PROFILES · JOURNALS ·
SHARED UNDERSTANDING
PROFILES · JOURNALS ·
SHARED UNDERSTANDING
My Meaning is designed to help people share and understand information about how a Participant communicates. Because this information can be personal and sensitive, protecting privacy is fundamental to how the Service should operate.
Last updated: 17th September 2026
This Privacy Policy explains what information we collect, why we collect it, how we use and disclose it, who may have access, how we protect it, how long it may be retained, how Participants and other individuals can access or correct their information, and how to contact us about privacy.
My Meaning is a registered business name operated by The Tenti Co Pty Ltd (ABN 33 702 481 329). In this Privacy Policy, “My Meaning”, “we”, “us” and “our” refer to The Tenti Co Pty Ltd when operating the My Meaning service.
We intend to handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and Australian Privacy Principles where they apply to us.
Australian privacy law gives additional protection to sensitive information, including health information.
My Meaning is a participant-centred communication profile and communication-observation service.
It is designed to help Participants and authorised communication partners understand and share practical information about:
My Meaning is not intended to operate as a medical record, electronic health record, clinical case-note system or practice management system.
Clinical assessments, diagnoses, clinical reasoning, treatment notes and other records required as part of a practitioner’s formal clinical record should be maintained in the practitioner’s own clinical or practice-management system.
However, information stored within My Meaning may still constitute personal information, sensitive information or health information depending on its content and the circumstances in which it is collected.
We aim to design and operate My Meaning according to the following principles:
Participant-centred
Information about a Participant should be used to support that Participant and their communication.
Only what is needed
Users should only collect and enter information reasonably necessary for the communication purposes of My Meaning.
Appropriate access
Information should only be available to people who have an appropriate role, authority and need for access.
Transparency
Participants and their representatives should understand what information is being collected, why it is being collected and who can access it.
Choice and control
Where appropriate, Participants or their authorised representatives should be able to control who has access to their profile.
Privacy by design
Privacy and access controls should be built into the Service rather than relying solely on policies and user behaviour.
The information we collect depends on how a person uses My Meaning.
We may collect account and identity information such as:
Passwords may be managed through our identity or authentication provider rather than directly stored by My Meaning.
A Participant’s communication profile may contain information such as:
Authorised users may contribute observations about everyday communication interactions. These may include:
The service model deliberately distinguishes between what was observed and what someone interpreted it to mean, so that an individual interpretation does not automatically become accepted as established fact.
Users should only contribute information that is reasonably necessary for communication purposes.
Some information collected through My Meaning may constitute sensitive information or health information under Australian privacy law. This may include information relating to:
Health information receives additional protection under Australian privacy law.
We aim to collect sensitive information only where it is reasonably necessary for the purposes of My Meaning and where the collection is otherwise permitted by applicable law.
My Meaning should not be used as a repository for comprehensive medical histories, clinical case notes, diagnoses or unrelated sensitive information.
Where My Meaning allows media to be uploaded, this may include photographs, short video recordings, audio recordings or other supporting media relating to communication.
Media should only be uploaded where:
A Participant’s profile may contain information about other people, such as:
Users must only add information about another person where they have an appropriate reason and authority to do so.
Users should avoid recording unnecessary personal details about third parties.
We may collect information:
Where information is provided about a Participant by another person, the person providing that information should have appropriate authority to provide it.
Providing the communication service
To create, maintain and display a Participant’s communication profile and dictionary.
Supporting communication
To provide authorised communication partners with practical guidance about how best to communicate with the Participant.
Gathering observations
To enable authorised people to contribute communication observations from everyday interactions.
Supporting discussion and review
To allow relevant observations to be considered by authorised Participants, family members, support workers and practitioners.
Updating communication guidance
To allow communication profiles and dictionaries to be updated where appropriate.
Managing permissions
To invite users, assign roles, control access and manage Participant-authorised sharing.
Maintaining continuity
To help preserve the Participant’s communication profile when workers, practitioners or providers change.
Operating the Service
To provide support, maintain accounts, troubleshoot problems and improve functionality.
Security
To prevent unauthorised access, investigate suspected misuse and maintain audit records.
Legal obligations
To comply with applicable law, regulatory requirements and lawful requests.
Access to My Meaning should be based on a person’s role, authority and permissions. Depending on the Participant’s circumstances and account arrangements, authorised users may include:
Access to a Participant’s information does not automatically give a person authority to change every part of the profile or invite other users.
Subject to applicable law, authority arrangements and Service functionality, Participants or their authorised representatives should be able to:
Where a Participant requires assistance with decision-making, My Meaning should support appropriate authorised or supported decision-making arrangements rather than assuming another person automatically has authority to act for them.
