Terms of Service — DIAGNIFY.AI

Last updated: 26 October 2026 (incorporating 9 August 2026 baseline & Schedule A Clinic DPA)

Seller / Platform Operator: Arundhati Health Services Pty Ltd trading as DIAGNIFY.AI · 18 Springfield Lakes Boulevard, Springfield Lakes QLD 4300, Australia · D-U-N-S® 890136315 · clinical@diagnify.ai

Introduction

Welcome to DIAGNIFY.AI ("DIAGNIFY," "we," "us," or "our"), operated by Arundhati Health Services Pty Ltd. These Terms of Service ("Terms") govern your access to and use of the DIAGNIFY.AI platform, including our clinical decision support suite, our Cloud EMR & Practice Platform (emr.diagnify.ai and <practice>.diagnify.ai), and all related services, features, modules, and content (collectively, the "Platform"). By accessing or using the Platform, you agree to be bound by these Terms. If you do not agree to these Terms, you must not use the Platform.

Use of Our Services

DIAGNIFY.AI provides AI-powered clinical decision support and Electronic Medical Record (EMR) tools designed exclusively for licensed healthcare professionals and authorised medical practices. The Platform includes features such as structured differential diagnosis support, clinical history-taking assistance, ambient AI clinical scribing, investigation planning, guideline-anchored clinical reasoning, patient record management, prescribing, billing, and specialty-specific clinical modules.

DIAGNIFY.AI is a supportive clinical decision support tool. It does not replace clinical judgment, professional expertise, direct patient assessment, or authoritative medical sources. All outputs are informational in nature. Users are required to exercise independent clinical discretion and verify all AI-generated insights against authoritative sources (including current Australian therapeutic guidelines and relevant professional standards) before making any clinical decision.

The Platform is designed to operate within the clinical decision support software exemption criteria under the Therapeutic Goods (Medical Devices) Regulations 2002 (Cth). The Platform provides information to inform, and not to replace, the clinical judgment of a health professional, and does not directly process or analyse medical images or signals from in-vitro diagnostic devices for diagnostic purposes.

Authorized Users

You must be a registered health practitioner (within the meaning of the Health Practitioner Regulation National Law), or an equivalently licensed healthcare professional in your jurisdiction, or an authorised member of a healthcare organisation acting under appropriate clinical governance, to use DIAGNIFY.AI.

By using the Platform, you confirm that you are authorised and competent to interpret and apply clinical information in a professional capacity. DIAGNIFY.AI is not intended for autonomous use by patients or consumers and must be used in compliance with all applicable local, national, and international laws, regulations, and professional codes of conduct, including (in Australia) the standards and codes issued by Ahpra and the relevant National Boards.

User-Provided Information

As part of using DIAGNIFY.AI, you may input or upload clinical information, documents, or general queries. You retain ownership of this data but grant us a non-exclusive, worldwide, royalty-free licence to process the data solely to provide the Platform's services.

You must not upload information that identifies a patient unless you are legally authorised to do so and have complied with all applicable privacy obligations (including APP 3 and APP 5 patient collection notice and AI scribe consent requirements). Wherever practicable on standalone non-EMR decision support tools, clinical inputs should be de-identified before submission.

All data is handled in accordance with our Privacy Policy and, where applicable, the Privacy Act 1988 (Cth), including the Australian Privacy Principles and the OAIC Notifiable Data Breaches scheme (/privacy#data-breach-plan). Session data is processed only for the purpose and duration necessary to deliver the requested service, as described in our Privacy Policy.

Accounts and Security

You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account. You must notify us immediately at clinical@diagnify.ai of any unauthorised use of your account or any suspected security breach. We reserve the right to suspend or terminate access for violations of these Terms, misrepresentation of professional status, or misuse of the Platform.

Uploading and Sharing Content

By uploading documents, data, or other content, you confirm that you have the legal right to use and share that content. You agree not to upload any content that violates any law, infringes the rights of any person (including patient privacy rights), or is otherwise inappropriate. We reserve the right to remove content that breaches these Terms.

Intellectual Property

All content, software, models, prompts, clinical reasoning frameworks, and materials within DIAGNIFY.AI are owned by or licensed to us and are protected by copyright, trademark, and other intellectual property laws. You may not copy, modify, reverse engineer, distribute, or create derivative works based on the Platform or its content without our explicit written permission.

