Security approach

Built for teams that need practical, privacy-aware automation.

MyHealthFollowup keeps bookings in Cliniko or Calendly, limits copied contact data, protects connection credentials, and shows useful activity without exposing more information than staff need.

Protected connections

Cliniko keys and Calendly connection credentials are kept in secure server storage, not in your browser. Staff access is limited to their account and role.

Minimal booking data

We fetch booking details when needed and keep the information required to run your emails and reports. Cliniko or Calendly remains your booking system.

Preference checks before send

Cliniko emails use the relevant patient preferences. Marketing emails also check permission, unsubscribes and previous delivery problems before sending.

Useful, limited records

Logs explain delivery outcomes while limiting exposed contact details. Patient feedback comments are encrypted in storage and only visible to clinic owners and admins.

Data handling

Clear about what we keep.

We store your email designs, automation settings and the records needed to send and report on them. Features such as saved campaign audiences and patient feedback keep additional information when you use them.

Account connectionsCliniko keys and Calendly credentials are kept in secure server storage.
Emails and automationsSaved to your account, with access limited by staff role.
Imported imagesImages included in supported design ZIPs are hosted for your emails. Anyone with an image link can view it, so use artwork without patient or confidential information.
Booking detailsFetched from Cliniko or Calendly when needed to prepare emails and check whether they should send.
Marketing preferencesSaved audience permissions and opt-outs help prevent unwanted campaigns and marketing recalls. Cliniko marketing preferences are also checked.
Patient feedbackSurvey invitations, scores and optional comments are stored for your clinic. Comments are encrypted and restricted to owners and admins.
Recall resultsInternal patient and booking references help show bookings made after recalls, without storing clinical notes for those reports.
Cliniko formsPersonal form links are prepared when sending. Form answers stay in Cliniko.
Logs and eventsDelivery outcomes are available for troubleshooting, with sensitive details removed from operational logs.
BillingHandled through Stripe Billing; payment card details are not stored by MyHealthFollowup.

Operational safeguards

Controls that matter in day-to-day booking workflows.

Staff access limited to their account and role
A record of sensitive account changes
Checks to prevent duplicate emails
Options to cancel upcoming emails and retry failures
Clear reasons when an email is skipped
Core infrastructure hosted in AWS Sydney

Experience-informed engineering

Built with experience from critical digital health infrastructure.

The backend approach is informed by hands-on engineering experience in regulated digital health environments. That does not replace formal certification or a clinic privacy review, but it shapes the product decisions: separate clinic accounts, limited records, protected connections and clear staff permissions.