Privacy Policy
How MedTalk AI collects, uses, and protects personal and health information.
Last updated August 2026A commitment to your privacy
MedTalk AI, powered by Faz Australia Pty Ltd (ABN 67 608 122 514), understands that protecting your personal information is important.
This policy is compliant with the Australian Privacy Principles, contained in the Commonwealth Privacy Act 1988.
This Privacy Policy sets out our commitment to protecting the privacy of personal information provided to us, or collected by us, about the healthcare practitioners and their patients who use MedTalk.
By using the Website (www.medtalk.co) or using the Application (MedTalk AI), you consent to the use of personal information as described in this Privacy Policy.
The information we collect
Personal information is information or an opinion, whether true or not and whether recorded in a material form or not, about an individual who is identified or reasonably identifiable.
Types of personal information we may collect about you
- Identity Data, including your name, age, and gender.
- Contact Data, including your telephone number, address, and email.
- Financial Data, including bank account and payment card details (handled by our third-party payment processor; we do not have access to this information).
- Transaction Data, including details about payments to and from you, and other details of products or services exchanged.
- Technical and Usage Data, including your IP address, login data, browser session data, page views, device and network information, search queries, browsing behavior, access and usage of our website (including cookies or analytics), and communications with our site.
- Government Identifiers, including but not limited to your provider number(s), AHPRA registration number, and healthcare provider identifier number.
- Marketing and Communications Data, including your preferences for receiving marketing and communication from us and our third parties.
Health information means information or an opinion about a patient, such as
- The health (including an illness, disability, or injury) of an individual at any time.
- An individual's expressed wishes about the future provision of health services to them.
- A health service provided, or to be provided, to an individual that is also personal information.
- Other personal information collected to provide, or in providing, a health service to an individual, including details such as a patient's name, address, admission and discharge dates, billing information, and Medicare number.
- Other personal information collected in connection with the donation, or intended donation, by an individual of their body parts, organs, or body substances.
- Genetic information about an individual in a form that is, or could be, predictive of the health of that individual or a genetic relative of the individual.
Examples of health information include
- Information about an individual's physical or mental health.
- Notes of an individual's symptoms or diagnosis and the treatment given.
- Specialist reports and test results.
- Physical or biological samples that could be linked to a patient (e.g., labelled with the patient's name or other identifier).
- Appointment and billing details.
- Prescriptions and other pharmaceutical purchases.
- Dental records.
- Records held by a fitness club about an individual.
- An individual's healthcare identifier when collected to provide a health service.
- Any other personal information (such as date of birth, gender, race, sexuality, or religion) collected for the purpose of providing a health service.
Informed Consent
MedTalk AI customers are healthcare practitioners who are utilising the Application. If you are a patient of a healthcare practitioner who uses the Application and do not wish for your personal information to be collected and used in the manner described in this Privacy Policy, you must inform the healthcare practitioner that you do not consent to the use of your personal information by the Application.
How we collect personal information
We collect personal information in a variety of ways, including:
- When you provide it directly to us, including face-to-face, over the phone, over email, or online.
- When you complete a form, such as registering for newsletters.
- When you use the Website we operate, including from any analytics and cookie providers or marketing providers, see the Website Cookies section for more detail on the use of cookies.
- From publicly available sources.
Why we collect, hold, use and disclose personal information
Personal information
We collect, hold, use and disclose your personal information for the following purposes:
- To enable you to access and use our services.
- To contact and communicate with you about our services, including in response to any support requests you lodge with us or other enquiries you make with us.
- To contact and communicate with you about any enquiries you make with us via the Website.
- For internal record keeping, administrative, invoicing and billing purposes.
- For analytics, market research and business development, including to operate and improve our business, associated applications and associated social media platforms.
- For advertising and marketing that we consider may be of interest to you.
- To comply with our legal obligations or if otherwise required or authorised by law.
Health information
We only collect, hold, use and disclose health information for the following purposes:
- Any purposes you consent to.
- The primary purpose for which it is collected, including to provide our services to you.
- If otherwise required or authorised by law.
Our disclosures of personal information to third parties
We will only disclose personal information (excluding sensitive information) to third parties where it is necessary as part of our services, where we have your consent, or where permitted by law. This means that we may disclose personal information (excluding sensitive information) to:
Personal information
- Our employees, contractors and/or related entities.
- IT service providers, data storage, web-hosting and server providers.
- Marketing or advertising providers.
- Professional advisors, bankers, auditors, our insurers and insurance brokers.
- Payment systems operators or processors.
- Our existing or potential agents or business partners.
- Advisers and any prospective purchaser's advisers if we merge with, or are acquired by, another company, or sell all or a portion of our assets. Your personal information may be among the assets transferred.
- Courts, tribunals and regulatory authorities, in the event you fail to pay for goods or services we have provided to you.
- Courts, tribunals, regulatory authorities and law enforcement officers, as required or authorised by law, in connection with any actual or prospective legal proceedings, or in order to establish, exercise or defend our legal rights.
- Third parties to collect and process data, such as analytics providers and cookies.
- Any other third parties as required or permitted by law, such as where we receive a subpoena.
