Privacy policy

Last updated: 3 November 2026 Version: 1.0

Summary of key points

This summary gives you the highlights. We recommend reading the whole policy, since this summary doesn’t capture every detail.

  • What we are: symetric is a personal symptom and mood tracking app for adults in Australia. We treat what you enter as health information, the most protected category under Australian privacy law. Read more
  • Your consent: We ask for it in separate steps, not one blanket tick box, and you can withdraw it at any time by deleting your account or adjusting Settings. Read more
  • What we collect: Your account details, the health data you choose to enter, and the patterns we generate from it. Read more
  • What we don’t collect: No location, camera, photos, microphone or contacts. No connection to Apple Health, Google Fit or wearables. Your health information is never sent to an AI or LLM service, never sold, and never used for advertising. Read more
  • How it’s analysed: Pattern detection runs on your device, your scores aren’t sent anywhere to be analysed. Read more
  • Who sees it: Only the service providers that run the app (database, push notifications, email, usage analytics), never sold or shared for marketing. Usage analytics never include your health information, and you can turn them off in Settings. Read more
  • Where it’s stored: Your health information is stored in Australia. Read more
  • Your control: You can view, edit, export or delete your data at any time from within the app. Read more
  • Not medical advice: symetric doesn’t diagnose, treat, or replace a healthcare professional. Read more

1. About us and this policy

In short: symetric is an Australian symptom-tracking app, and because you're entering health information, we hold it to the highest standard of protection Australian privacy law has.

symetric is operated by SCK Digital, ABN 79 120 082 906 (“we”, “us”, “our”). This policy explains how we handle personal information, including health information, when you use the symetric mobile app.

symetric is a personal symptom and mood tracking app. It helps you record how you’re feeling over time, identifies patterns in your own data, and helps you prepare for appointments with your doctor.

We treat the information you enter into symetric as health information under the Privacy Act 1988 (Cth), which is a type of sensitive information and attracts the highest level of protection under the Australian Privacy Principles. As we operate from Victoria, the Health Records Act 2001 (Vic) and its Health Privacy Principles also apply to how we handle your health information. We handle it accordingly.

symetric is currently available to users in Australia only.

In short: We ask for your consent in separate, specific steps when you first use the app, not as one blanket tick box, and you can take it back any time by deleting your account or turning off body or cycle tracking in Settings.

Because the information you enter is health information, we need your consent to collect it, and we ask for it in separate, specific steps rather than one blanket agreement.

After you verify your email, before any health information is collected, we confirm you’re 18 or over, then ask you to consent to mind-domain tracking (the areas like mood and anxiety you choose to track). Body tracking and cycle tracking are optional and asked about separately again, each with its own consent, so you’re only ever asked to consent to what you’ve actually said you want to use.

You can withdraw consent at any time by deleting your account (see section 10), which withdraws all of it. You can also turn body tracking or cycle tracking off individually at any time in Settings, without deleting your account or affecting your mind-tracking consent.

You do not have to use symetric, and you do not have to enter any particular piece of information beyond what’s needed for the consents above. Every field is optional except your email address and your date of birth.

3. What we collect

In short: Your account details, the health data you choose to enter, and the patterns we generate from it, and a specific list of things we deliberately don't touch.

Account information

  • Email address (symetric doesn’t use passwords, we email you a one-time link to sign in instead)
  • Your date of birth, to confirm you’re 18 or over
  • Your timezone
  • Your notification preferences, including any do-not-disturb hours you set
  • A record of the consents you give, including when you gave them, and the IP address and device or browser type (user agent) they were sent from, so we can show consent was given

Health information you enter

  • Daily scores across the mind areas you choose, from: mood, energy, anxiety, concentration, irritability, social depletion, sensory overwhelm, and motivation
  • Baseline values for each area, which start at a neutral placeholder and are then calculated from your own check-ins
  • Check-in notes: any free-text note you add to a check-in
  • Check-in details: when you completed each check-in, whether you logged it in one tap as “nothing unusual”, whether you used the late-completion window, and whether you later edited an entry (the number of edits and when the latest one was made)
  • Sleep: a daily sleep rating and, if you choose to add it, hours slept
  • Body tracking, only if you turn it on: scores for the physical symptoms you choose (such as fatigue, pain, joint instability, dizziness, breathing, gut symptoms and brain fog), optional morning scores, where on your body pain or instability occurred, words you choose to describe pain or breathlessness, events you log (such as a joint going out, nearly fainting or palpitations), and any notes you add
  • Cycle tracking, only if you turn it on: the dates you log as Day 1 of your period
  • Preferences that shape how the app looks and behaves, such as comfort mode, your accent colour and whether app lock is on. If you set an app-lock PIN, we store a salted hash of it, never the PIN itself
  • Treatment and life context: medication events you record (starting, stopping, increasing or decreasing a medication), therapy sessions, and significant life events. Each one has a short free-text label you write yourself, so if you type a medication name into it, that name is stored with the entry
  • Appointment information: appointment dates, the questions you prepare, which patterns you mark for discussion, and any notes you record after the appointment

