BabyPortal data sharing policy

Effective: 11 June 2026 (version 2026-06-11). Last updated: 2026-06-11.

BabyPortal is a clinical record system operated by NeoPaeds Melbourne. By creating an account you consent to the following uses of your personal and your baby's health information.

What we collect

Your name, email address, and mobile phone number, used to authenticate you and to contact you about your baby's care.
Your baby's clinical record: demographics, growth measurements, consultations, observations, prescribed medications, and any documents the doctor uploads.
Information you tell us in the app, such as feeding logs, parent-reported observations, and messages you send your care team.

What we do with it

Treatment: Your baby's care team uses the record to make clinical decisions and write notes that go to your GP.
Communication: We send SMS or email when there is something for you to action — an invitation, an appointment reminder, a discharge summary, or a payment receipt.
Healthcare operations: Aggregated, de-identified data may be used to improve clinical workflows and audit billing.

What we do NOT do

We do not sell your information to third parties.
We do not use your baby's identifiable data for research without your separate, opt-in consent (which can be granted or withdrawn at any time in the parent app).
We do not retain pre-birth registrations indefinitely. If a baby Patient never appears for your account, it is deleted after 30 days.

Your rights

You can request a copy of all data we hold for you and your baby.
You can request correction of any inaccurate information by contacting the clinic.
You can withdraw consent at any time. Some clinical records must be retained under Australian medical record-keeping requirements; we'll explain what can and can't be deleted at the time of your request.

Storage + security

Your clinical record (everything about your baby's care) is stored in Australia, on a Medplum FHIR server operated by NeoPaeds in the AWS Sydney (ap-southeast-2) region. All access is audited; only the doctors and administrative staff at NeoPaeds, plus you, can view the record.

Where each piece of data goes

Most of your information stays in Australia. A small number of supporting services run overseas. We've listed them all so you can see the full picture:

Clinical records and uploaded files — Australia. AWS Sydney (ap-southeast-2). This includes everything about your baby's care.
Email one-time codes and notifications — Australia. AWS SES, Sydney region.
AI processing (note drafting, parent summaries) — Australia. AWS Bedrock, Sydney region. We scrub identifiers from content sent to Bedrock where possible.
SMS messages — United States (Twilio). SMS is not encrypted in transit, so our message templates deliberately omit your baby's name and any clinical detail. Message metadata (your phone number, time sent, delivery status) transits Twilio's US infrastructure. This is an overseas disclosure under Australian Privacy Principle 8 and you consent to it by registering for the app.
Google sign-in (if you choose it) — United States. The OAuth handshake happens with Google. No clinical information is sent to Google.
Newborn weight-loss tool (NeWT) — United States. When clinically relevant in the first weeks of life, your doctor may open NeWT (the Newborn Weight Tool, run by Penn State Health) to plot your baby's early weight loss against a published reference. Doing so sends your baby's birth date/time and weight measurements (no name or record number) to NeWT's US service. This is a clinician-initiated overseas disclosure under Australian Privacy Principle 8.

Contact

For privacy questions, contact privacy@babyportal.au. See also our full Privacy Policy for how we comply with the Privacy Act 1988 (Cth).

What we collect

Your name, email address, and mobile phone number, used to authenticate you and to contact you about your baby's care.

Your baby's clinical record: demographics, growth measurements, consultations, observations, prescribed medications, and any documents the doctor uploads.

Information you tell us in the app, such as feeding logs, parent-reported observations, and messages you send your care team.

What we do with it

Treatment: Your baby's care team uses the record to make clinical decisions and write notes that go to your GP.

Communication: We send SMS or email when there is something for you to action — an invitation, an appointment reminder, a discharge summary, or a payment receipt.

Healthcare operations: Aggregated, de-identified data may be used to improve clinical workflows and audit billing.

What we do NOT do

We do not sell your information to third parties.

We do not use your baby's identifiable data for research without your separate, opt-in consent (which can be granted or withdrawn at any time in the parent app).

We do not retain pre-birth registrations indefinitely. If a baby Patient never appears for your account, it is deleted after 30 days.

Your rights

You can request a copy of all data we hold for you and your baby.

You can request correction of any inaccurate information by contacting the clinic.

You can withdraw consent at any time. Some clinical records must be retained under Australian medical record-keeping requirements; we'll explain what can and can't be deleted at the time of your request.

Where each piece of data goes

Most of your information stays in Australia. A small number of supporting services run overseas. We've listed them all so you can see the full picture:

Clinical records and uploaded files — Australia. AWS Sydney (ap-southeast-2). This includes everything about your baby's care.

Email one-time codes and notifications — Australia. AWS SES, Sydney region.

AI processing (note drafting, parent summaries) — Australia. AWS Bedrock, Sydney region. We scrub identifiers from content sent to Bedrock where possible.

SMS messages — United States (Twilio). SMS is not encrypted in transit, so our message templates deliberately omit your baby's name and any clinical detail. Message metadata (your phone number, time sent, delivery status) transits Twilio's US infrastructure. This is an overseas disclosure under Australian Privacy Principle 8 and you consent to it by registering for the app.

Google sign-in (if you choose it) — United States. The OAuth handshake happens with Google. No clinical information is sent to Google.

Newborn weight-loss tool (NeWT) — United States. When clinically relevant in the first weeks of life, your doctor may open NeWT (the Newborn Weight Tool, run by Penn State Health) to plot your baby's early weight loss against a published reference. Doing so sends your baby's birth date/time and weight measurements (no name or record number) to NeWT's US service. This is a clinician-initiated overseas disclosure under Australian Privacy Principle 8.