Privacy Policy — Supernova Medical App
This Privacy Policy explains how Supernova Medical Centre (“Supernova Medical”, “we”, “us”, “our”) handles information in connection with the Supernova Medical mobile application (the “App”) for iOS and Android.
We are committed to protecting your privacy and handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy covers the App only. Information you provide at the clinic, by phone, or through our website is covered by our main practice privacy policy.
1. The Short Version
- The App has no login and no user accounts. You don’t create a profile or give us your name to use it.
- The App does not collect, store, or transmit any health information, medical records, or appointment details.
- The only information the App sends to us is a push-notification token (an anonymous device identifier), so we can send you notices like clinic updates or reminders — and only if you allow notifications.
- Content you see, including services, practitioners, and opening hours, is downloaded from our website and cached on your own device so it works offline.
- Booking is handled by HealthEngine, a third party. Any details you enter to book an appointment go to HealthEngine, not through the App’s own systems.
- Some in-app buttons, such as “Contact Us”, open a page from our own website inside the App. Anything you type into one of those forms goes straight to our website, exactly as if you’d filled it in on a browser. This information is not handled through the App’s own systems and is covered by our main practice privacy policy.
2. Information the App Collects
Push Notification Token
If you allow notifications, the App obtains a push-notification token from Firebase Cloud Messaging, a Google service, and sends it to our server, together with your device platform (iOS or Android) and the App version number.
This token identifies your device installation so we can deliver notifications. It is not linked to your name, email, or any account because the App has none. If you never grant notification permission, no token is sent.
Information Stored Only on Your Device
To work offline and load quickly, the App stores a copy of clinic content, including services, practitioner profiles, opening hours, and promotions, as well as your display preferences, such as light/dark mode, and a local record of notifications you’ve received so you can review them in the App.
This information stays on your device and is not transmitted back to us, other than the App occasionally asking our server for a list of recently sent notifications so that list stays up to date.
Removing the App deletes this locally stored information.
Technical Requests
Like any app that loads content over the internet, the App makes requests to our website’s servers. Standard server logs, such as IP address and request time, may be recorded by our hosting provider as part of normal operation and security.
3. Information the App Does NOT Collect
To be clear, the App does not:
- Require an account, login, name, email address, or phone number to use it. If you choose to fill in a “Contact Us” or similar in-app form, that information goes straight to our website and is handled as described under “In-App Forms” below.
- Collect or store any health information, medical history, or appointment records.
- Track your location.
- Access your contacts, photos, camera, or microphone.
- Contain any advertising, or track you across other apps or websites for advertising or any other purpose.
- Include third-party analytics or behavioural tracking SDKs.
4. How We Use Information
We use the push-notification token solely to send notifications to your device, such as clinic announcements, health campaigns, or service updates.
We do not use it for any other purpose and do not sell it.
5. Booking Appointments — HealthEngine
When you choose to book an appointment, the App opens HealthEngine‘s booking service inside an in-app browser window.
Any information you enter there, such as your name, contact details, or appointment preferences, is collected and handled by HealthEngine under its own privacy policy, not this one.
We recommend reviewing HealthEngine’s privacy policy at:
https://healthengine.com.au/privacy
The App itself does not capture, store, or transmit the details you enter into HealthEngine.
6. In-App Forms — Contact Us
Some buttons in the App, for example a “Contact Us” tile, open a page from our own website inside the App in the same kind of in-app window used for HealthEngine.
Unlike HealthEngine, this is not a third party — it is our own website. Anything you submit is handled the same way it would be if you’d filled in that form in a regular browser, and is covered by our main practice privacy policy, not this document.
The App’s own code does not read, store, or transmit what you type into these forms. The form is a normal web page and submits directly to our website.
The only thing the App does afterwards is detect that the page reported a successful submission, so it can close the window and show you an on-screen confirmation. It does not see or keep the content of what you submitted.
7. Third-Party Services
The App relies on the following third parties:
-
Firebase Cloud Messaging (Google LLC) — delivers push notifications and processes the device push token described above. See Google’s Privacy Policy at:
- HealthEngine — provides appointment booking services as described above.
- Our website hosting provider — serves the clinic content displayed by the App.
- Apple App Store / Google Play — distribute the App and may collect their own installation and diagnostic data under their respective policies.
8. Overseas Disclosure
Push notifications are delivered through Google’s Firebase Cloud Messaging, which may process the device token on servers located outside Australia.
By enabling notifications, you consent to this handling.
We otherwise store clinic content on [hosting location — e.g. “servers located in Australia” / confirm with host].
9. Data Security
We take reasonable steps to protect information from misuse, loss, and unauthorised access.
All communication between the App and our servers uses encrypted connections (HTTPS).
Because the App holds no accounts or health data, the personal information it handles is deliberately minimal.
10. Data Retention
We retain your device push token for as long as it remains valid and your device is registered for notifications.
When you disable notifications, uninstall the App, or the token otherwise expires, it is no longer used and is removed from active use in line with our data-handling practices.
Locally cached content is retained on your device until you clear it or uninstall the App.
11. Children’s Privacy
The App is intended for general use by patients of the clinic.
It does not knowingly collect personal information from children and, having no accounts and collecting no personal profile, it is not directed at building profiles of any individual, including minors.
12. Your Choices and Rights
Notifications
You can turn push notifications on or off at any time in your device’s system settings for the App.
Turning them off stops the App from using your device token.
Cached Data
You can clear the App’s locally stored content by uninstalling the App or clearing its storage in your device settings.
Access and Correction
Because the App holds no personal profile about you, there is generally nothing to access or correct within the App itself.
For personal information the clinic holds about you as a patient, contact us using the details below. This is handled under our main practice privacy policy.
13. Changes to This Policy
We may update this policy from time to time.
The current version is always available at: https://supernovamedical.com.au/privacy-policy-supernova-medical-app/
The “Last updated” date above reflects the latest change.
14. Contact Us
If you have questions about this policy or how the App handles information, contact:
Supernova Medical Centre 14 Lavinia Drive, Tarneit, VIC 3029 Phone: 03 8866 5544 Email: info@supernovamedical.com.au
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at:
https://www.oaic.gov.au
To protect our patients’ privacy and security, Supernova Medical Centre strictly adheres to the following policy: neither our staff nor any representatives of Supernova Medical Centre will ever request patients to provide bank account details or payment card information through online links or unsolicited phone calls. We strongly advise all patients to exercise caution and follow these guidelines:
1. Do not share any sensitive financial information, such as bank account details or payment card information, through online links or unsolicited phone calls.
2. If you receive any such requests, immediately verify their authenticity by contacting our clinic directly.
3. To verify the legitimacy of any request, please call our clinic using the official phone number provided on our website or visit the reception staff in person.
Your privacy and security are of utmost importance to us, and we appreciate your cooperation in maintaining a safe environment for everyone at Supernova Medical Centre.
Note: Always ensure that you communicate and verify sensitive information through secure channels, such as official clinic phone numbers or in-person interactions.
