Last updated: 25 September 2026
You are interacting with an artificial intelligence system, not a human being. The voice and text replies you receive are AI-generated and may be incomplete, out of date, or incorrect. Please use your own judgement and check anything important.
This page explains how AIHEART PTY LTD (ACN 694 607 022), of Victoria, Australia, trading as AI HEART ("we", "us") handles personal information collected through the AI HEART conversational assistant at aiheart.com.au. AI HEART lets a visitor type a message, or press a microphone button to speak, and receive a written and spoken reply generated by an AI system. This policy is written to meet Australian Privacy Principle 1 (APP 1) of the Privacy Act 1988 (Cth), which requires a clear, up to date, publicly available privacy policy.
For how the assistant itself is structured and controlled — not just how we handle your information — see how AI HEART is governed and our AI transparency statement.
When you sign in. Before you can use the assistant, you accept our Non-Disclosure Agreement and Terms and Conditions on the sign-in page. To do that we collect:
During the conversation. We collect the personal information you give us directly:
You can use AI HEART entirely by typing, with no microphone use at all, if you would rather not provide voice information.
Under APP 3.3, sensitive information — which the Office of the Australian Information Commissioner (OAIC) treats as including biometric information — may not be collected without your consent. A person's voice is capable of identifying them, so we treat voice audio as sensitive information.
What you type, and your voice audio if you use the microphone, are processed by Microsoft Azure in Australia (Australia East) to generate a reply, and are screened by our own governance system on our own server in Australia before and after. Pictures and video stills you attach are described, and recordings are transcribed, by Microsoft Azure in Australia (Australia East); the description or transcript is then screened by our own governance system, exactly as typed text is, before the assistant uses it to answer you. Some of the services we use are outside Australia:
The details you give when you sign in are held on our own systems in Australia. Emails we send you, including your signed agreement, are delivered through Microsoft Azure Communication Services, which stores its data in Australia.
In line with APP 5.1(i)–(j) and APP 8.1, we tell you here that this involves disclosure to overseas recipients, and name the countries where they are likely to be located:
Cloudflare's network, and any web page you ask the assistant about, may also be served from other countries. France and China apply only if you choose Mistral (France) or DeepSeek (China) with your own key, and OpenRouter may pass a request on to a provider in another country.
We take reasonable steps to ensure these providers handle your information under contractual terms consistent with the Australian Privacy Principles, as required by APP 8.1. That does not extend to a provider you choose with your own key: that arrangement is between you and the provider, and we cannot hold it to such terms. The model room tells you so, and asks for your consent, before your first request to that provider (APP 8.2(b)).
We use what you type or say for one primary purpose: to generate and return a reply to you in that conversation, and to keep the conversation history so the assistant can follow what was said earlier in the same exchange. In line with APP 6.1, we do not use or disclose your conversation for an unrelated secondary purpose without your consent or a lawful exception.
Records of your sign-in and of your acceptance of our agreements — including the signed agreement and our access and tracking registers — are kept for the evaluation period and for seven years after it, as the Non-Disclosure Agreement you accept sets out, so that access to the service can be accounted for. We may decline to delete those particular records where keeping them is needed for that purpose or is required by law.
Conversation history is kept only for as long as we need it to provide the service. This is a pilot and we have not yet fixed a single period for it; until we publish one here, we will delete your conversation history when you ask (see Your rights, below).
Every reply you receive from AI HEART is generated automatically by an AI system, without a human reviewing it first. This is consistent with Guardrail 6 of Australia's Voluntary AI Safety Standard, which calls for end users to be informed when they are interacting with an AI system and when content is AI-generated — which is why the disclosure at the top of this page is there.
Amendments to the Privacy Act (the Privacy and Other Legislation Amendment Act 2024) will require privacy policies to describe automated decision-making that significantly affects a person's rights or interests. Those new requirements commence on 10 December 2026 and are not yet in force. We describe our current practice above ahead of that date; AI HEART's replies are conversational and do not themselves make a decision about you — they do not, for example, determine your eligibility for a service or benefit.
You can ask us to:
To do any of these, contact us using the details below. If you are not satisfied with how we handle your request or your personal information, you can lodge a complaint with us first, and if you remain unsatisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
For privacy questions, access, correction or deletion requests, email: