Kenko is a product owned and operated by Hitori Pty Ltd (ACN 155 463 675 / ABN 36 155 463 675). We understand that privacy is important and take the responsibility of protecting personal information seriously.
Information we collect and use
We collect personal information such as name, address, email address, phone number, and medical information. This information is used to provide our services, allow healthcare organisations and Kenko to communicate with you about your health, and improve our platform.
We will never sell personal or healthcare information. Only authorised Kenko staff and organisations you are engaged with will have access to it.
How information is protected
We use industry-standard security measures to protect personal information from unauthorised access, disclosure, or misuse. Data transmitted to and from our applications is encrypted and stored using secure AWS services designed to support HIPAA requirements and applicable Australian privacy obligations.
Australian Privacy Principles
As an Australian company, Hitori Pty Ltd handles personal information collected through Kenko with regard to the Privacy Act 1988 and the 13 Australian Privacy Principles (APPs). Health information is sensitive information under Australian privacy law and is afforded stronger privacy protection.
Our privacy practices address open and transparent management of personal information; appropriate collection, use, and disclosure; data quality and security; cross-border disclosure; and individuals’ rights to request access to or correction of their personal information.
HIPAA-aligned safeguards
Kenko also prioritises the security and privacy of health information through technical safeguards and processes aligned with the Health Insurance Portability and Accountability Act (HIPAA).
Kenko has signed a Business Associate Agreement with Amazon Web Services. Our cloud infrastructure uses encryption, access controls, and monitoring to protect sensitive health information.
- Encryption protects PHI at rest and in transit.
- Physical, administrative, and technical safeguards support confidentiality, integrity, and availability.
- Access controls restrict unauthorised access.
- Systems are monitored and reviewed for security vulnerabilities.
- Data sharing and external integrations use secure mechanisms.
Healthcare organisation responsibilities
Healthcare organisations using Kenko are responsible for managing user accounts, roles, and permissions; ensuring staff and partners follow applicable guidelines; reporting suspected unauthorised access; delivering appropriate staff training; and ensuring third-party integrations meet their compliance requirements.
Kenko provides tools and infrastructure that can support compliance, while each organisation must also maintain suitable policies, procedures, and practices for safeguarding PHI.
Your rights and choices
Consistent with the APPs, you may request access to or correction of personal information by contacting us. You may also request deletion where applicable, opt out of communications through application preferences, or ask your healthcare organisation to remove your account and associated health data, subject to legal and clinical record-retention requirements.
Overseas disclosure and data location
Where personal information may be stored in or disclosed to recipients outside Australia, Kenko and the commissioning healthcare organisation consider applicable requirements, including APP 8. Hosting region and data-residency arrangements are agreed as part of each deployment.
Children’s privacy
Our application is intended for adults and is not directed at children under 13. If we become aware that personal information has been collected from a child under 13, we will take steps to remove it as soon as possible.
Clinical oversight
Kenko should not be used without oversight from an appointed clinician. Always seek your doctor’s advice before making medical decisions.
Policy updates
We may update this privacy policy to reflect changes in our practices or applicable laws. We encourage users to review it periodically.
Questions and privacy complaints
Questions, access or correction requests, and privacy complaints can be sent to hello@kenkohealth.co. We will review and respond to privacy complaints in accordance with our obligations. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.