Privacy Policy

At KenkoHealth.co Pty Ltd (ACN 669312190 / ABN 23669312190) we understand that your privacy is important, and we take the responsibility of protecting your personal information very seriously. This privacy policy outlines the types of information we collect, how we use and protect it, and your rights and choices regarding your information.

Collection and Use of Personal Information:
We collect personal information such as name, address, email address, phone number, and medical information. This information is used to provide our services, to allow healthcare organisations and Kenko to communicate with you about your health, and to improve our platform. We will never sell your personal information to third parties.

Data Security:
We use industry-standard security measures to protect your personal information from unauthorised access, disclosure, or misuse. All data transmitted to and from our apps is encrypted, and we store your data on secure AWS servers and services that comply with HIPAA regulations. All sensitive data is also further encrypted in our databases at rest &/or is unidentifiable, ensuring that any data breach occurrence does not expose or link healthcare data with personally identifiable information.

HIPAA Compliance and Data Security:
At Kenko, we prioritise the security and privacy of our users health information. To ensure the highest standards of data protection, we have implemented technical safeguards and processes that comply with the Health Insurance Portability and Accountability Act (HIPAA).

Kenko has signed a Business Associate Agreement (BAA) with Amazon Web Services (AWS), ensuring that all data hosted on our platform meets HIPAA requirements. Our cloud infrastructure is designed with encryption, access control, and continuous monitoring to protect sensitive health information.

Shared Responsibility for HIPAA Compliance:
Kenko is committed to maintaining the privacy and security of protected health information (PHI) and adheres to applicable standards under the Health Insurance Portability and Accountability Act (HIPAA). Our platform is designed with robust security controls to help healthcare organisations comply with HIPAA requirements. However, ensuring full HIPAA compliance is a shared responsibility between Kenko and the healthcare organisation using our services.

Kenko’s Responsibilities:
- Implementing industry-standard encryption to protect PHI both at rest and in transit.
- Maintaining physical, administrative, and technical safeguards to ensure the confidentiality, integrity, and availability of PHI.
- Ensuring access control mechanisms are in place to restrict unauthorised access.
- Regularly monitoring and auditing our systems to identify and address security vulnerabilities.
- Providing secure mechanisms for data sharing and integration with external systems, when necessary.

Healthcare Organisation’s Responsibilities:
- Managing user accounts, roles, and permissions to control who can access PHI within the organisation.
- Ensuring that employees, contractors, and partners follow HIPAA guidelines when handling PHI using Kenko’s platform.
- Reporting any unauthorised access or suspected data breaches to Kenko immediately.
- Conducting necessary training for their staff to understand how to use the Kenko platform securely and in compliance with HIPAA.
- Ensuring that any third-party integrations with Kenko comply with HIPAA standards.

While Kenko provides the tools and infrastructure to help healthcare organisations maintain HIPAA compliance, the organisation must also implement policies, procedures, and practices to safeguard PHI within their operations. Together, we aim to create a secure environment that prioritises patient privacy and data protection.

Sharing of Personal Information:
Only authorised Kenko staff and organisations that you are engaged with will have access to your personal and healthcare information.

Your Rights and Choices:
You have the right to access, update, and delete your personal information at any time by contacting us. You may also choose to opt-out of receiving communications from us by changing your preferences in the app settings or request that your healthcare organisation deletes your account and any/all healthcare or personal data that has been obtained during your use of the app. Please note that deleting your information may result in the inability to access certain features of our platform and apps.

Children's Privacy:
Our app is intended for use by adults and is not directed at children. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete the information as soon as possible if the healthcare organisation has not prior received approval from the child’s parent or guardian.

Terms of Use Disclaimer:
Kenko can and should not be used without the oversight of your appointed clinician; please ensure you seek your doctor’s advice in addition to using this app and before making any medical decisions.

Changes to this Policy:
We may update this privacy policy from time to time to reflect changes in our practices or in applicable laws. We encourage you to review this policy periodically to stay informed of our privacy practices.

If you have any questions or concerns about our privacy policy, please contact us at support@kenkohealth.co