Last updated: 14 October 2026

DiagNav (Disorder DiagnAvIgator, at diagnav.xyz) is operated by Dr Bruce R. Long ("we", "us"). This policy explains how we collect, hold, use and disclose personal information, in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

1. Information we collect

• Account details: your name, email address and profile photo from Google when you sign in.
• Content you create: client projects, notes, clinical vignettes, tool entries, journals, research drafts and anything else you type or save in the app.
• Optional recordings and sensor data: audio or video diary entries, and heart-rate data from a paired device (such as a Polar H10), only if you choose to use those tools.
• Billing details: your subscription status and a Stripe customer reference. Card details are handled by Stripe and are never stored by us.
• Support details: what you send us in support tickets and feature requests.
• Technical data: server logs (such as IP address, browser type and error details) used to keep the service running and secure.

2. Information about your clients

Much of what clinicians enter could be health information, which the Privacy Act treats as sensitive. Please de-identify anything you enter about clients or research participants: leave out names, dates of birth, addresses, Medicare numbers and other identifying details. You are responsible for having a lawful basis, and any consent you need, before entering information about another person.

3. How we use your information

• To sign you in and manage your account and subscription.
• To store your work so you can come back to it.
• To provide AI-assisted features. The text you submit to an AI tool is sent to Google Cloud Vertex AI to generate a response. Under Google Cloud's terms, that data is not used to train Google's models.
• To answer support requests and improve the service.

We do not sell personal information, and we do not use it for advertising.

4. Who we share it with, and overseas disclosure

We use these service providers to run DiagNav:

• Google (Firebase and Google Cloud): sign-in, database, file storage, hosting and AI processing. AI requests are processed in the United States, and other data may be stored in the United States or other countries where Google operates.
• Stripe: payment processing, including in the United States.

This means your personal information is likely to be disclosed to recipients outside Australia, mainly in the United States. We otherwise disclose personal information only when you ask us to, or when the law requires it.

5. Security and retention

Data is encrypted in transit and stored with Google's security controls, and access to your workspace is limited to your account. No system is perfectly secure, so please keep your Google account protected. We keep your data while your account is active. You can ask us to delete your account and its data at any time.

6. Access, correction and deletion

You can ask to see, correct or delete the personal information we hold about you by emailing dr.bruce.long@outlook.com. We will respond within 30 days.

7. Complaints

If you have a privacy concern, email us first and we will try to resolve it within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

8. Contact

Questions about this policy: dr.bruce.long@outlook.com.