Privacy policy.

Overview

HelloToday ("we", "our", "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and disclose personal information when you use our website, applications, and services.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using HelloToday, you agree to the collection and use of information in accordance with this policy, which forms part of our Terms of Service.

Information we collect

We may collect the following types of personal information:

• Name
• Email address
• Contact details of nominated family members or trusted contacts
• App usage data and check-in activity
• Medication information you choose to enter (medication names, doses, schedules, and whether doses were marked as taken)
• Communication preferences (e.g. email notifications, alerts, updates)
• Technical information such as IP address, device type, and browser (via standard analytics tools)

Health information (medication data)

Medication information — such as medication names, doses, schedules, and dose history — is sensitive health information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Consent. We only collect health information that you (or someone you have authorised) choose to enter into the app, and only with your consent. Entering medication information is optional — you can use HelloToday's daily check-in without it. You may withdraw consent at any time by deleting your medication information in the app or by contacting us to delete it.

How we use it. We use medication information solely to provide the Service: sending you your reminders, showing you your own schedule and history, and sharing dose status with the family members or trusted contacts you have connected. We do not use health information for advertising or profiling, and we never sell it.

Sharing with connected family members. When you connect a family member or trusted contact, they can see the check-in and dose status you mark in the app (and, depending on your settings, related reminder details). You choose who is connected and can remove a connected contact at any time in the app. This visibility is informational only — see our Terms of Service for what it does and does not mean.

Where it is stored. Medication and check-in data is stored with our database and infrastructure provider, Supabase, which may host data on servers located outside Australia (including in the United States). See "International data transfers" below.

Deletion. You can delete individual medications in the app, or request deletion of your account and all associated health information by contacting us at info@hellotoday.com.au.

How we use information

We use personal information to:

• Operate and provide the HelloToday service
• Send check-in notifications, reminders, and alerts
• Communicate important service updates
• Send onboarding, transactional, and service-related emails
• Improve our website, application, and user experience
• Respond to enquiries and support requests

Email communications & mailing lists

By creating an account, joining a waitlist, or providing your email address, you consent to receiving service-related emails from HelloToday. These may include:

• Account and onboarding communications
• Check-in notifications and alerts
• Service updates and operational messages

We may also send optional product updates or announcements. You can opt out of non-essential emails at any time by using the unsubscribe link included in our emails or by contacting us directly.

HelloToday does not send spam or sell email addresses to third parties.

Email service provider (Mailjet)

We use Mailjet as a third-party email service provider to send emails and notifications on our behalf.

Mailjet processes personal data (such as email addresses and message metadata) solely for the purpose of delivering emails and in accordance with their data protection and security obligations.

Mailjet acts as a data processor, while HelloToday remains the data controller of your personal information.

You can view Mailjet's Privacy Policy at: mailjet.com/legal/privacy-policy

Data sharing

We do not sell your personal data.

We may share personal information with trusted third-party service providers only where necessary to operate the service, including:

• Email and messaging providers (e.g. Mailjet, and Twilio for SMS notifications)
• Database, hosting, and infrastructure providers (e.g. Supabase)
• Push-notification services (Apple and Google)
• Analytics and monitoring services

All third-party providers are required to handle data securely and only for the intended purpose.

We also share check-in and dose status with the family members and trusted contacts you have chosen to connect in the app, as described under "Health information" above.

Data storage & security

App data, including medication and check-in data, is stored with Supabase, our database and infrastructure provider. Data is encrypted in transit, and access is restricted to what is needed to operate the Service.

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, or disclosure.

However, no system is completely secure, and we cannot guarantee absolute security.

International data transfers

Some third-party service providers — including Supabase (database hosting), Mailjet (email), and Twilio (SMS) — may store or process data on servers located outside Australia, including in the United States and Europe. This means your personal information, including health information you enter, may be held overseas.

Where this occurs, we take reasonable steps, consistent with Australian Privacy Principle 8, to ensure overseas providers handle your data in a way that is consistent with the Australian Privacy Principles, including through the providers' contractual data-protection and security commitments. By using the Service, you consent to your information being stored and processed in these locations.

Access, correction & deletion

You may request access to, correction of, or deletion of your personal information at any time by contacting us.

We will respond to all reasonable requests in accordance with applicable laws.

Cookies & analytics

Our website may use cookies and similar technologies to improve functionality and analyse usage. You can control cookie preferences through your browser settings.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

Complaints

If you believe we have mishandled your personal information, please contact us first and we will respond within a reasonable time. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact us

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

Email: info@hellotoday.com.au