Subscriptions and Purchases

Where the Platform is accessed through a paid subscription or in-app purchase, billing, renewal, and refund terms are as presented at the point of purchase and are subject to the policies of the relevant app store or payment provider. Where required for refund request resolution through the Apple App Store, you consent to the sharing of limited usage data regarding purchased content with Apple, conducted in compliance with Apple's policies and limited to processing refund requests.

Disclaimer and Limitation of Liability

DIAGNIFY.AI is an informational clinical decision support tool for licensed healthcare professionals. It is not a diagnostic device, a treatment platform, or a substitute for professional medical judgment or direct patient care.

Healthcare professionals using DIAGNIFY.AI remain solely responsible for all clinical decisions and must exercise independent clinical judgment and verify information against authoritative sources before acting on any output.

To the maximum extent permitted by law (including the Australian Consumer Law, to the extent it applies), we exclude all liability for any loss, damage, decision, action, or outcome arising from or in connection with the use of the Platform. Nothing in these Terms excludes, restricts, or modifies any consumer guarantee, right, or remedy that cannot lawfully be excluded; where liability cannot be excluded, it is limited, at our election, to the resupply of the services or the cost of resupply.

Schedule A — Seller-to-Clinic Data Processing & Security Addendum (Australian Healthcare Practices)

Where you register or operate a healthcare practice or medical clinic ("Practice") on the Diagnify EMR Platform (emr.diagnify.ai or <practice>.diagnify.ai), this Schedule A forms part of these Terms between Arundhati Health Services Pty Ltd trading as DIAGNIFY.AI ("Seller" / "Processor") and the Practice:

• 1. Roles of the Parties: The Practice is the primary health service provider and legal custodian of Patient Health Records under the Privacy Act 1988 (Cth) and applicable State/Territory health records laws. Diagnify processes Patient Health Records solely on behalf of and on the instructions of the Practice to provide the Diagnify EMR Platform.
• 2. Australian Data Residency: Diagnify hosts all primary production databases (Supabase PostgreSQL) and application servers (Vultr Cloud Compute) in Sydney, Australia (ap-southeast-2). Where the Practice enables Australian-Only AI Routing (AU_ONLY_MODELS=1), clinical text inference is restricted to Australian endpoints (AWS Bedrock Sydney).
• 3. No Secondary Use or Public AI Model Training: Diagnify will never sell Patient Health Records, use them for advertising, or permit third-party AI sub-processors to train foundation models on identifiable Practice or Patient data.
• 4. Security Measures (APP 11): Diagnify maintains encryption in transit (TLS 1.2/1.3) and encryption at rest (AES-256) for database and daily GPG backup archives; Role-Based Access Control (RBAC) separating clinical and non-clinical staff permissions; append-only, hash-chained security audit logging (emr_core.audit_events) and chart-access logging (chart_access_log); and Multi-Factor Authentication (MFA), automatic idle screen lock, and brute-force sign-in lockout controls.
• 5. Notifiable Data Breach (NDB) Cooperation (Part IIIC Privacy Act 1988): If Diagnify becomes aware of any actual or suspected unauthorised access, disclosure, or loss of Practice data, Diagnify will notify the Practice Owner within 24 hours (and no later than 72 hours) of confirmation, execute immediate containment steps, preserve forensic audit logs, and coordinate in good faith so that, where required, a single coordinated notification is made to the OAIC and affected individuals under s 26WJ of the Privacy Act 1988 (Cth).
• 6. Data Return, Export & Subscription Lapse (RACGP C6.4): If the Practice's subscription lapses or terminates, Diagnify will not hold Patient Health Records hostage. The Practice will retain read-only and export access (including AU Core FHIR JSON bundles and Full-Record PDFs) for at least 90 days to complete a safe clinical transition.

Changes to These Terms

We may update these Terms periodically. Any material changes will be posted within the Platform, and continued use of DIAGNIFY.AI following such changes constitutes acceptance of the updated Terms.

Governing Law

These Terms are governed by the laws of Queensland, Australia, and you submit to the non-exclusive jurisdiction of the courts of Queensland.

Contact Us

If you have any questions or concerns about these Terms, please contact us at:

DIAGNIFY.AI — Arundhati Health Services Pty Ltd
18 Springfield Lakes Boulevard, Springfield Lakes QLD 4300, Australia · D-U-N-S® 890136315
Email: clinical@diagnify.ai · Website: https://diagnify.ai