Privacy Policy
This is an interim policy being finalised with legal counsel. It explains what we collect, how we use it, and the choices you have. ClinicalAssessment.io is a documentation tool for licensed clinicians.
1. Who we are
ClinicalAssessment.io (“we”, “us”) provides software that helps registered health practitioners structure assessments and generate care plans and reports. For privacy questions, contact hello@clinicalassessment.io.
2. Information we collect
Account information — your name, email and professional details, handled via our authentication provider. Clinical information you enter — the patient/participant and assessment details you input or upload to generate a report; you are responsible for having the authority to provide it. Usage & device data — pages visited, actions taken, and standard analytics collected via cookies. Payment data — processed by our payment provider; we do not store full card details.
3. Cookies, analytics & advertising
We use Google Analytics (GA4) to understand site usage, and Google Ads for conversion measurement and remarketing. These set cookies and may allow Google to associate your activity with its advertising. You can opt out via your Google Ad Settings, the Google Analytics opt-out, or your browser’s cookie controls. We do not sell your personal information.
4. How we use information
To provide and operate the service (including generating your reports), to process payments, to secure and improve the product, to measure and improve our marketing, and to comply with legal obligations. Clinical information you enter is processed to produce the document you request — you remain the author and controller of that content.
5. Service providers (sub-processors)
We share information only with providers that help us run the service, under contract: authentication, database and hosting, AI drafting, PDF rendering, payments, email, and analytics/advertising. Each processes data on our behalf for the purposes above. We host data with reputable providers in appropriate regions for the market you use.
6. Health information
Clinical/health information entered by a practitioner is sensitive health information (for example, PHI in the United States). The practitioner is responsible for the lawful basis to collect and enter it; we process it to generate the requested report and handle it with appropriate safeguards. Do not upload information you are not authorised to share.
7. Your rights
Depending on your jurisdiction, applicable privacy and health-information laws may give you rights over your personal information — for example, the Australian Privacy Act and Australian Privacy Principles, or, in the United States, health-privacy rules such as HIPAA where they apply. You may request access to or correction of your personal information, or make a complaint. Contact us at hello@clinicalassessment.io. Unresolved complaints may be referred to the relevant regulator (such as the OAIC in Australia).
8. Security & retention
Protecting clinical information is central to how the product is built. Information is encrypted in transit and at rest, access is restricted on a least-privilege basis, and we rely on reputable infrastructure providers, hosting data in appropriate regions for the market you use. You remain in control of the clinical content you enter. We retain information only for as long as needed to provide the service and to meet legal and professional obligations. While no online service can promise absolute security, we take safeguarding your information seriously and review our controls on an ongoing basis.
9. Changes
We may update this policy as the product and our legal review evolve. Material changes will be reflected here with an updated date.
This interim policy will be superseded by a finalised Privacy Policy. Questions: hello@clinicalassessment.io.