Privacy Policy

Effective date: 3 October 2026  ·  Last reviewed: 3 October 2026

1. Who we are

FamilyChart is a product of WheelieLabs (ABN 55 846 950 339), operated by Benjamin Horder. We provide family medication and health tracking software as a managed hosting service and as open-source self-hosted software.

This policy applies to the managed hosting service accessible at familychart.app and to this website. It does not apply to self-hosted deployments operated by third parties.

Contact: [email protected]

2. Our commitment to your privacy

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). FamilyChart processes health information, which is sensitive information under the Privacy Act and attracts additional protections.

3. What information we collect

We collect the following categories of information:

The account holder is responsible for ensuring they have the authority to enter and manage personal and health information about other household members, including other adults and children in their care. By entering information about another person, the account holder confirms they are authorised to do so on that person's behalf.

Where other household members have their own login to access a FamilyChart instance, the account holder is responsible for making those users aware of this Privacy Policy and how their information is collected, used, and stored.

FamilyChart is intended to be used by adults to manage health information for members of their household, including children. We do not knowingly collect information directly from children interacting with us as data subjects in their own right — all accounts are held by an adult, who is responsible for any data entered about dependants, including minors.

4. How and why we collect it (APP 3 & 5)

We collect personal information only when you provide it to us — there is no passive collection beyond technical logs. Health data is collected for the sole primary purpose of providing the FamilyChart service to you.

We will tell you at or before the time of collection (or as soon as practicable afterwards) why we are collecting your information, what we will do with it, and whether any third party will receive it.

5. Health information — sensitive information (APP 3.3)

Health information is sensitive information under the Privacy Act. We collect it only with your express consent and only for the primary purpose of providing the service you have requested.

We will not use or disclose your health information for any secondary purpose without your explicit consent, unless we are required or authorised to do so by law (for example, in an emergency or by a court order).

Express consent to collect health information is obtained at account creation, when the account holder agrees to this Privacy Policy and our Terms of Service as part of the signup process. Consent applies to the account holder and extends to information they subsequently enter about other household members, as described in clause 3 above.

6. Unsolicited personal information (APP 4)

If we receive personal information we did not solicit — for example, sensitive details included in a support email — we will assess within a reasonable period whether we could have lawfully collected it. If we could not, and the information is not required to be kept as part of a Commonwealth record, we will destroy or de-identify it as soon as practicable, provided it is lawful and reasonable to do so.

7. Use and disclosure (APP 6)

We use your personal information only to:

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your health data for advertising, analytics, or any purpose other than operating the service.

Google Analytics (websites only). Our public websites, familychart.app and wheelielabs.com.au, use Google Analytics, a web analytics service provided by Google, to understand how visitors use those sites. Google Analytics uses cookies and similar technologies to collect information about your visit. Google Analytics is not used within the FamilyChart application itself: no analytics or tracking tags run in the app, and none of the health, medication, or account data you enter into the app is sent to Google. You can opt out by using the Google Analytics opt-out browser add-on or by blocking cookies in your browser.

Two third parties receive your personal information in the ordinary course of business: Stripe, our payment processor, which receives your name and email address to process subscription payments; and Microsoft, whose Microsoft 365 infrastructure we use — through our own WheelieLabs tenancy, hosted in Microsoft's Australian region — to send account and service emails, such as onboarding notifications, and which receives your email address for that purpose.

8. Direct marketing (APP 7)

From time to time we may email subscribers about new features, product updates, or other promotional content. These emails always include a working unsubscribe link, and you may opt out at any time — including the account holder (admin), who is never required to receive marketing content.

This is separate from operational service communications — such as planned maintenance windows, security notices, or billing/account-critical notices — which the account holder (admin) will always receive, as these are necessary to operate the service and are not marketing.

Other household members with access to a FamilyChart instance may opt in or out of any email communications independently.

9. Cross-border disclosure (APP 8)

Stripe is headquartered in the United States. When you subscribe, your billing name and email address are transmitted to Stripe's servers in the US. We have taken reasonable steps to ensure Stripe protects your information in a manner consistent with the APPs, including reviewing their privacy policy and data processing terms.

FamilyChart's own hosting infrastructure is located in Australia (Sydney and Adelaide) — your health and account data is not stored offshore by us. Account and service emails are sent through our own Microsoft 365 tenancy, hosted in Microsoft's Australian region — so this is not an offshore transfer either. The offshore transfers are the billing information sent to Stripe, described above, and website analytics data (such as IP address and cookie identifiers) collected by Google Analytics when you visit familychart.app or wheelielabs.com.au, which Google may process on servers outside Australia. Google Analytics is not used in the app, so no health or account data is sent to Google.

10. Security (APP 11)

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. These steps include:

If we become aware of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.

11. Data retention

We retain your personal information for as long as your account is active and as reasonably necessary to provide the service. If you close your account, we will delete your personal data within 30 days of receiving a written request to do so, subject to any legal obligations requiring us to retain it for longer.

If your account becomes inactive (for example, a lapsed subscription with no account closure request), we do not indefinitely retain your data on that basis alone. We will take reasonable steps to review inactive accounts periodically and will contact the account holder before any data is deleted or de-identified as no longer needed for the purpose it was collected.

12. Your rights — access and correction (APP 12 & 13)

You have the right to:

To make an access or correction request, email us at [email protected]. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

In most cases FamilyChart is designed so you can access and correct your own data directly within the application.

13. Data quality (APP 10)

We take reasonable steps to ensure the personal information we collect, use, and disclose is accurate, up to date, complete, and relevant. Because most data in FamilyChart (medications, observations, schedules) is entered directly by you, you are able to review and correct it yourself at any time within the application — see clause 12 above.

14. Anonymity and pseudonymity (APP 2)

Where it is lawful and practicable, you may interact with us anonymously or using a pseudonym. However, to provide the managed hosting service we must be able to identify your account (your email address), so full anonymity is not possible for subscribers.

15. Government-related identifiers (APP 9)

FamilyChart does not require or request government-related identifiers (such as Medicare numbers or driver’s licence numbers) as part of the service, and we do not adopt, use, or disclose any such identifier as your own identifier with us.

16. Complaints (APP 1.4)

If you have a complaint about how we have handled your personal information, please contact us first:

Email: [email protected]
We will acknowledge your complaint within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

17. Changes to this policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 30 days before the change takes effect. The current version is always available at /privacy.html.

18. Contact us

For any privacy-related questions or requests:

Email: [email protected]