Privacy Policy

‍

Version 1.0 — Effective 15 November 2025

‍

This Privacy Policy applies to all personal information collected by Uplift Ai Group Pty Ltd trading as Ecko Health ("we", "us", or "our") via the web and app located at www.eckohealth.ai and app.upliftgroup.ai (the "Platform").

‍

What Information Do We Collect?

The kind of personal information we collect from you depends on how you use the Platform. It may include:

Identification details such as name, date of birth, gender, and professional registration number.
Contact information including email, phone, clinic name, and address.
Professional details such as occupation, qualifications, and registration (e.g., AHPRA).
Account information such as login credentials and preferences.
Patient-related data entered by clinicians (e.g., case notes, treatment plans, assessment data).
Technical and usage data like IP address, device, browser, and analytics.
Payment and billing information for subscriptions or transactions.
Telehealth or call data (audio, video, or transcript) only as required to provide or improve services.
Feedback or support communications through forms, chat, or email.

All health or sensitive data is handled in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and relevant health record regulations.

Types of Information

Personal Information means information or an opinion about an identified individual or someone reasonably identifiable, whether true or not, and whether recorded in a material form or not.

Sensitive Information includes data such as health information, racial or ethnic origin, religious beliefs, or membership in a professional association. We only use such information for the purpose for which it was obtained, or as required by law.

How We Collect Your Personal Information

We collect information when you input it into the Platform or otherwise provide it to us. We may also collect cookies to improve your user experience, though these generally don't identify you personally.

We primarily collect information directly from you, but if data is provided by a third party, we'll take steps to notify you.

Purpose of Collection

We collect personal information to:

Provide and improve our services
Communicate updates and support
Comply with legal obligations

We only disclose information to service providers assisting in operating the Platform. By using our services, you consent to receiving direct marketing material — you can opt out at any time.

Legal Basis for Processing

Consent – when you agree to use data for specific purposes (e.g., notifications, telehealth).
Contractual Necessity – to provide services under your agreement.
Legal Obligation – when required by law (e.g., health or tax).
Legitimate Interests – to maintain security and improve the Platform.

Security, Access and Correction

We use encrypted storage, access controls, secure Australian data centres, and monitoring to protect information. Clinicians remain responsible for lawful health record retention under their obligations (e.g., seven years after last contact).

We do not allow children to create personal accounts, and clinicians must obtain parental consent for minors.

Personal data is retained only as long as necessary, after which it is securely destroyed or anonymised. You may request access or correction in writing.

Third-Party Services

We integrate with third-party providers (e.g., telehealth, hosting, analytics, payment). They may process limited data solely to deliver their service, under strict compliance with privacy laws.

Data Breach Notification

In the event of a data breach, we comply with the Notifiable Data Breaches (NDB) Scheme under the Privacy Act 1988 (Cth), promptly notifying affected users and the Office of the Australian Information Commissioner (OAIC) when required.

Complaint Procedure

If you believe your privacy has been breached, contact our Privacy Officer. We will investigate and, if needed, rectify the issue. If you're unsatisfied, you may escalate the complaint to the Office of the Australian Information Commissioner.

Contact Us

If you have questions or wish to access or correct your data, contact our Privacy Officer:

Email: support@eckohealth.ai

‍