UpLift AI Privacy Policy

1. Introduction

UpLift AI Group Pty Ltd ("we", "us", "our") is committed to protecting the privacy and personal information of our users. This Privacy Policy outlines how we collect, store, use, and disclose personal and health information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

UpLift AI is a clinically designed digital mental health platform that includes an AI Co-Therapist™, designed to support—never replace—human-led therapy.

2. What Information We Collect

We may collect the following types of personal and sensitive information:

• Full name and contact details (e.g. email, phone number)
• Demographic data (e.g. age, gender, postcode)
• Health information provided by you or your treating clinician, including:
  • Mental health history
  • Session summaries
  • Treatment plans and progress notes
• Technical data from device usage (e.g. IP address, browser type)

3. How We Collect Your Information

We collect your information through:

• Online sign-up and onboarding processes
• In-app interactions with the AI Co-Therapist™
• Clinical forms filled out by you or your healthcare provider
• Feedback surveys and session usage data

4. Purpose of Collection

We collect and use your information for the following purposes:

• To provide personalised mental health support via our platform
• To facilitate communication and treatment continuity with your human therapist
• To deliver therapeutic tasks and monitor progress between appointments
• To generate clinician-ready summaries and reports to reduce admin load
• To improve the quality and performance of our services
• To comply with applicable legal obligations

5. Use and Disclosure of Information

We may disclose your information to:

• Your treating clinician or authorised care team
• Our technical support team (access limited to necessary troubleshooting)
• Research partners (only with explicit, de-identified consent)
• Third-party service providers strictly bound by confidentiality and privacy obligations

We will never sell your personal information. We only disclose data in line with the original purpose of collection and with your informed consent.

6. Data Storage and Security

• All personal and health data is stored on encrypted, Australian-based servers (AWS Sydney region).
• Access is restricted via multi-factor authentication and role-based permissions.
• Regular security audits, penetration testing, and encryption protocols are in place to protect your data.

7. Cross-Border Disclosure

We store all data within Australia. If any information is transferred overseas (e.g. for backup or analytics), it will be done in accordance with APP 8, ensuring comparable privacy protections.

8. Access, Correction, and Control

You have the right to:

• Access your personal information held by us
• Request corrections if the information is inaccurate or incomplete
• Withdraw consent at any time (this may affect your ability to use the platform)
• Request deletion of your account and associated data

To make a request, please contact us at: hello@upliftgroup.ai

9. Data Breach Protocol

In the event of a data breach likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, you can contact us at:

UpLift AI Group Pty Ltd
PO BOX 91, Kingsford NSW 2032
Email: hello@upliftgroup.ai
ABN: 11 682 541 493

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website, and we encourage you to review this page regularly. Continued use of the platform constitutes acceptance of the revised terms.

This policy applies to all users of the UpLift AI platform, including clinicians and patients.