Privacy Policy
Who we are
ForLife™ Health ID is provided by ForLife Global (ABN 36 708 953 059), an Australian business (“ForLife”, “we”). ForLife acts only on your instructions. We are not a healthcare provider, medical facility, insurer or medical device. We do not create or edit medical records. ForLife uses defined rules to derive a screening status from laboratory results. It does not diagnose. We do not provide treatment recommendations or medical advice. ForLife has applied under section 6EA of the Privacy Act 1988 (Cth) to be treated as an organisation bound by the Act (OAIC webform WEB-GEN-26-06345; OAIC reference EN26/10853), and handles personal information in line with the Australian Privacy Principles. Privacy contact: privacy@forlifeglobal.health.
What we collect
- Account: email address, password (stored only as a salted hash), name, date of birth, and phone number if you add one.
- Identity verification: the name and date of birth you enter, and a reference from our identity-verification provider. We do not retain images of identity documents.
- Health information: laboratory results you direct a laboratory or health network to send to ForLife, currently sexual-health screening results. ForLife checks each laboratory report and does not keep a copy of it: it keeps only the result lines needed for your screening status, their source and the Health ID card created from them, plus any medication, allergy or emergency details you add.
- Permissions and sharing: which sources you connected, which cards or status proofs you shared, with whom (for partner apps), for how long, and when you revoked them.
- Activity log: sign-in events and each access to your data, kept in a tamper-evident log.
What we do not collect: location, contacts, photos, browsing history, advertising or device identifiers, or HealthKit and device-sensor data. The app contains no advertising code. Error reporting (Sentry) and usage analytics (PostHog) are switched off in ForLife’s Australian service. In the pre-release test service, which holds synthetic data only, they may be switched on: error reports have names, email addresses and health information removed, and usage events contain no health information, names or contact details. Face ID and fingerprint checks happen on your device. ForLife receives only a confirmation and never receives biometric data.
How we use it
To sign you in, confirm results belong to you, display your Health ID cards, answer a screening question you approve for a person or partner app you choose, and keep your activity log. We do not sell personal data, use it for advertising or profiling, or use it to train AI models.
Who sees it
- People you choose. A link, QR code, phone tap, AirDrop or Quick Share shows only the screening status or card you selected, until the expiry you set or until you revoke it. A proof carries no results, dates or laboratory details, and no name unless you choose to show your first name on it.
- Partner apps you approve. Nothing is released to a partner until you approve it in ForLife. The partner receives a signed screening status and an identifier that cannot be linked across partners, never your results, identity or email. You can revoke access at any time and the partner is notified.
- Sources you connect. To retrieve your results, we send the laboratory or network the details needed to match your record.
- Service providers. Hosting and identity-verification providers, under contract, only to operate ForLife.
- Where the law requires. Only when a law or binding order compels us. We will notify you unless we are legally prevented from doing so.
Not for insurance or employment. ForLife proofs may not be used to make decisions about insurance cover or employment.
Sensitive information: HIV and STI results are sensitive health information under the Privacy Act 1988 (Cth). Anyone receiving a card containing such information is shown a notice that it may not be disclosed further.
Security
Data is encrypted in transit and at rest. Health information will be stored in Australia (see “Where data is processed”). Cards and proofs are digitally signed so recipients can confirm they are genuine and unaltered. Access is recorded in a tamper-evident log. Sensitive actions require your device biometric or passcode.
Keeping and deleting your data
Result lines are kept for 30 days, then deleted, or refreshed while your authorisation is still active. Your account, cards and settings are kept while your account is open. You can delete your account at any time in the app or at app.forlifeglobal.health/delete-account. Deletion immediately erases your account, cards, share links, partner grants, permissions and results, and revokes every outstanding proof. A minimal security record (timestamps, event types and, for each share, the screening status shown, but no name and never individual test results) is kept for six years, then erased. Results from a source you disconnect are erased in line with that source’s requirements. In ForLife’s Australian service, backup copies expire within 35 days.
My Health Record
ForLife’s My Health Record connection is not yet available: it is going through the Australian Digital Health Agency’s registration and testing process. When it is available:
- What we access. With your authorisation through myGov, ForLife reads only pathology reports from your own record. It is read-only: ForLife cannot change your record.
- What we keep. ForLife checks each report and does not keep it. It keeps only the document reference, a fingerprint (hash) of the report and the result lines needed for your screening status. These are encrypted and deleted 30 days after retrieval (or refreshed while your authorisation is active), or straight away when you withdraw.
- Where. Stored and processed only in Australia (AWS Sydney). No My Health Record information leaves Australia. Third-party error reporting (Sentry) and analytics (PostHog) are switched off in the Australian service.
- Your control. Withdrawing in the app revokes the connection, deletes the retrieved information and stops any live shares. Backup copies expire within 35 days. The audit trail (a record of access and sharing events, including the screening status shown, but never individual test results) is kept for six years.
- Not for insurance or employment. By law, My Health Record information can’t be used for insurance or employment, and ForLife never gives insurers, employers or underwriters a status based on it.
Your rights
You can view, export and delete your data in the app at any time, and revoke any permission, share or partner grant instantly. You also have rights to access and correct your personal information under the Australian Privacy Principles (Privacy Act 1988 (Cth)). Contact privacy@forlifeglobal.health; we respond within 30 days. Corrections to a medical result must be requested from the provider that issued it.
Complaints
Contact privacy@forlifeglobal.health first. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
Where data is processed
ForLife Global is an Australian business. ForLife is in pre-release testing. The current test service holds synthetic (made-up) data only and runs on servers in the United States; usage analytics, when switched on there, are processed by PostHog in the European Union. My Health Record testing, and all real health information including from My Health Record, will be stored and processed only in Australia (AWS Sydney, ap-southeast-2).
Adults only
ForLife is for adults aged 18 or over. We do not knowingly create accounts for minors and delete any we identify.
Changes
Updates will be posted here and notified in the app before material changes take effect. See also our Terms of Service.