INFORM.

Privacy Policy

Privacy

Inform Physio

Privacy Policy

Effective 11 June 2026·Last updated 17 September 2026

This Privacy Policy explains how Inform Physio collects, uses, discloses, stores, and protects personal information—including health and clinical data—when you access or use the Inform mobile application and associated services.

Contents
1

1. Introduction and scope

Inform ("Inform", "we", "us", or "our") operates a digital physiotherapy and rehabilitation platform. This Privacy Policy applies to personal information collected through the Inform mobile application and any related services made available to patients (collectively, the "Services").

By registering for an account or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the handling of your personal information as described herein. If you do not agree with this Privacy Policy, you must not use the Services.

Data controller

Inform Physio

Australia

Privacy enquiries: hello@physioteneka.com

Website: https://informapp.com.au

2

2. Information we collect

We collect personal information that you provide directly, information generated through your use of the Services, and limited technical data from your device. The categories of information we may collect include the following.

2.1 Account and identity information

When you create or access an account, we may collect your full name, email address, telephone number, profile photograph (where uploaded), and account credentials. Passwords are stored using appropriate security measures; plain-text passwords are not retained.

Authentication may be completed using email and password, Google Sign-In, or Sign in with Apple. Where third-party sign-in is used, we receive authentication tokens and such profile information as the provider makes available in accordance with your settings and their policies.

2.2 Health and clinical information

To support personalised rehabilitation and clinical care, we may collect health-related information that you provide during onboarding or subsequently through your profile. This may include age, gender, height, weight, medical conditions, injury history, activity and training profile, and other health details you elect to disclose.

Health information may constitute sensitive personal information under applicable privacy legislation. We collect such information only where you provide it and where it is reasonably necessary to deliver the Services.

2.3 Treatment and rehabilitation records

In connection with clinical and rehabilitation features, we may collect treatment objectives, special considerations, case details and status, rehabilitation plan data (including prescribed exercises, session completion, perceived exertion ratings, and performance metrics), progress records, and related clinical notes.

2.4 Communications and uploaded content

Where you use messaging, support, or AI-assisted intake functionality, we may collect correspondence with your care team, support and FAQ chatbot interactions, uploaded images, video, audio, documents, and associated metadata including timestamps.

2.5 Subscription and billing information

If you subscribe to a paid plan, we may collect subscription tier, status, and billing identifiers or transaction references. If you subscribe on iOS, payment is processed by Apple through In-App Purchase. We receive subscription status and transaction identifiers from Apple; we do not receive or store your full payment card details. On other platforms, payment may be processed by our payment provider (such as Stripe) through a secure checkout environment. Full payment card numbers are not stored on our systems.

2.6 Device and technical information

Where push notifications are enabled, we may collect device tokens, platform type, device model, and notification delivery data. We may also collect application version, IP address, diagnostic logs, and authentication or session tokens stored securely on your device.

2.7 Device permissions

Depending on the features you use, the application may request access to your camera, photo library, microphone, speech recognition, and notification services. Permission settings may be managed through your device operating system at any time.

3

3. How we use personal information

We use personal information for purposes connected with the operation of the Services, including to:

  • establish, administer, and maintain your account;
  • authenticate users and maintain account security;
  • deliver rehabilitation plans, case management, and progress monitoring;
  • facilitate communication between you and authorised members of your care team;
  • provide customer support and automated assistance features;
  • send service notifications where you have opted in;
  • process subscriptions and manage billing;
  • personalise the Services based on your health profile and activity baseline;
  • maintain, improve, and secure the platform;
  • comply with legal and regulatory obligations; and
  • respond to enquiries and privacy requests.

We do not sell personal information.

4

4. Disclosure of personal information

We disclose personal information only as described in this Privacy Policy or as otherwise permitted or required by law.

4.1 Care team and clinical purposes

Information you provide may be disclosed to authorised physiotherapists, clinicians, and other care team members engaged in your treatment through the Inform platform, to the extent necessary to deliver clinical care and rehabilitation services.

