Trust & Security

ApexForm Life builds tools that work with sensitive material: how people think, and how organisations decide. We treat the data behind that work as something we hold on your behalf, not something we own. This page explains the protections in place across Paradigm and AFOS, what we collect and why, and the control you keep over your information.

We handle personal information in line with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Our principles

1. Collect only what's needed

We limit collection to what is needed for each service. For this website, we do not knowingly collect information from anyone under 16; website collection is explained in our Privacy Policy. Paradigm is for adults aged 18 and over, and its recordings, reflections and related information are covered by the separate Paradigm Privacy Policy.

2. Encrypt in transit, and encrypt sensitive data at rest

Traffic to our sites and apps travels over encrypted connections (HTTPS/TLS). Sensitive data — such as Paradigm's personal reflections, and the third-party credentials you connect to AFOS — is encrypted at rest.

3. Separate access, isolate data

Access to your information is gated by authentication and rate-limited against abuse. In AFOS, organisation membership, organisation-scoped application queries and PostgreSQL row-level security work together to isolate each workspace inside the managed service.

4. You stay in control

You can ask us to access, correct, or delete the information we hold about you, and withdraw consent, at any time. You can start account deletion in Paradigm. App-specific choices and help with account deletion are explained on Paradigm Support.

5. We don't sell your data

We do not sell your personal information. Paradigm's provider processing and the applicable training and retention conditions are described in the Paradigm Privacy Policy.

Paradigm — your personal data

Paradigm uses your reflections and personal history to support your own experience. As your history grows, it can help make your experience more relevant to you.

• Before each recording, the app asks for your permission to collect the recording and send it to OpenAI for the processing described in the notice. You can decline without making or sending that recording.
• Paradigm uses OpenAI for transcription and AI processing. The app privacy notice explains the data involved, your choices and the applicable provider retention and training conditions.
• Interpretations are offered as possible readings, not facts or clinical assessments. When response controls are available for a delivered main interpretation, you can choose Yes, Adjust, Unsure or No and later change your response.
• Account deletion covers the account's active personal data. Some steps may complete before another needs a retry or further review. Provider and recovery copies are subject to the conditions described in the app privacy notice. Account deletion does not cancel a subscription.
• Paradigm may withhold a reading and show a fixed message explaining its limits and available help. It cannot reliably recognise emergencies or assess whether someone is safe. Nobody monitors your recordings or notes for emergencies.

Read the Paradigm Privacy Policy and Paradigm Terms of Use for the app's conditions. For help, including when you cannot open the app, visit Paradigm Support.

AFOS — your business data

AFOS is a decision and reasoning intelligence system for organisations. It is hosted SaaS in commercial beta, built so each workspace can use its own evidence and operating data without exposing it to another customer.

• Access control. Commercial workspaces use password-authenticated accounts and organisation membership. Owners and administrators must verify control of their account email before initiating Council sign-off. Older compatibility deployments may still use a shared owner passcode; actions in that mode are labelled as non-individual because a shared secret cannot authenticate a person.
• Tenant isolation. AFOS runs as a multi-tenant managed service, not one server and database per customer. Organisation-scoped application queries, tenant-keyed caches and PostgreSQL row-level security isolate workspace records after the deployment's verified tenant cutover.
• Encrypted credentials. When you connect a service (for example, Stripe or your analytics), those credentials are encrypted at rest using AES-256-GCM and are never sent back to the browser.
• Financial imports. Digital bank-statement text is processed inside the AFOS service. Optional text recognition for scanned or image-only PDFs can send up to the first three rendered pages to OpenAI solely to read the text.
• AI processing is disclosed. Council deliberation and the Paradigm Scanner send the decision or organisational context needed for that request to Anthropic. Optional scanned-PDF text recognition uses OpenAI as described above. AFOS does not claim that AI prompts remain entirely local.
• Payments. Checkout runs through Stripe's hosted flow; we never handle or store raw card numbers.

Who we work with

To run our services we rely on a small set of trusted providers, each only for its specific function:

• Resend — transactional and confirmation email.
• Notion — our contact and subscriber records.
• Google Analytics — website analytics.
• Google Ads — measuring which of our ads lead to paid bookings, only if you allow it (no names or email addresses).
• LinkedIn — advertising measurement (we do not send your email address or customer data to LinkedIn).
• Zapier receives all details from our LinkedIn lead forms and passes the first name and email address to Resend, so we can email you the prompt library you request.
• Metricool — visit statistics alongside our social media reporting, only if you allow it (no form contents or email addresses).
• Cal.com — booking calendar and booking emails.
• Stripe — payment processing for bookings.
• Railway and Cloudflare — hosting and delivery.
• OpenAI and Anthropic — OpenAI provides Paradigm's transcription and AI processing with the permission described above. AFOS uses OpenAI and Anthropic only for its optional AI features described on this page.

Some of these providers may store data outside Australia (for example, in the United States or the European Union). We take reasonable steps to ensure they protect your information consistently with our policies and applicable law.

Your rights

You can ask us to access, correct, or delete the personal information we hold about you, or to stop contacting you. Email now@apexformlife.com and we will respond within a reasonable time. If you have a concern about how we have handled your information, you can also contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Full details are in our Privacy Policy and Terms.

An honest note

No method of transmission or storage is ever completely secure, and we do not claim otherwise. What we can commit to is limiting what we collect, how long we keep it, and who can reach it — and continuing to strengthen these protections as our products grow. If you believe you have found a security issue, please email now@apexformlife.com so we can address it quickly.

ApexForm Life Pty Ltd · ABN 11 698 784 904 · Last reviewed 5 November 2026.