Privacy policy

1. Who we are

Understanding Cancer is operated by Matcha Tea Properties Pty Ltd, an Australian company. It is responsible for your personal data (the data controller).

WITH&MAH Limited, a Hong Kong company (company number 81348695), will take over as operator. We will tell you before responsibility for your data moves, and how to use your rights after that.

Contact for privacy questions: support@understandingcancer.online.

2. What we collect

From the forms on this website (waitlist, demo and webinar interest):

• Your name.
• Your e-mail address.
• Your country.
• Your confirmation that you are 18 or over.
• Which option you chose (waitlist, demo or webinar).
• The time you sent the form, and the country your connection comes from (as reported by Cloudflare).

When a practitioner pays (through Stripe):

• Name, e-mail, medical registration number, and medical council and country.
• The registration certificate you upload, and our verification result. Only the staff who check registrations can see them.
• Payment status. Stripe handles card details. We never see or store card numbers.

When a practitioner uses the app:

• Account details and sign-in events.
• The questions asked, the answers given, and any ratings or reports.
• The de-identified case details entered for a patient review, and any reports uploaded.
• Technical logs.

We do not ask for patient-identifiable information. Practitioners must not enter it.

3. How we use it

To answer waitlist, demo and webinar requests, and to tell you when the patient service opens.

To run the service and answer questions.

To verify practitioner registration before dose detail unlocks.

To check the quality and safety of answers, including reports reviewed by our clinical team.

To enforce fair use and keep the service secure.

To meet our legal obligations.

We do not sell personal data. We do not use it for third-party advertising.

We use form details only to reply to your request and to tell you when the patient service opens. We do not use them for any other business or brand. You can ask us to stop at any time.

4. How answers are generated

A practitioner's question, together with relevant excerpts from our knowledge base, is processed by our AI provider to write the answer.

Answers are generated with Anthropic's Claude models, accessed through Anthropic's commercial API.

The data sent for an answer includes the question, any case details or report text the practitioner provides, and the knowledge-base excerpts used.

Under Anthropic's commercial terms, this data is not used to train its models by default. Anthropic keeps it for a limited period under those terms, for example for safety and misuse checks.

5. Who processes data for us

• Cloudflare: hosts and protects this website, and sends form entries by e-mail to our support inbox. The form handler does not save entries to a website database.
• Google (Gmail): hosts our support inbox, where form entries and e-mails to support are kept.
• Stripe: processes payments.
• Our hosting provider: runs the Understanding Cancer app and its database.
• Anthropic: generates AI answers.

Our clinical and administrative team can review questions, answers and reports for quality and safety.

6. Where data is held

The app's servers are currently in Australia. We plan to move them to Singapore.

Some providers process data in other countries. For example, AI processing (Anthropic), payment processing (Stripe) and our support inbox (Google) can be in the United States.

Further wording for this section is being finalised.

7. How long we keep it

Waitlist and interest details, kept in our support inbox: until the patient service opens and you have been told, or until you ask us to delete them.

Account and audit records: while the account is open, and for a period after it closes, for medico-legal and quality reasons. The exact period is being finalised.

8. Security

• Patient and clinical text is stored encrypted on our servers.
• The knowledge base is stored encrypted.
• Data is encrypted in transit.
• Each person has their own login, with role-based access.
• Activity is logged.

9. Your rights

You can ask to see the personal data we hold about you.

You can ask us to correct it.

You can ask us to delete it. We assess each request. Where the law requires us to keep a record, we keep only what is needed, for as long as it is needed, explain why, and delete the rest.

Depending on the law that applies to you, you can also ask us to restrict or stop using your data, ask for a copy in a portable form, and withdraw consent where we rely on it.

You can leave the waitlist at any time.

To make a request, e-mail support@understandingcancer.online.

We reply within the time the applicable law requires.

If you are not happy with our reply, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or to the data protection authority where you live.

10. Data breaches

We assess and record any personal data breach. We tell the relevant regulators and the people affected when the law requires it, within the time the law sets.

11. Children

You must be 18 or over to hold an account or use our forms. Understanding Cancer covers patients aged 18 and over only.

Do not send us a child's information. If we learn that it has been sent, we delete it or restrict it as the law requires.

12. Cookies

This website does not use advertising or analytics cookies.

Your browser may remember your light or dark theme choice. This stays on your device.

The website loads its fonts from Google Fonts, so Google receives your IP address when the page loads.

Cloudflare, which hosts the website, may set cookies needed for security. Our staff may use an access cookie.

The app and Stripe checkout have their own sign-in and payment cookies.

13. Changes to this policy

We will post changes here, and give 30 days' notice in the app for important changes.

14. Contact

support@understandingcancer.online