Practitioners and provider organisations may have access to Participant information where they are appropriately authorised. Practitioner access may allow them to:
Their access does not make My Meaning the practitioner’s formal clinical record.
Practitioners remain responsible for transferring or documenting information in their own clinical record where required by their professional, organisational or legal obligations.
To authorised My Meaning users
According to Participant authority, role-based permissions and account settings.
To service providers
We may engage organisations that provide services such as cloud hosting, databases, identity and authentication, email delivery, technical support, monitoring, data backup, cybersecurity, customer support, payment processing where applicable, and analytics where appropriate. These organisations should only receive information reasonably necessary to provide their service to us.
Where required or authorised by law
We may disclose information where required or authorised by law, including in response to a valid court order, statutory requirement or lawful government request.
To protect serious safety interests
There may also be limited circumstances where disclosure is authorised or required by law in connection with serious threats, safety, safeguarding or other legal obligations.
My Meaning does not sell Participants’ personal information to advertisers or data brokers.
My Meaning relies on third-party technology providers to operate the Service.
Content to confirm before publication
Insert either an up-to-date Subprocessors page link or a confirmed list of material technology providers before publication.
This section should state the confirmed primary hosting country or region, backup locations, identity-service locations where relevant, whether any subprocessors process information overseas, and the countries in which overseas recipients are likely to be located where required.
Content to confirm before publication
Replace this placeholder with the confirmed hosting, backup, identity and overseas-processing locations before publication.
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, unauthorised modification and unauthorised disclosure.
Security measures may include:
We may collect technical information necessary to operate and protect the Service, including:
We may use this information to maintain security, investigate suspected unauthorised access, provide an audit history, troubleshoot problems, enforce permissions and meet legal or regulatory obligations.
Access to audit information should itself be controlled.
My Meaning should retain information only for as long as reasonably necessary for:
Ending a provider subscription should not automatically mean the Participant loses their profile.
Where provider sponsorship ends, My Meaning may:
The detailed rules should align with the Terms of Service and your final subscription model.
A Participant or appropriately authorised representative may request account closure, subject to:
Where information is no longer required and there is no lawful reason to retain it, we may delete or de-identify it in accordance with our retention and deletion processes.
An individual may request access to personal information we hold about them.
A request can be made by contacting:
Privacy Officer
My Meaning
The Tenti Co Pty Ltd
ABN 33 702 481 329
Email: info@mymeaning.co
We may need to verify identity or authority before providing access.
There may be circumstances under applicable privacy law where access can be refused or limited. Where required, we will explain the reason.
Individuals may ask us to correct personal information they believe is:
An objective account record error, such as an incorrect name or contact detail, can generally be corrected.
For Communication Journal material, a correction or clarification may be attached to an existing observation while maintaining an appropriate history rather than silently rewriting the historical observation.
Requests to correct personal information can be made to the Privacy Officer using the contact details in section 32.
Where processing relies on consent, a Participant or appropriately authorised person may be able to:
Withdrawing consent may affect the ability to use some Service features.
Some Participants may:
My Meaning should not assume that a parent, family member, provider or practitioner automatically has authority over all of a Participant’s information.
Where required, we may ask for information reasonably necessary to establish the appropriate authority or access arrangement.
If we become aware of a suspected privacy or security incident, we will investigate and take appropriate steps to contain and respond to it.
Where a breach meets applicable legal notification requirements, we will notify affected individuals and relevant regulators as required.
If you have a concern about how My Meaning has handled personal information, please contact:
Privacy Officer
My Meaning
The Tenti Co Pty Ltd
ABN 33 702 481 329
Email: info@mymeaning.co
We will acknowledge privacy complaints and investigate them appropriately. We aim to provide an outcome within 30 days, although some matters may require additional time. If we need additional information or more time, we will let you know.
Where a person remains dissatisfied, the policy should identify any external complaint rights available, including the Office of the Australian Information Commissioner, where applicable.
When someone visits the public My Meaning website, we may collect limited technical information such as:
We may use cookies or similar technologies where reasonably necessary for:
Our website may contain links to third-party websites or resources.
My Meaning is not responsible for the privacy practices of third-party sites that we do not operate.
Users should review the privacy information of those services before providing personal information to them.
We may update this Privacy Policy where:
Where changes are material, we will take reasonable steps to notify affected users.
The current version and effective date will always be published through the My Meaning website or Service.
Questions about this Privacy Policy or how information is handled can be directed to:
Privacy Officer
My Meaning
A registered business name of The Tenti Co Pty Ltd
ABN 33 702 481 329
Email: info@mymeaning.co