MedStory Legal

Usage Policy

Last updated: 27 June 2026

Use MedStory only for lawful, respectful health-information organisation and related support.

Do not upload or access another person's information unless you have consent, legal authority or another lawful basis.

Do not use MedStory for emergencies, medical advice, diagnosis, treatment decisions, medication decisions or unauthorised security testing.

The current public website and early-access flow are contact-only and should not be used to send health information.

Purpose And Scope

This Usage Policy explains acceptable and prohibited conduct when using MedStory websites, apps, profiles, document tools, connected-source features, sharing features, support channels and related services.

It applies to all users, visitors, account holders, invited profile members and anyone interacting with MedStory on behalf of another person.

Acceptable Use

You may use MedStory to:

  • organise your own health information, documents, dates, notes and sources
  • help another person where you have consent, legal authority or another lawful basis
  • prepare for appointments or conversations with healthcare professionals
  • review information that needs checking
  • share information with trusted people where sharing is available and authorised
  • contact MedStory for product, support, accessibility or privacy help

Contact-Only Public Forms

The public website and early-access list are intended for contact details only. Do not send health information, Medicare details, My Health Record details, documents, photos, medication names, diagnoses, clinical notes or private family details through public website forms or general enquiry emails.

If MedStory later provides a secure intake process, follow the instructions and collection notices shown for that process.

Medical Safety

You must not use MedStory for emergency decisions, medical advice, diagnosis, treatment recommendations, medication changes or clinical decision support.

If you need urgent medical help in Australia, call 000. If you are outside Australia, contact your local emergency number.

Prohibited Conduct

You must not:

  • misrepresent your identity or impersonate another person
  • provide false, misleading, offensive, abusive, threatening or unlawful content
  • upload malware, harmful files or material that infringes another person's rights
  • misrepresent MedStory information as an official medical record, government record, certificate or clinician-verified document
  • use MedStory to harass, abuse, threaten or discriminate against anyone
  • resell, lease or exploit MedStory commercially without written permission
  • copy, scrape, bulk download, reproduce or reverse engineer MedStory without permission
  • interfere with MedStory's operation or overload the service
  • breach any applicable law, regulation, court order, professional obligation or third-party right

Security

You must not attempt to compromise the security or integrity of MedStory systems. This includes unauthorised vulnerability testing, scanning, credential stuffing, phishing, access-control bypass, denial-of-service attacks, automated abuse, malware upload or unauthorised access.

If you believe you have found a security issue, contact us at info@medstory.com.au and do not access, modify, disclose or destroy data.

Automation And Fair Use

You must not use bots, scripts, scrapers or other automated tools to access MedStory except where MedStory has provided written permission or an approved integration.

You must not use MedStory in a way that creates unreasonable operational, privacy, security, legal, clinical or safety risk.

Content And Files

You are responsible for content and files you enter, upload, import, confirm, link, share or export. You must ensure you have the right to provide that content and that it is relevant to the MedStory feature you are using.

MedStory may remove, restrict or refuse content where we reasonably believe it creates legal, privacy, security, safety or operational risk.

Enforcement

If we reasonably believe this Usage Policy has been breached, we may warn you, restrict a feature, suspend access, terminate access, remove content, require further verification, preserve evidence, notify affected people, report unlawful conduct, or take other steps reasonably necessary to protect users, MedStory or the service.

Where practical, we will try to give notice. We may act immediately without notice where needed to protect privacy, safety, security, legal compliance, another person or the service.

Reporting Concerns

To report misuse, safety concerns, accessibility barriers, privacy issues or suspected security issues, contact info@medstory.com.au.

Changes To This Policy

We may update this Usage Policy as MedStory changes. If changes are material, we will take reasonable steps to notify affected users before or when the updated policy takes effect.