Your health information is personal, and we treat it that way. This policy explains, in plain English, what information SOPHIA collects, how we use it, how we protect it, and the choices you have. It applies to the SOPHIA health tool and this website, both provided by Hartgood Health.
1Who we are
SOPHIA is created and operated by Hartgood Health. When this policy says "we," "us" or "our," it means Hartgood Health. If you have any question about your privacy or your information, you can reach us at hart@hartgood.com or +61 439 547 788. Our postal address is PO Box U71, Upper Burnie, Tasmania 7320, Australia.
2The information we collect
We only collect what we need to provide the service. That falls into three groups:
- Registration details. When you register through the Hartgood store, you provide your name, email and phone number so we can set up your account and send your onboarding kit.
- The health information you choose to add. This is whatever you deposit into SOPHIA — by voice, text, photo or document. It can include symptoms, lab and pathology results, imaging, medications, supplements, food and meals, sleep, and everyday observations. You decide what goes in and what stays out.
- Basic technical information. Like most websites, our hosting keeps standard logs (for example, general access records used to keep the service running and secure). We don't use this to build a profile of you.
3Health information is sensitive — and you're in control
Under Australian privacy law, health information is "sensitive information" and is given extra protection. We collect it only with your consent, and only because you have chosen to record it in SOPHIA to receive your reports. You can stop adding information at any time, and you can ask us to remove information you've added.
4How we use your information
We use your information to:
- generate your structured reports, your longitudinal lab view, and the separate one-page summary for your practitioner;
- keep your record organised over time so your reports become more useful;
- provide support and respond to you when you get in touch;
- operate, maintain and secure the service.
We do not sell your information, and we do not use it for advertising.
5De-identification — how your reports are kept safe to share
Before your information is processed to create a report, identifying details are stripped out — including from your blood-test results and uploaded documents. Your reports and your longitudinal lab pages are de-identified, and nothing that identifies you is stored on a publicly accessible server. The practical result is that you can share a report freely, because there is nothing in it that points back to you. Shared lab pages use long, unguessable web addresses so they aren't easily found.
6Who we share information with
We share information only with the service providers we need to run SOPHIA, and only for that purpose:
- An AI processing provider. De-identified text is sent to a trusted artificial-intelligence provider to generate your reports. This provider processes the text to produce the report and does not receive details that identify you.
- Our hosting provider. The service and its files are stored with a reputable web-hosting provider.
- Our store and payment provider. Your registration payment and contact details are handled through the Hartgood store and its payment processor. We never see or store your full card details.
We may also disclose information if the law requires it, or to protect the safety of a person.
7Information processed overseas
Some of the providers above may store or process information outside Australia. Where that happens, we take reasonable steps to use providers that handle information responsibly and securely. By using SOPHIA you consent to your information being processed in this way so that your reports can be produced.
8How we store and protect your information
We take reasonable steps to protect your information from misuse, loss, and unauthorised access — including de-identification, secured hosting, and limiting who can access information. No online service can promise perfect security, but privacy and security are central to how SOPHIA is designed, and we work to keep your information safe.
9How long we keep your information
We keep your information for as long as you have an active account and your record is in use, so that your reports remain available and continue to build over time. If you ask us to delete your information, or you close your account, we will remove it within a reasonable period, unless we are required to keep certain records by law.
10Accessing and correcting your information
You have the right to ask for a copy of the personal information we hold about you, and to ask us to correct anything that is wrong or out of date. Just contact us at hart@hartgood.com and we will help. There is normally no charge to make a request.
11Using SOPHIA for someone you care for
Carers, parents and family members sometimes use SOPHIA to keep a record on behalf of someone else. If you do this, please make sure you have the right to record that person's information and to act on their behalf. The same care and protections in this policy apply to their information.
12This website and cookies
This website keeps standard technical logs to run reliably and securely. We keep any cookies to the minimum needed for the site to work. We don't use the website to track you across other sites.
13Questions and complaints
If you have a concern about how your information has been handled, please contact us first at hart@hartgood.com — we take privacy seriously and will work with you to put things right. If you are in Australia and you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
14Changes to this policy
We may update this policy from time to time as SOPHIA grows or as the law changes. When we do, we'll update the date at the top of this page. For people outside Australia, we expect to add region-specific information (including for Germany and the wider European Union) as the service expands.
15Contact us
Hartgood Health
PO Box U71, Upper Burnie, Tasmania 7320, Australia
hart@hartgood.com · +61 439 547 788