4.2 Service providers

We engage third-party providers to support hosting, storage, authentication, notifications, and payment processing. These providers may include cloud infrastructure providers, Google and Firebase, Apple (including the Apple App Store and In-App Purchase for iOS subscriptions), and payment processors such as Stripe for web or other platform checkouts. Such providers handle information on our behalf under contractual obligations requiring appropriate protection and use limited to the services they perform for us.

4.3 Legal and regulatory disclosure

We may disclose information where required by law, regulation, court order, or governmental authority, or where we reasonably believe disclosure is necessary to protect the rights, safety, or property of Inform, our users, or others, to detect or prevent fraud or security incidents, or to enforce our agreements and policies.

4.4 Business transactions

In the event of a merger, acquisition, reorganisation, or sale of assets, personal information may be transferred as part of that transaction, subject to protections consistent with this Privacy Policy.

5

5. Storage and security

Personal information is stored on secured servers, which may be located in Australia or in other jurisdictions where our service providers operate.

We implement reasonable technical and organisational safeguards, including encrypted transmission, access controls, secure credential handling, and protected upload mechanisms for clinical media and documents.

No method of electronic transmission or storage is entirely secure. While we take appropriate steps to protect personal information, we cannot guarantee absolute security.

6

6. Retention

We retain personal information for as long as your account remains active or as reasonably necessary to provide the Services, meet legal obligations, resolve disputes, and enforce our agreements.

Following account deletion, personal information will be deleted or de-identified within a reasonable period, except where retention is required or permitted by law—for example, for billing records, fraud prevention, or regulatory compliance. Residual copies in backup systems may persist for a limited period before permanent deletion.

7

7. Your rights

Subject to applicable law, you may have the right to request access to, correction of, or deletion of your personal information; to withdraw consent where processing is consent-based; to object to or restrict certain processing; to receive a portable copy of your data; and to lodge a complaint with a privacy regulator.

Australia

This Privacy Policy is intended to align with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Complaints may be directed to us using the contact details below or lodged with the Office of the Australian Information Commissioner at www.oaic.gov.au.

Other jurisdictions

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with dedicated data protection legislation, additional rights may apply under GDPR or local law. Contact us to exercise those rights.

Privacy requests may be submitted to hello@physioteneka.com. We may require verification of your identity before processing a request.

8

8. Notifications

Push notifications may be enabled or disabled through application settings or your device notification preferences. Disabling notifications does not preclude service-related communications where permitted by law.

9

9. Minors

The Services are not directed to individuals under 16 years of age without appropriate parental or guardian consent. We do not knowingly collect personal information from minors in breach of this requirement. If you believe such information has been collected, please contact us and we will take appropriate steps to address it.

10

10. Account deletion

You may request deletion of your account and associated personal information through the application or by contacting us directly.

In-app deletion

  • Sign in to the Inform application;
  • Navigate to Profile;
  • Select Delete Account;
  • Confirm deletion by entering the email address registered to your account; and
  • Complete the confirmation prompt.

Upon successful deletion, your account will be deactivated, associated personal information will be deleted or de-identified subject to legal retention requirements, and your active session will be terminated.

Information that may be retained

Limited information may be retained where required or permitted by law, including billing and transaction records, data necessary for fraud prevention or security, and de-identified or aggregated information that no longer identifies you.

Deletion by email

If you are unable to access the application, you may submit an account deletion request to hello@physioteneka.com from the email address associated with your account, using the subject line "Account Deletion Request". Identity verification may be required. Account deletion is permanent and cannot be reversed.

11

11. International transfers

Personal information may be processed in countries other than your country of residence. Where cross-border transfers are undertaken, we implement appropriate safeguards as required by applicable law.

13

13. Amendments

We may amend this Privacy Policy from time to time. Material changes will be communicated through the application, by email, or by publication of an updated policy with a revised effective date. Continued use of the Services following the effective date of an amendment constitutes acceptance of the updated policy.

14

14. Contact

For questions regarding this Privacy Policy or our handling of personal information, please contact:

Inform Physio

Privacy: hello@physioteneka.com

Support: hello@physioteneka.com

Address: Australia

Website: https://informapp.com.au