01
Who we are
OneSelf Health Pty Ltd (ACN [to be confirmed]) operates the OneSelf platform — a personal health understanding service that integrates biomarker data, wearable signals, and practitioner guidance to give members a deeper understanding of their own biology.
This Privacy Notice explains how we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It applies to all OneSelf products and services.
Our position
Your health data is yours. We do not sell it, broker it, or use it to serve advertising. We use it only to provide and improve the OneSelf service.
02
What information we collect
Account information
When you create a OneSelf account we collect your name, email address, date of birth, and billing information. We use Stripe to process payments — we do not store card numbers.
Profile and usage information
- Information you provide about your health goals, symptoms, and lifestyle
- Questions you ask OneSelf and how you interact with recommendations
- Session attendance and engagement with OneSelf Live events
- Device type, browser, IP address, and usage patterns
Wearable and device data
Where you connect a compatible wearable (Apple Health, Garmin, Oura, WHOOP, or similar), we receive the data categories you explicitly authorise — typically sleep, heart rate, activity, and recovery metrics.
03
Health data — special considerations
Sensitive information
Under the Privacy Act 1988, health information is classified as sensitive information and receives a higher standard of protection. We will never collect health information without your explicit consent.
Health information we may hold includes biomarker results from laboratory testing, DNA and microbiome analysis results, symptoms and health concerns you share with us, wearable-derived physiological signals, and practitioner notes where applicable.
You may withdraw consent for us to hold health information at any time by contacting us. Withdrawal will require us to close your account, as health data is integral to the service.
04
How we use your information
We use your information to provide and operate the OneSelf platform, generate personalised health insights and recommendations, connect you with appropriate practitioners, process billing and membership administration, and improve our algorithms and service quality.
We may use de-identified and aggregated data for research purposes. See our Research Consent policy for full details.
We do not use your data to
- Serve targeted advertising
- Sell or broker data to third parties
- Make automated decisions with legal or significant personal effects without human review
- Build profiles for purposes unrelated to your health understanding
05
Who we share your information with
We share your information only where necessary to provide the service or where required by law.
Service providers
We engage trusted third parties to provide cloud infrastructure, payment processing, laboratory services, and communications. All processors are bound by data processing agreements and may not use your data for their own purposes.
Practitioners
Where your membership tier includes practitioner access, we share relevant health information with your assigned practitioner. You control which information is visible to practitioners from your account settings.
Legal obligations
We may disclose information where required by law, court order, or to protect the safety of a member or third party.
06
How long we keep your information
We retain your personal information for as long as your account is active and for a minimum of seven years thereafter, in accordance with Australian tax and records obligations.
Health information may be retained for longer periods where required by state or territory health records legislation. Upon deletion of your account, we will de-identify or destroy your health information within 90 days, subject to any legal hold obligations.
07
Your rights
Under the Australian Privacy Principles you have the right to access the personal information we hold about you, request correction of inaccurate information, make a complaint about how we have handled your information, and request deletion of your information subject to our legal retention obligations.
To exercise any of these rights, contact privacy@oneself.com. We will respond within 30 days.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
08
Cross-border transfers
OneSelf operates primarily in Australia. Some service providers may process data in other countries, including the United States and the European Union. Where this occurs, we ensure appropriate safeguards are in place consistent with APP 8 requirements.
09
Security
We use industry-standard security controls including encryption at rest and in transit, access controls, regular security assessments, and staff training. No system is completely secure — if you believe your account has been compromised, contact security@oneself.com immediately.
10
Children
The OneSelf platform is not directed at persons under 18. We do not knowingly collect information from children. Family plan members under 18 are managed through a parent or guardian account and their data is subject to additional safeguards.
11
Changes to this notice
We will notify members of material changes to this Privacy Notice by email at least 30 days before they take effect. Continued use of the platform after that date constitutes acceptance of the updated notice.
12
Contact us
For privacy-related queries, contact our Privacy Officer:
OneSelf Health Pty Ltd
privacy@oneself.com
Melbourne, Victoria, Australia