Information we generate about you

symetric analyses your entries to produce new information about you, including detected patterns, correlations between different areas, changes in your personal baseline, cluster classifications, and confidence ratings for each pattern.

This generated information is also health information about you, and we protect it the same way.

Technical information

  • Device push notification tokens issued through Expo, Apple or Google, and whether the device is iOS or Android, so we can send you check-in reminders
  • IP address, recorded with your consents (see above) and in our service providers’ standard server logs
  • Usage analytics, unless you turn them off: which screens you open and which features you use, with counts and timings, plus your device type, operating system, app version, language and time zone. These never include your health information. Read more
  • Information stored locally on your device, including cached data and scheduling information

What we do not collect

We want to be specific about this, because it matters for an app like ours. symetric does not:

  • Access your location
  • Access your camera, photos, microphone or contacts
  • Connect to Apple Health, Google Fit, or any wearable device
  • Send your health information to any artificial intelligence or large language model service
  • Sell your information, or use it for advertising or marketing by any third party
  • Use your health information for any purpose other than providing the app to you

4. How we collect it

In short: Almost everything comes from what you type into the app yourself.

Almost everything we hold about you, you typed into the app yourself.

We collect technical information automatically when you use the app. We collect push notification tokens from Apple or Google when you enable notifications. We do not collect information about you from any other source.

We also show you short notices at the point of collection, when you sign up and when you enable notifications, so you know what is being collected and why at that moment.

5. Why we collect it

In short: To run the app, find patterns in your data, remind you to check in, and generate your reports, never for marketing, advertising or research.

We use your information to:

  • Provide the app and store your entries
  • Calculate your personal baseline and detect patterns in your data
  • Send you check-in reminders, if you’ve enabled them
  • Generate the appointment questions and PDF reports you request
  • Keep your account secure and investigate technical problems
  • Understand how the app is used in aggregate, so we can improve it
  • Meet our legal obligations

We do not use your health information for marketing, advertising, profiling for commercial purposes, or research, and we do not sell it.

6. Who we share it with, and where it goes

In short: Only the service providers that run the app, never sold, never shared for marketing. Your health information is stored in Australia.

We do not sell or rent your information. We share it only with the service providers we need to run the app.

Provider What they handle Where
Supabase Database and account authentication, this is where your health information is stored Sydney, Australia (ap-southeast-2)
Expo (650 Industries) Push notification relay, device tokens and the reminder text only, no health information United States
Apple / Google Push notification delivery, device tokens only, no health information United States
PostHog Usage analytics: which screens and features are used, linked to your account ID, never your health information. Off if you turn it off in Settings European Union
Resend Account emails, including the one-time link you use to sign in, your email address only, no health information United States

Your health information is stored in Australia. Supabase is a company based overseas, and its personnel may access our systems from outside Australia for support and maintenance purposes.

Where we disclose information overseas, we take reasonable steps to ensure recipients handle it consistently with the Australian Privacy Principles, including through written data processing agreements.

We may also disclose your information where required by law, or where necessary to prevent a serious threat to life, health or safety.

7. How your information is analysed

In short: Pattern detection happens on your device. Your scores aren't sent anywhere to be analysed by us or anyone else.

All pattern detection in symetric runs on your device. Your scores are not sent to a server to be analysed, and no third party performs analysis on your data.

Your entries are, however, stored in our database so they are available across sessions and so you don’t lose them if you change devices. We want to be clear about the distinction: the analysis is local, the storage is not.

8. Our access to your information

In short: Named staff can see your entries only for support, technical or security reasons, and every access is logged.

Authorised personnel can access the information you enter into symetric, including your scores and entries.

We access identifiable information only where necessary, to respond to a support request you’ve made, to investigate a technical fault, or to protect the security of the service. Access is limited to named individuals, and access to production data is logged.

We think you should know this rather than assume otherwise.

9. Security

In short: Encryption, per-account database isolation, restricted access, and logging.

