Privacy Policy

1. Overview

MEDBOOKS AI ("we", "us", "our") is committed to protecting the privacy of your personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

2. Information We Collect

We collect and process the following types of information:

• Practice and business details (name, ABN, address, contact information)
• Financial data (invoices, receipts, expenses, billing records)
• Patient billing information (name, health fund details, billing amounts)
• Practitioner information (names, provider numbers, AHPRA numbers, payroll data)
• Account credentials and authentication data

3. Patient Data Privacy

MEDBOOKS AI processes limited patient information solely for billing and health fund claim purposes. We do not:

• Store patient health records or clinical data
• Access or manage patient medical information
• Share patient information with third parties except as required for claim processing
• Use patient data for marketing or analytics purposes

Patient identifying information is handled in accordance with the Australian Privacy Principles and the Healthcare Identifiers Act 2010.

4. AHPRA Compliance Note

MEDBOOKS AI is a financial management tool only. It does not provide clinical advice, manage patient health records, or replace systems regulated by the Australian Health Practitioner Regulation Agency (AHPRA). Practitioners must maintain appropriate clinical governance and record-keeping systems separately, in compliance with their relevant national board requirements.

5. Data Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security audits. Data is hosted on secure servers with appropriate physical and technical safeguards.

6. Data Retention & Deletion

Your data is retained for as long as your account is active. You may request account deletion at any time through the Settings page. Upon deletion, all data will be permanently removed within 30 days, except where retention is required by law (e.g., ATO record-keeping requirements of 5 years).

7. Your Rights

You have the right to access, correct, and delete your personal information. To make a request, contact us at the details below.

8. Contact

For privacy-related enquiries, please contact our Privacy Officer via the contact details provided in your account settings.