DRAFT — for legal review. NOT legal advice. ⚠️ Must be reviewed by a qualified Australian privacy lawyer before publication.
Effective date: [DATE]
Operator: Gosling International (ABN 28 219 744 700), Queensland, Australia ("we", "us", "our").
Product: Marriage Simplified — an online AI-powered relationship-coaching chat service ("the Service").
We are committed to protecting your privacy and handling your personal and health information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). Because the Service involves information about your mental and relational wellbeing, we treat your information to the highest standard required for sensitive and health information, regardless of our business size.
---
This policy explains what information we collect, why, how we use and protect it, when we share or de-identify it (including our communal-learning model), your rights, and how to contact us or complain.
We collect:
We collect this information directly from you (and, for case notes, from our human counsellor). We collect only what is reasonably necessary to provide and improve the Service.
Because chat content and case notes are sensitive information, we collect them only with your express consent, given at sign-on and able to be withdrawn (see Section 8 and the separate Consent & Disclaimer you accept before using the Service). Your consent is voluntary, specific and informed.
We use your information to:
We do not sell your information. We do not use it for third-party advertising.
We believe insights from real relationship challenges can help others. To do this safely:
We may disclose personal information to:
We do not otherwise disclose your information without your consent.
We aim to store and process your data within Australia wherever practicable. Some of our service providers (for example, cloud infrastructure and AI processing) may store or process data in, or access it from, [LIST COUNTRIES — e.g. United States / EU].
Before disclosing personal information overseas we take reasonable steps to ensure overseas recipients handle it consistently with the APPs, and we remain accountable for their handling of it. Where any provider would otherwise use your data to train their own systems, we contractually disable that. ⚠️ Operator to complete the country list and confirm Cloudflare / LLM data-residency configuration before publishing.
When you share information about your partner, children or others, you should only share what is reasonable. Those people may also have privacy rights in that information. If someone contacts us about information you have shared about them, we will handle it in accordance with the Privacy Act. ⚠️ Couples/third-party handling to be confirmed with lawyer.
We take reasonable steps to protect your information appropriate to its sensitivity, including encryption in transit and at rest, strict access controls and least-privilege access to counsellor case notes, audit logging, separation of identified data from our de-identified learning pool, and vendor security due diligence. No system is perfectly secure, but we maintain safeguards proportionate to the high sensitivity of this data.
You may request access to the personal information we hold about you and ask us to correct it. We will respond within a reasonable time and explain any refusal. Some health-information exceptions may apply (for example where access could pose a serious threat to life, health or safety); in those cases we will involve our human counsellor.
If we reasonably believe there is a serious and imminent threat to your life, health or safety or that of another person, or where we are required or authorised by law (including child-safety mandatory reporting in Queensland), we may use or disclose your information to prevent or lessen that threat or to comply with the law. See the in-product Safety & Crisis information and the Consent & Disclaimer.
We comply with the Notifiable Data Breaches scheme. If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law.
We may update this policy. Material changes will be notified in-product. The "Effective date" shows the current version.
To exercise your rights, ask a question, or make a privacy complaint, contact us at: [CONTACT EMAIL / POSTAL ADDRESS — operator to insert].
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au · 1300 363 992.
---
References: Privacy Act 1988 (Cth) and Australian Privacy Principles; OAIC Guide to Health Privacy; OAIC de-identification guidance. This draft requires legal review before use.