For Clinics & Health Care Teams

Data handling, privacy & security overview for practice managers

Renal Care at a glance

Renal Care is a patient-facing health tracking app for people living with kidney disease — supporting peritoneal dialysis, haemodialysis, transplant recipients, and CKD patients. Patients log their own vitals, medications, blood results, and symptoms; they can optionally link a clinician so that clinician can view their shared data.

Patient-owned data — each user controls their own records

Clinician access is patient-initiated via secure linking

Per-user data isolation enforced at the database level

Full data export and account deletion on demand

Questions practice managers ask us

1. Where is the data stored?

All patient data is stored on secure cloud infrastructure provided by our platform partner, Base44, which holds SOC 2 Type II and ISO 27001 certifications (independently audited). Data is encrypted both at rest and in transit, and access is controlled via role-based permissions.

Files exported by patients (such as health reports) are stored in private cloud storage and only accessible via time-limited, signed links that expire within 15 minutes. No patient data is stored on local devices or unsecured servers.

Transparency note: Data is not end-to-end encrypted — Base44 platform administrators may access data if required for support or maintenance, under their own access controls. No third party outside the platform can read patient data.

2. Who can see a patient's data?

Access is governed by role-based permissions enforced at the database level:

The patient — full access to their own records at all times.
A linked clinician — read-only access, but only to patients who have explicitly initiated a link with that clinician. Clinicians cannot browse unlinked patients.
App administrators — limited platform-level access for support and maintenance; no access to clinical content beyond what is necessary.

There is no "global read" — data isolation is enforced per user via Row-Level Security rules on every data entity.

3. How is the data secured?

Row-Level Security (RLS) isolates each patient's records from every other patient.
Authentication is handled via secure token-based sessions; passwords are never stored.
Clinician accounts are role-separated (clinician vs. admin) with distinct permission sets.
Exported reports use private storage with expiring signed URLs — no public links.
Account deletion permanently removes a patient's data across all entities.

4. How do patients leave / take their data?

Patients can export all of their health data (dialysis sessions, blood results, medications, notes, and more) as downloadable files at any time, delivered securely via email. They can also permanently delete their account and all associated data through the in-app account management screen. Deletion is irreversible and removes records across every data entity.

5. What is your incident response process?

In the event of a suspected data breach or security incident, we commit to: investigating promptly, notifying affected patients and any linked clinics as soon as practicable, and reporting to the Office of the Australian Information Commissioner (OAIC) where required under the Notifiable Data Breaches scheme. Clinics with linked patients would be informed directly.

Alignment with the Australian Privacy Principles

Renal Care's data handling is designed to align with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). The table below maps our practices to the relevant principles.

APP	Principle	How we align
APP 1	Open & transparent management	Public Privacy Policy + this clinician overview
APP 6	Use & disclosure	Data used only for the patient's own tracking; no third-party sharing without consent
APP 11	Security of information	RLS isolation, encrypted storage, role-based access, expiring links
APP 12	Access to information	Patients can view and export all their data at any time
APP 13	Correction & deletion	In-app editing + permanent account & data deletion

Note: This alignment summary describes our design approach. It is not a formal compliance certification or legal advice. We recommend clinics conduct their own review.

The clinician portal

Renal Care includes a built-in clinician view that lets a linked clinician see a patient's shared health trends — dialysis metrics, blood results, medications, symptoms, and appointments — in a read-only dashboard. Patients initiate the link; clinicians cannot access anyone who hasn't linked to them.

This makes Renal Care suitable as a lightweight remote monitoring complement to existing clinical workflows, without replacing your primary health record system.

What Renal Care is — and isn't

What it is

A patient self-monitoring tool
A optional clinician viewing portal
A medication & appointment reminder system
A data export & reporting companion

What it isn't

A primary clinical record system
A diagnostic or treatment-decision tool
A replacement for clinical judgement
A regulated medical device

Want to trial Renal Care with your patients?

We're happy to walk your team through the data model, arrange a small pilot, and address any specific compliance questions your practice manager has.

View full patient Privacy Policy