We hold medical records and household locations. We build accordingly.
Every line on this page is a commitment for how Quanterium will be built and run. Nothing is running in production yet, so none of it is a claim about a live system.
Location
The most sensitive thing we’ll hold isn’t medical.
A pet tracking collar is a household location beacon. So we treat location as a physical safety matter, not a privacy one.
- One walkA collar knows where your dog goes.
- One weekOver a week, it knows your routine.
- AggregatedAnd that is a burglary map.
- SoLocation gets the strictest controls and the shortest retention of anything we hold.
How we’ll protect data
The controls, and the reason for each.
Written as commitments because that’s what they are today. We would rather be checked than admired.
- Zero trust
Nothing trusted by where it comes from.
Identity and authorisation will be checked at every boundary.
- Encryption
Encrypted at rest and in transit.
AES-256 at rest. TLS 1.3 in transit, between our own services too. Keys rotated by a managed service.
- Access
No standing access, including the founder.
Multi-factor sign-in for all staff, least-privilege roles and short-lived tokens. Nobody holds open access to the full record set.
- Payments
We’ll never hold your card number.
Card numbers will be tokenised through a PCI DSS provider, which keeps us out of scope entirely.
- Logging
Every access to a record logged.
So any look at a record can be accounted for.
- Resilience
Backups that are actually tested.
Multiple availability zones from launch, immutable backups and tested restores. An untested backup is a belief, not a control.
- Delivery
No direct commits, including by the founder.
Security tests block every release. If the rule has an exception at the top, it isn’t a rule. Ours doesn’t.
- Testing
An external penetration test before launch.
Someone outside the company tries to break it first.
Your record
The owner controls the record.
Portable and exportable on request: the product promise, not a compliance concession. We also collect as little as we can. Every field we don’t collect can’t leak.
ID documents and money
Your ID and your money get stricter rules still.
My Pet Friends will ask for a passport or driver’s licence, and the wallet will move money. Both are handled more strictly than anything else we hold.
- ID checks
Checked by a specialist, shown to nobody.
A specialist verification provider checks your passport or driver’s licence. Other members only ever see a verified badge.
- Blockchain
Nothing personal goes on-chain.
Only a fingerprint of a record is anchored, so it can be checked and still deleted under the Privacy Act.
- Custody
We will never hold your money.
The wallet is non-custodial: you hold the keys. Top-ups go through a licensed payments provider.
- Contracts
Audited before anything goes live.
No contract that touches money is deployed without an independent external audit.
More on ID checks in My Pet Friends and on how the wallet keeps money safe.
AI safety
What the AI is allowed to do, and what it isn’t.
AI Triage is planned, subject to regulatory advice. These rules are part of its design. Follow one question through them.
01 · The question
Triage, not diagnosis.
It answers how urgently a vet is needed. It doesn’t name conditions and it doesn’t prescribe.
02 · Access check
We never ask a model to keep a secret.
Who can see what is enforced in the retrieval layer, in code, before the AI sees anything.
03 · Record and guidelines
Clinical governance.
Only this pet’s record, and clinical guidelines curated under a Veterinary Clinical Lead, a planned hire.
04 · The answer
Urgency only.
Emergency, this week, or watch at home. When it’s uncertain, it recommends a vet.
05 · The log
Redacted, and never trained on.
Personal details are removed before anything is logged. We’ll hold model providers to contractual no-training terms.
If something goes wrong
You’ll hear it from us within 72 hours.
Affected users and regulators will be told within 72 hours, in plain language. If users were affected, we’ll publish what happened and what we changed.
What we will not do
Three things we’ve ruled out.
We will not diagnose.
Urgency, yes. A diagnosis is a vet’s job.
We will not compete with vets.
Vets are our channel, not our victim.
We will not launch a marketplace on day one.
The partner network starts as a directory and earns its way up.
Quanterium is operated by My Pet Health Pty Ltd. We operate as though the Privacy Act applies, regardless of thresholds. Questions about your data: hello@quanterium.io.
Get a note when it’s ready.
We’re launching in Australia first. We’ll only email you about the launch, and we’ll never share your details.