Last Updated: February 2026
Introduction
Audri Pty Ltd (ABN 22 697 810 496) (Audri, we, us, our) is a company which owns the AI-driven history-taking and clinical decision support platform (the Platform). The primary purpose of the Platform is to assist Practitioners with patient intake and related clinical decision support services.
Audri is bound by the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and any applicable state-based health records legislation (including the Health Records Act 2001 (Vic)). The Privacy Act 1988 (Cth) and the APPs contained therein are designed to promote and protect the privacy of individuals and to regulate how Australian organisations handle personal information. The applicable health records legislation establishes a framework to protect the privacy of individuals' health information. You can learn more about this legislation on the OAIC and the relevant state government websites.
As a provider of medical-related services, we understand that the personal information you provide when interacting with the Platform and/or Audri is often sensitive. We are committed to handling your personal information with care and protecting your privacy.
This Privacy Policy explains how we collect, use, disclose, store and otherwise handle personal information relating to Patients and Practice Staff (including Practitioners) who use the Platform. You acknowledge and accept this Privacy Policy when you participate in an Intake Interview, register or access an account, contact our support team through the Platform, or when your personal information is otherwise collected by us from a third party where such collection is required or permitted by Australian law or a court or tribunal order.
Definitions
- Data Breach Response Plan means a plan developed and maintained by us for identifying and responding to a data breach.
- Patients means individuals who access or use the Platform for the purpose of receiving healthcare services or related support.
- Practice means a medical practice, clinic or healthcare organisation that is selected by, or assigned to, the Patients.
- Practice Staff means individuals engaged by or on behalf of a medical practice that uses the Platform, including Practitioners, employees, contractors and administrative personnel.
- Practitioners means health practitioners registered with the Medical Board of Australia who are selected by, or assigned to, the Patients.
- Privacy Officer means the person appointed by us from time to time to oversee compliance with this Privacy Policy and manage our privacy practices.
Types of information we collect and hold
We may collect your personal and/or sensitive information that is reasonably necessary for us to provide our services. This includes but is not limited to:
- Personal Information: Name, date of birth, gender, email address, phone number and other similar information.
- Sensitive Information (Health Information): Medical history, symptoms, diagnoses, test results, treatment plans, medication lists, family history, and the transcripts of Intake Interviews.
- Voice Data: We may collect voice data where you choose to speak about your information by using the voice-enabled or audio recording features on the Platform.
- Professional Data: For Practice Staff we collect contact details, and AHPRA registration details for Practitioners.
- Technical Data: IP addresses, browser types, device identifiers, and usage logs to ensure Platform security and performance.
- Financial Data: Payment information (processed securely via third-party payment service providers).
How we collect information
We collect information in the following ways:
- Direct Interaction: When you participate in an Intake Interview, register an account, or contact our support team.
- From Third Parties: We receive your relevant personal and health information from Practice Staff and the software they use (including any practice management software) to initiate the intake service at the request of the treating Practitioner.
- Automated Technologies: We use cookies and similar tracking technologies to analyse Platform usage and improve functionality.
Audri will only collect information that is reasonably necessary for providing its services, by lawful means and under relevant legislation, regulatory guidelines and industry codes.
Where lawful and practicable, you have the option of remaining anonymous or using a pseudonym. However, as the Platform is designed to facilitate clinical care between a patient and a Practitioner, it is generally not possible for us to provide the services to you without information that identifies you.
If you do not wish for us to collect your personal information through the Platform, you may choose not to use the Platform and instead interact directly with your Practitioner or healthcare provider through alternative means. Please note that choosing not to provide certain personal information may limit or prevent our ability to provide services through the Platform.
If you have interacted with us through the Platform or contacted our support team and subsequently chosen to discontinue use of our services, we may continue to hold records relating to those interactions and any personal information collected in connection with them.
Use of your information
We use your information for the following purposes:
- Service Provision: To initiate and conduct Intake Interviews, transcribe voice data, generate, communicate and deliver medical summaries or reports, and to provide access to collected information to the Practice and/or Practitioner selected by you or assigned to you through the Platform.
- Direct Marketing: We may use your personal information (but never your sensitive health information) to send you updates about our services. You may opt out of receiving marketing communications at any time by using the "unsubscribe" link in our emails or by contacting us at support@audri.ai.