We protect your information using:

  • Encryption in transit and at rest
  • Row-level security in our database, so your records are only accessible to your account
  • Access controls limiting which personnel can reach production data
  • Logging of administrative access

No system is completely secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

10. Deleting your account and your data

In short: Delete your account in-app at any time, everything is permanently removed, aside from encrypted backups that expire on a set schedule.

You can delete your account and all associated data at any time from within the app, under Settings → Delete all data and account. You can also request deletion at privacy@symetric.app.

When you delete your account:

  • Your account and sign-in, including your email address, are permanently deleted
  • Everything you’ve recorded is permanently deleted from our database: mind and body check-ins, sleep, cycle dates, patterns, markers, notes and appointment records
  • Your push notification registration is removed
  • Data cached on your device is removed when you uninstall the app

Deleted data may persist in encrypted daily backups for up to 7 days before those backups expire, after which it is unrecoverable.

We retain data only while your account is active, unless we are required to keep it longer by law.

11. Accessing and correcting your information

In short: View and edit your entries any time in the app, or request a full copy from us free of charge.

You can view and edit your entries directly in the app at any time. Where you edit an entry, we keep a count of how many times it has been edited and when it was last edited, but not the previous value.

You can export everything you’ve recorded at any time, under Settings → Export my data, as a single JSON file or as a set of CSV files.

You can request a copy of the personal information we hold about you by contacting us at privacy@symetric.app. We’ll respond within 30 days. There’s no charge.

If information we hold is inaccurate, out of date or incomplete, tell us and we’ll correct it.

12. Reports you generate

In short: Your PDF appointment report is generated on your device, once you share it yourself, it's outside our control.

symetric can generate a PDF summary for your doctor’s appointment. This report contains your health information.

The report is generated on your device only. Once you share it, by printing it, emailing it, or handing it to a clinician, it is outside our systems and we can’t control what happens to it. Please share it only with people you intend to.

13. Notifications

In short: Reminders never contain your health information, and you can turn them off at any time.

If you enable notifications, we send check-in reminders through Expo’s push service, which passes them to Apple and Google to deliver. These reminders say only that a check-in is ready, and do not contain your health information.

You can turn notifications off at any time in the app, or in your device settings.

14. Analytics

In short: The app counts how it's used, never what you log. You can turn this off in Settings.

The app sends usage analytics to PostHog, so we can see which features people use and where they get stuck. That means events such as “a check-in was completed” or “a report was generated”, which screen was opened, counts and timings (for example how many areas a check-in covered, or how many days a report spans), and your device type, operating system, app version, language and time zone. Events are linked to your account ID, not your name or email, and we’ve switched off PostHog’s lookup of your location from your IP address.

Usage analytics never include your health information: no scores, entries, notes, symptoms, body events, medications, cycle information, or the patterns the app finds. Session recording is switched off, so what’s on your screen is never captured.

You can turn usage analytics off at any time in Settings → Your data → Share usage analytics. Nothing more is sent from that device once it’s off. The website demo never sends analytics.

We do not use advertising trackers and we do not participate in cross-app tracking.

15. Children

In short: symetric is for adults 18 and over only.

symetric is for adults only. You must be at least 18 to create an account. We ask for your date of birth at signup and do not knowingly collect information from anyone under 18.

If you believe someone under 18 has created an account, contact us at privacy@symetric.app and we will delete it.

16. symetric is not a medical device

In short: symetric tracks what you enter and surfaces patterns, it doesn't diagnose, advise or treat.

symetric records what you enter and identifies patterns in your own data. It does not diagnose any condition, provide medical advice, or recommend treatment. It is not a substitute for care from a qualified health professional.

If you are in crisis, contact your doctor, or call Lifeline on 13 11 14 or emergency services on 000.

17. Changes to this policy

In short: We'll tell you in the app before any material change takes effect, and ask for your consent again where required.

We may update this policy. If we make a change that materially affects how we handle your health information, we’ll notify you in the app before it takes effect, and where required we’ll ask for your consent again.

The current version is always available in the app and at symetric.app/privacy.

18. Contact and complaints

In short: Contact us first, if you're not satisfied, you can escalate to the OAIC or Victoria's Health Complaints Commissioner.

For any privacy question or request:

SCK Digital Email: privacy@symetric.app

If you’d like to make a complaint about how we’ve handled your information, contact us first and we’ll respond within 30 days. If you’re not satisfied with our response, you can complain to:

Office of the Australian Information Commissioner oaic.gov.au · 1300 363 992

You can also complain to the Victorian regulator about our handling of your health information:

Health Complaints Commissioner (Victoria) hcc.vic.gov.au · 1300 582 113