Mobilyte Launchpad Australia (“Launchpad”) is an operations app for mobile IV and wellness practices in Australia. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles: what we collect from practice owners and staff, why, who we disclose it to (including overseas), how long we keep it, and how to access, correct or delete it.
No patient records
Launchpad is not a patient record system. We do not store patient names, email addresses, phone numbers or any other information that identifies a patient on our servers. When you send a patient an aftercare page, the contact details you type stay on your device and are used only to open your own email or messaging app.
What we collect
- Account: your name, email address and sign-in credentials (handled by our authentication provider).
- Practice information: practice name, address, state, logo and branding, services and pricing, protocols, documents, vendors, inventory, cold-chain temperature logs, incidents and mileage.
- Staff information: the names, email addresses, roles, registrations and credentials you record for your staff, and the attestations they sign through their staff link.
- Treatment activity: the treatment types you log, attached to your practice and never to a person. We handle this as sensitive health information even though it identifies no patient.
- Location: your practice address, which we convert to map coordinates. Growth features offer a “use my location” button that reads your device location once, with your permission, to set a home base. There is no background or continuous tracking and no monitoring of staff.
- Device identifiers: if you turn on alerts, we store a push notification address and its encryption keys for that browser or device. It is not an advertising identifier and is deleted when you turn alerts off.
- Payments: handled entirely by Stripe. We never see or store card numbers; we keep your subscription status and billing history.
We collect this directly from you as you use the app. You can use Launchpad without giving us any patient information, and you don't need to use a feature that collects something you'd rather not share (for example, location).
How we use it
To run the app, keep your practice data in sync across your devices, prepare compliance and operations alerts, send you account and reminder email, process your subscription, and provide support. We do not sell your information and we do not use it for advertising.
Who we disclose it to
We share information only with the service providers needed to run Launchpad:
- Lovable Cloud / Supabase — database, authentication and file storage, hosted in Singapore
- Cloudflare — application hosting and delivery
- Stripe — subscription payments and billing
- Lovable managed email, delivered by Resend — account and reminder email
- Google Gemini — reading and drafting. Photos and screenshots you upload for reading are sent to Google in full, including thermometer photos, supply receipts and packing slips, and advertising copy and images you check. Also used for outreach drafting, community event research, and drawing the logo concepts you ask Logo Studio for.
- OpenAI, via the Lovable AI gateway — checking compliance findings, writing and illustrating social posts (your logo is sent with each post so it can be placed on the artwork), and drafting and safety-checking Logo Studio concepts
- Perplexity — compliance research on Australian regulators
- Google Places — nearby venue and business lookup for growth ideas (approximate coordinates and generic search terms only, never your practice name)
- OpenStreetMap Nominatim — converts an address you type into map coordinates
- OSRM — driving distance between your home base and public event venues
- Open-Meteo — weather forecasts for growth ideas (coordinates only, called from your browser)
- RunGuides — public community event listings (an Australian state only)
- Therapeutic Goods Administration — public medicine shortage data (medicine names only, nothing about you)
- Google Search Console — search performance reporting, if you connect it
- Google Fonts — typeface delivery, called from your browser
- Push delivery services — Google, Apple, Mozilla and Microsoft — used only to deliver alerts you have turned on
Overseas disclosure
Your practice data, sign-in details and uploaded files are stored in Singapore. Several of the other providers above process information in the United States, and some operate globally (for example Cloudflare's delivery network and the push delivery services). By using Launchpad you consent to this. We choose providers that protect information in transit and at rest, but overseas providers are not bound by the Australian Privacy Principles and you may not be able to seek redress under Australian law for their handling of it.
Security
All information is encrypted in transit between your device, Launchpad and every provider above. Database rules restrict practice data to your own account. Stored data is protected by our providers' storage encryption; we do not add separate field-level encryption to uploaded documents or stored credentials. If a data breach is likely to cause serious harm, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.
How long we keep it
- Practice data is kept while your account is active.
- When you delete your account in the app, your practice data and uploaded files are removed straight away. If you ask us by email because you can't sign in, we verify the request and complete the deletion within 30 days.
- Invoices are kept in our Stripe billing account for 5 years, as Australian tax law requires. A log of access changes (no practice content) is cleared after 180 days.
- Push device records are deleted as soon as you turn alerts off.
Access, correction and deletion
You can see and correct most of your information directly in the app, and delete your account from Profile → Delete account (see how to delete your account). To ask for a copy of the personal information we hold about you, to correct something you can't change yourself, or to delete your account if you can't sign in, email support@mobilytewellness.com. We will respond within 30 days and won't charge you for making a request.
Complaints
If you think we have mishandled your personal information, email support@mobilytewellness.com and we will respond within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Age
Launchpad is a business tool for registered practice owners and their staff. It is not intended for anyone under 18.
Changes
If this policy changes materially, we will update the effective date above and let account holders know by email.
Contact
Privacy questions and requests: support@mobilytewellness.com