- Payment: To process debit and/or credit card payments.
- Platform Improvement: We may use de-identifiable health information to train our AI models, and we may use identifiable personal and/or health information to conduct Platform monitoring, auditing and improvement.
- Communication: To communicate with you by sending you Intake Interview invitations, account notifications and technical updates.
- Legal Compliance: To comply with clinical record-keeping obligations and tax laws.
If you do not provide the requested information, we may be unable to provide our services to you or the clinical summary to your Practitioner, which may impact your healthcare delivery.
Disclosure of your information
We may disclose your personal and sensitive health information to the following categories of recipients:
- Healthcare Providers: Your selected or assigned Practice and Practitioner responsible for your clinical care, to whom we transmit interview summaries, transcripts, and related data.
- Our Employees: Our employees may access your personal information as necessary to provide our services to you. Such access is subject to confidentiality obligations imposed under their employment contracts and applicable laws.
- Practice Management Integrations: Third-party Practice Management Systems (PMS) or Electronic Health Record (EHR) providers.
- AI and Technology Service Providers: Third-party vendors who provide essential technical infrastructure, including:
- AI Model Providers: To process, transcribe, analyse and summarise your data using secure artificial intelligence and machine learning models. To train such models, your personal health information is de-identified and aggregated such that it cannot be linked back to you.
- Infrastructure Partners: Cloud hosting, telephony services, and SMS gateway providers necessary to operate, and conduct system monitoring, auditing and improvement on the Platform.
- Professional Advisers: Our legal advisors, auditors, or insurers where reasonably necessary.
- Legal and Regulatory Authorities: Government agencies, law enforcement, or regulatory bodies where disclosure is required or authorised by Australian law (including but not limited to the Privacy Act 1988 (Cth)), a court order, or international equivalents.
Overseas data disclosure
Your personal information is primarily stored or processed on secure servers operated by the relevant service providers located in Australia. However, some of our service providers (such as AI processing layers or technical support tools) may transfer data to, and process data through, servers located overseas (typically in the USA).
Where we disclose data overseas, we take reasonable steps to ensure the recipient handles and protects your data in a manner consistent with the applicable Australian privacy legislation, regulations and/or rules. By using our Platform, you consent to this potential cross-border disclosure of your information.
Data security and retention
We implement robust security measures to keep private and protect your information, including:
- Encryption: Data is encrypted both at rest and in transit.
- Access Control: Strict multi-factor authentication for staff and Practitioners.
- Retention: We retain health information for as long as required by the applicable Australian health records legislation (typically 7 years for adults or until a minor turns 25). Once no longer required, data is destroyed or permanently de-identified.
Privacy is taken seriously by us, and we will act regarding any breach of our obligations. If you suspect that any data breach may arise, please contact our Privacy Officer at support@audri.ai. Any data breach will be handled in accordance with our Data Breach Response Plan. For details, please visit https://www.audri.ai/files/dbrp.pdf.
Access and correction
Audri has appointed a Privacy Officer to oversee its management of personal information under this Policy and the applicable privacy laws. The Privacy Officer's contact details are set out below.
Under the applicable privacy laws, you have the right to request access to personal information we hold about you. To do so, please contact our Privacy Officer if you want to make any request to access. Please note that we may not allow you to access your personal information in our reasonable discretion. In the event that we refuse to grant you access to your personal information, we will supply you with written notice setting out the reasons for the refusal.
We endeavour to ensure that any personal information we hold about you is accurate, complete and current. You may advise us by contacting our Privacy Officer to correct your information, if you believe any of the information that we hold is inaccurate or becomes out of date.
We will respond to your request within 30 days. We may require identity verification before providing access or correcting your information.
Complaints
If you have a concern about our privacy practices, please contact us at support@audri.ai. We will investigate and aim to resolve your complaint within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
- Web: www.oaic.gov.au
- Phone: 1300 363 992
Updates to the Audri Privacy Policy
This Privacy Policy will be reviewed from time to time having regard to changes in applicable laws, industry codes, our operations and practices, and any other matters we consider appropriate.
Contact details
Audri Pty Ltd Email: support@audri.ai Website: www.audri.ai