Health information
We will only disclose health information in the following events:
- The individual to whom the health information relates would reasonably expect us to use or disclose the information.
- The use or disclosure of the information is required or authorised by or under an Australian law or a court/tribunal order.
- A permitted general situation exists in relation to the use or disclosure of the information by us.
- A permitted health situation exists in relation to the use or disclosure of the information by us.
- We reasonably believe that the use or disclosure of the information is reasonably necessary for one or more enforcement related activities conducted by, or on behalf of, an enforcement body.
Overseas disclosure
We may disclose personal information to overseas recipients in countries including the United States. When we disclose personal information to overseas recipients, we will take reasonable steps to ensure that the overseas recipients do not breach the Australian Privacy Principles.
Your rights and controlling your personal information
We will collect, hold, use and disclose your personal information in accordance with this Privacy Policy. You do not have to provide personal information to us, however, if you do not, it may affect our ability to do business with you.
If we receive personal information about you from a third party, we will protect it as set out in this Privacy Policy. As a healthcare provider providing personal or health information about a patient, you represent and warrant that you have the patient's consent to provide the personal information to us.
You may request access to the personal information that we hold about you.
If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant or misleading, please contact us. We will take reasonable steps to correct any information found to be inaccurate, out of date, incomplete, irrelevant or misleading.
If you wish to make a complaint, please contact us and provide us with full details of the complaint. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take in response to your complaint. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.
Website Forms
If you submit a form on our Website, or contact us by e-mail, we will collect the information provided by you like your name, e-mail, phone number, clinic/organisation you work for, and any other information you may include in your message. This information will be used by us to communicate with you to provide you with the information you requested.
MedTalk AI Application
The Application is available for use by healthcare practitioners through a subscription. Information including the healthcare practitioner's name, electronic medical record platform, billing information, and contact details will be collected in MedTalk AI to administer the account.
The Application only collects the personal information which is entered into it by the healthcare practitioners or which is recorded by the Application when it is being used by the healthcare practitioner.
Besides what is provided to it directly by the healthcare practitioner, the Application does not access a healthcare practitioner's electronic medical record or collect any information from a patient's record without data input from the healthcare practitioner.
Audio Files
A feature of MedTalk AI is to create a summary of what was discussed during an appointment. Any discussions between a patient and healthcare practitioner could be collected by MedTalk AI ("MedTalk AI Ambient Scribe"), including personal health information.
- ✓The recording ("Audio File") by MedTalk AI Ambient Scribe is securely stored by MedTalk.
- ✓MedTalk AI uses AI Technology to analyse the Audio File to create a transcript of the discussions. Without the ability to collect, record and transcribe the transcript, MedTalk AI would not work as intended.
- ✓As set out in MedTalk AI Terms of Use agreed to by the healthcare provider, MedTalk AI does not use confidential Audio Recordings or transcripts to train or improve its AI models. Only de-identified, anonymised data may be used for the sole purpose of improving MedTalk AI's performance, and for the development of new features and other product-related purposes.
- ✓MedTalk AI does not share this data with third parties.
- ✓MedTalk AI securely stores the Audio File for 24 hours, after which it is permanently deleted.
- ✓Transcripts and other documents generated by MedTalk AI Ambient Scribe are retained on MedTalk AI until deleted by the healthcare provider, or as otherwise authorised under this Privacy Policy.
- ✓Anonymised files may be kept indefinitely to be used for product and service improvements such as enhancing the accuracy of MedTalk AI's voice-to-text engine.
- ✓Healthcare providers using the Application are required to comply with their respective State's statutory and regulatory requirements for the storage of personal and health information.
Artificial Intelligence
MedTalk AI uses in-house and third-party artificial intelligence service providers (the "AI Service Providers") to help support the functions of the MedTalk AI Application as per the Terms of Use. Our contracts with our AI Service Providers ensure that they do not collect, use or disclose any information provided to them, except to provide the services we specifically request. We do not use confidential Patient Information or session history, in identifiable form, to train or refine any AI model. We may de-identify Patient Information, stripping identifying details, and use the de-identified data for further product improvements, in accordance with applicable legal and regulatory requirements.
Direct Marketing
If you request to receive direct marketing from MedTalk AI, we will collect your name and e-mail and any other information you may provide to deliver our direct marketing material. We will only share direct marketing communications of the types that you have consented to. We will not share the information you provide with third parties, unless in accordance with this Privacy Policy, or as a matter of law.
Links to other websites
Our website may contain links to other parties' websites. We do not have any control over those websites and we are not responsible for the protection and privacy of any personal information which you provide whilst visiting those websites. Those websites are not governed by this Privacy Policy.
Amendments
We may, at any time and at our discretion, vary this Privacy Policy by publishing the amended Privacy Policy on our website. We recommend you check our website regularly to ensure you are aware of our current Privacy Policy.
If you have any privacy complaints, please contact the Office of the Australian Information Commissioner at oaic.gov.au or oaic.gov.au/contact-us.
For any questions or notices, please contact us
Faz Australia Pty Ltd (ABN 67 608 122 514)
support@medtalk.co