Privacy Policy

The information we collect depends on whether you are a participant, a support worker, or a coordinator.

Participants: name, contact details, suburb/address, date of birth, NDIS number and plan information, plan-management type, the supports you request, and booking and payment history.

Support workers: name, contact details, suburb/address, ABN, compliance documents (Working With Children Check, National Police Certificate, NDIS Worker Screening, public liability insurance, qualifications), profile photo, the services you offer and your availability, and payment details.

Everyone: account credentials, messages sent through the platform, incident reports you submit or are named in, device and usage information, and records required for safeguarding and audit.

We use your information to: create and manage your account; match participants with suitable, compliant workers; verify credentials and enforce safeguarding requirements; process bookings, payments and invoices; send service communications and credential-expiry reminders; meet our obligations as a registered NDIS provider; and improve and secure the platform.

Some information we handle is “sensitive information” under the APPs — including health and disability information, and criminal-record screening results. We collect and use this only where it is reasonably necessary to deliver and safeguard NDIS supports, and where you have consented or it is otherwise permitted by law.

To reduce manual data entry, support workers may upload a photo of a compliance document, which is processed by a third-party AI service (OpenAI) to suggest the document type and dates. The suggestions are always reviewed and confirmed by the worker, and verified by our team. We do not use this content to make automated decisions about you without human review.

We share information only as needed to run the service:

• Between matched parties — a participant and a worker see the information needed to arrange and deliver a booking.

• Coordinators — where a participant has linked a support coordinator, that coordinator can see booking oversight and budget information for that participant.

• Service providers — payment processing (Stripe), accounting (Xero), email (Resend), hosting and database (Supabase), and the AI service described above. These providers process data on our behalf under their own terms.

• Regulators — the NDIS Quality and Safeguards Commission or other authorities where required by law, including reportable incidents.

We do not sell your personal information.

Where an incident report names a person as the subject of an allegation, the platform is designed so that the named subject cannot read that allegation; access is limited to the reporter, our administrators, and the non-subject party. We handle incident information carefully and disclose it only as required for safeguarding and legal obligations.

Your information is stored on Supabase infrastructure hosted in Australia (AWS Sydney). We apply access controls, encryption in transit, row-level security, and audit logging. While no system is perfectly secure, we take reasonable steps to protect your information from misuse, loss, and unauthorised access.

We retain personal information for as long as your account is active and for as long afterwards as required to meet legal, tax, insurance and NDIS record-keeping obligations. When you ask us to delete your account, we remove or de-identify your personal information except where we are required to retain certain records (for example, financial records and reportable incident records) for a legally mandated period.

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate. You may also request deletion of your account. To make a request, contact us using the details below. We will respond within a reasonable time.

If you believe we have breached the Australian Privacy Principles, please contact us first so we can try to resolve it. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy from time to time. We will post the updated version here and change the “last updated” date above. Material changes will be communicated to account holders.

Support For Everyone · ABN 50 686 098 448
Email: admin@supportforeveryone.com.au