Privacy policy

Who we are

AestheticX is practice software for Australian aesthetic medicine. This policy covers three things separately: this marketing website, the interactive demo hosted on it, and the AestheticX app that practices use with real patients. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This website

Browsing this site requires no account and collects no personal information from you directly. We use Vercel Web Analytics to understand aggregate page traffic; it does not use cookies and does not identify individual visitors. The site is hosted by Vercel, whose infrastructure logs standard request metadata (such as IP address and user agent) to serve and secure the site.

The interactive demo

The demo behind the “Log in” link uses fictional sample data only — the same seeded records the app ships with for evaluation. Demo activity runs in your browser’s memory and is discarded when you reload or leave the page. Nothing you type into the demo is stored by us. Please do not enter real patient information into the demo.

The AestheticX app

Practices use AestheticX to hold patient records, clinical notes, photographs, signed consent forms, appointments, and treatment authorisations. This is health information — sensitive information under the Privacy Act — and the practice that treats the patient remains the custodian of those records. AestheticXprocesses it on the practice’s behalf to provide the service.

• Signing in on this site with a practice account connects to the same production service as the iOS app, under the practice’s agreement with us — the demo pages above never do.
• Data is stored with Google Firebase (Cloud Firestore, Cloud Storage, and Firebase Authentication), encrypted in transit and at rest, with role-based access controls so records are visible only to the treating practice’s authorised users.
• Emails the practice asks us to send (such as aftercare instructions or consent-form links) are delivered to the address the practice supplies.
• Optional integrations a clinician links themselves (such as Google Calendar sync) exchange only the data needed for that feature — busy times and confirmed-appointment details — and can be unlinked at any time.
• Video consults — whether started from the iOS app or a signed-in browser — are carried over LiveKit; calls are transported for the session and are not recorded by AestheticX.

Access, correction, and deletion

Requests about patient records should be made to the treating practice, which controls them; we support practices in meeting their access, correction, and deletion obligations. For anything about this website or your dealings with us directly, contact us at the address below.

Contact

Questions or complaints about privacy: info@aestheticxgroup.com. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au).