.
• Backups: encrypted backups are kept for disaster recovery, in Australia, on a defined rolling schedule, and deletions flow through to backups within that cycle.
• Overseas disclosure (APP 8): if any service provider outside Australia is ever used, we will name the country and the safeguards in this policy before it happens.

• You. Your full record, at any time.
• A clinic you connect, only for what you share. Sharing is per item or per category, is off until you turn it on, and can be revoked at any time. Clinics cannot grant themselves access, and cannot see unshared items or that they exist as content.
• Clinic staff, by role. Within a connected clinic, access is limited by role — for example scheduling staff do not see clinical documents.
• Nest of Kin staff, exceptionally. A small number of authorised staff may access systems for support, security or legal obligations, under access controls and logging. Routine browsing of patient records is prohibited.
• Service providers that host or secure the platform, bound by contract to use information only for that purpose.
• Law enforcement or courts only where we are legally required to disclose.

Access to your record is logged, and you can read that log yourself on the privacy activity page, grouped by month, and request a PDF copy.

Kina, our AI assistant, is a separate, optional service and is off by default. It does not run in the background. When you turn it on, you also choose which categories it may extract — for example document type, dates, provider, treatment cycle, or laboratory values copied word for word.

Kina receives only the single document you ask it to organise. Every proposed item is shown to you and must be confirmed by you before it enters your journey; unconfirmed items are discarded. Items Kina adds stay labelled as AI, with the source document retained. Where a third-party AI provider is used, the intended contractual position prevents your information being used to train general models.

Kina does not diagnose, interpret results, predict outcomes, change medication or replace your clinician. See AI settings.

Nothing is shared with a clinic until you share it. You can see what is shared, share more, or revoke sharing at any time, and each change is recorded in your privacy activity. Revoking sharing stops future access; it cannot undo information a clinician has already read or recorded in their own clinical record, which is governed by that clinic's obligations.

Contributing to aggregated insights about fertility care is opt-in and off by default. If you opt in, we use de-identified information only, report it in aggregate, and never publish anything that could reasonably identify you. You can opt out at any time, which stops future use. Aggregate figures already published cannot be recalled.

• Access (APP 12): request a copy of your information, including your privacy activity as a PDF. We aim to respond within 30 days.
• Correction (APP 13): correct anything inaccurate, out of date or misleading. You can edit most items yourself.
• Portability: download your journey, documents list, appointments and sharing settings in a portable format.
• Withdraw consent: turn off Kina, research contribution or clinic sharing at any time.
• Anonymity where practical (APP 2): you can use a preferred name in your own record, though your clinic will need your legal identity to match its records.

• Delete one document: open the document and choose delete. You are asked whether to also remove journey information that came from it, so nothing is quietly left behind.
• Delete a journey entry: remove it from your journey; the source document stays unless you delete that too.
• Delete your whole account: request deletion from Your data. We aim to action it within 30 days and to remove it from encrypted backups within the backup cycle.
• What survives deletion: minimal security log records that an action occurred (not copies of your health information), and anything we must retain by law. Documents your clinic has copied into its own medical record are subject to that clinic's retention obligations, which commonly require records to be kept for at least seven years, or until a child patient turns 25.

While your account is open, your information is kept so it is there when you need it. When you close your account, information is deleted as described above, other than what law requires us to retain. We do not keep health information for longer than the purpose you gave it for requires.

If a data breach is likely to cause serious harm, the Notifiable Data Breaches scheme requires us to notify affected people and the Office of the Australian Information Commissioner (OAIC). Our intended practice is to tell you plainly what happened, what information was involved, and what to do — without waiting to have every detail.

Contact us first — we aim to acknowledge a privacy complaint within 5 business days and respond within 30 days. If you are not satisfied, you can complain to the OAIC (oaic.gov.au), or to your state health privacy regulator, such as the NSW Information and Privacy Commission or the Health Complaints Commissioner in Victoria.

If we change how information is handled in a way that affects you, we will tell you in the product before the change takes effect, and ask again for consent where consent is required.