Privacy Policy and Terms of Service

Last Updated: January 2025

 

Privacy Policy

​

Potentialz Unlimited Pty Ltd (ABN 34 629 683 432) ("we", "our", or "us") operates the Potentialz Unlimited mobile application and the website www.potentialz.com.au (collectively, the "Services").

 

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, or engage in our clinical treatment services.

 

By accessing or using our Services, you agree to the collection and use of information in accordance with this policy.

 

Information We Collect

 

Information You Provide

 

• Clinical & Personal Information: In the course of your treatment, personal information about you is collected to enable your treatment. This includes your history, treatment notes, and communications.

• Contact Information: When you submit a question, feedback, or fill out a form on our website or App, you may provide your name, email address, and phone number.

• Questions and Feedback: Content you submit through our anonymous question and feedback forms.

 

Automatically Collected Information

​

When you use our Services (App or Website), we automatically collect certain information, including:

 

• Device & Browser Data: Information about your computer or mobile device, including operating system, browser type, and screen resolution.

• Usage Data: Pages or screens you view, how long you spend on a page, navigation paths between pages, and access times.

• Log Data: Your Internet Protocol (IP) address, which may determine your general location.

• Analytics Data: Aggregated, anonymised data about how the Services are used to help us improve functionality.

 

Cookies and Tracking Technologies

​

We use cookies and similar tracking technologies on our website to track activity and hold certain information.

​

• Cookies: Files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

• Essential Cookies: Required for the website to function properly (e.g., secure log-ins).

​

Permissions (Mobile App Specific)

​

We do not access your mobile device's contacts, camera, microphone, or location without explicit permission.

 

How We Use Your Information

​

We use the information we collect to:

​

• Provide Clinical Treatment: Enable your treatment and maintain accurate clinical records.

• Provide Services: Operate our website and app, respond to inquiries, and facilitate features.

• Research: Health research using de-identified data (data where your identity is removed) may be undertaken by this practice, by funding bodies, or by this practice’s technology providers. As a patient, you consent to this use of de-identified data.

• Improve Our Services: Analyse usage patterns to enhance website content, app features, and user experience.

• Communication: Send you administrative information, appointment reminders, or (with your permission) push notifications.

​

Clinical Confidentiality and Disclosure

​

All information obtained during your clinical treatment is kept confidential and secure. However, we may disclose your information under the following specific circumstances:

 

• Legal Obligation: If your file is subpoenaed by a court.

• Risk of Harm: If failure to disclose the information would place you or another person at risk of harm.

• Prior Approval: If your prior approval has been obtained to provide a written report to another professional/agency (e.g., a lawyer) or discuss material with another person (e.g., a parent or employer).

• Funding Bodies: If you claim rebates from funding bodies, health practitioners may be required to provide summary reports to referring doctors, specialists, and/or agencies regarding your progress.

​

Data Storage and Security

​​

Where Your Data is Stored

​

• Clinical Records: All notes taken in the course of your treatment and all communications relating to your treatment become a part of your clinical records. These are stored electronically in your patient file.

• Analytics & Web Data: Stored securely on our servers (including Supabase/PostgreSQL) with encryption at rest and in transit.

• Authentication Data: If you create an account, authentication is handled through secure providers (e.g., Firebase Authentication) with industry-standard security.

• Local App Data: Personal journal entries and notes created in the App are stored locally on your device and are not transmitted to our servers unless you explicitly choose to sync them.

 

Security Measures

​

We implement appropriate technical and organisational measures to protect your personal information, including encryption in transit (TLS/SSL), encryption at rest, and strict access controls.

 

​

Third-Party Services

 

We may employ third-party companies and individuals to facilitate our Services ("Service Providers"), to provide the Services on our behalf, or to assist us in analysing how our Services are used. These include:

​

​​

​

​