RareJourney uses the following third-party service providers to deliver our platform. Each provider has been assessed for security and privacy practices and operates under data protection agreements.
Last updated: February 27, 2026
Under the Australian Privacy Principles (APP 8), we take reasonable steps to ensure overseas recipients of your personal information protect it consistently with the APPs. Each subprocessor listed below has been vetted and is bound by contractual data protection obligations.
We will notify subscribers by email at least 10 business days before adding or changing any subprocessor.
Service
Database hosting, user authentication, file storage
Data Processed
All account and health data (encrypted at rest and in transit)
Data Location
Australia East (AWS infrastructure)
Certifications
Service
AI-powered health companion responses
Data Processed
Chat messages and relevant health context (data minimisation applied)
Data Location
Australia East
Certifications
Service
Error tracking and performance monitoring
Data Processed
Error logs with personal information scrubbed before transmission
Data Location
United States
Certifications
Service
Product analytics and feature flags
Data Processed
Anonymised usage data with hashed user identifiers. No identifiable health data.
Data Location
United States
Certifications
Service
Website analytics for therarejourney.com, only after a visitor accepts analytics cookies. Not used in the App.
Data Processed
Website pages visited, referrer, device and browser type, and approximate location from IP address. No names, email addresses, form contents, or health or condition information.
Data Location
United States
Service
Transactional email delivery
Data Processed
Email address and service message content
Data Location
United States
Certifications
Service
Mobile app builds and over-the-air updates
Data Processed
App code and build artifacts only. No user data.
Data Location
United States
Certifications
Some of our service providers use their own infrastructure providers.
Get notified at least 10 business days before we add or change any subprocessor. Email privacy@therarejourney.com to subscribe to subprocessor change notifications.
If you wish to object to RareJourney's use of a new subprocessor, notify us in writing within 10 business days of receiving notice of the change. Email privacy@therarejourney.com with the subject line "Subprocessor Objection."