Privacy Policy

The information we collect depends on whether you are a participant, a support worker, or a coordinator.

Participants: name, contact details, suburb/address, date of birth, NDIS number and plan information, plan-management type, the supports you request, and booking and payment history.

Support workers: name, contact details, suburb/address, ABN, compliance documents (Working With Children Check, National Police Certificate, NDIS Worker Screening, qualifications, and public liability insurance if you choose to provide it), profile photo, the services you offer and your availability, and payment details.

Everyone: account credentials, messages sent through the platform, incident reports you submit or are named in, device and usage information, and records required for safeguarding and audit.

Website visitors: our public website (supportforeveryone.com.au) may use Google Analytics to count visits and which buttons are clicked, such as “message us” or “open the app”. It uses cookies and does not tell us your name. You can opt out with Google’s browser add-on at tools.google.com/dlpage/gaoptout.

We use your information to: create and manage your account; match participants with suitable, compliant workers; verify credentials and enforce safeguarding requirements; process bookings, payments and invoices; send service communications and credential-expiry reminders; meet our obligations as a registered NDIS provider; and improve and secure the platform.

Some information we handle is “sensitive information” under the APPs — including health and disability information, and criminal-record screening results. We collect and use this only where it is reasonably necessary to deliver and safeguard NDIS supports, and where you have consented or it is otherwise permitted by law.

Reading documents. When a support worker uploads a compliance document (a photo or a PDF), it may be read by a third-party AI service (Anthropic's Claude) to suggest the document type, name, number and dates. The worker confirms those details, and a member of our team compares them with the document and checks the Blue Card and NDIS Worker Screening clearance on the official registers.

Interview. Workers answer nine questions, asked by video, by speaking or typing. A spoken answer is recorded and turned into text by the worker's own browser speech recognition (in Chrome this is processed by Google), and the worker can correct the text. The text is assessed by the same AI service against a published guide. It is instructed to score only the content of each answer, never accent, spelling, grammar, English fluency or style. Recordings are kept privately, seen only by SFE staff reviewing the interview, and deleted 90 days after the decision; the written answers and scores are kept with the worker's record.

Automatic checks. We check a worker's name and ABN against the NDIS Commission's published register of banning orders and compliance actions, and their ABN on the Australian Government's ABN Lookup. A police certificate may be verified automatically when it clearly belongs to the worker, is current, and states no disclosable court outcomes; anything else is checked by a person. A possible register match is always reviewed by a person and never blocks anyone on its own.

Going live. When every check is complete and the interview score is 70 or more, the worker's account is switched on automatically, without waiting for someone to press a button. If the score is lower, or an answer raises a safety concern, a person reads the answers and decides. We never decline, suspend or remove anyone automatically: every decision against a worker is made by a person, and you can ask for any decision to be explained or reviewed by contacting us (details below).

Anthropic does not use this content to train its models under its commercial terms.

We share information only as needed to run the service:

• Between matched parties — a participant and a worker see the information needed to arrange and deliver a booking.

• Your support worker's Safety card — only if you tick “Share with the worker I book” in your safety questions, the worker on a confirmed booking sees your emergency contact, whether you live alone, and what you wrote for them, from the day before the shift until 2 hours after it ends. Each time a worker opens the card, we record it. Your other safety answers are never shown to workers. You can untick sharing at any time.

• Coordinators — where a participant has linked a support coordinator, that coordinator can see booking oversight and budget information for that participant.

• Service providers — payment processing (Stripe), accounting (Xero), email (Resend), hosting and database (Supabase), website analytics (Google Analytics, on our public website only), and the AI service described above. These providers process data on our behalf under their own terms.

• Regulators — the NDIS Quality and Safeguards Commission or other authorities where required by law, including reportable incidents.

We do not sell your personal information.

Where an incident report names a person as the subject of an allegation, the platform is designed so that the named subject cannot read that allegation; access is limited to the reporter, our administrators, and the non-subject party. We handle incident information carefully and disclose it only as required for safeguarding and legal obligations.

Your information is stored on Supabase infrastructure hosted in Australia (AWS Sydney). We apply access controls, encryption in transit, row-level security, and audit logging. While no system is perfectly secure, we take reasonable steps to protect your information from misuse, loss, and unauthorised access.

We retain personal information for as long as your account is active and for as long afterwards as required to meet legal, tax, insurance and NDIS record-keeping obligations. When you ask us to delete your account, we remove or de-identify your personal information except where we are required to retain certain records (for example, financial records and reportable incident records) for a legally mandated period.

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate. You may also request deletion of your account. To make a request, contact us using the details below. We will respond within a reasonable time.

If you believe we have breached the Australian Privacy Principles, please contact us first so we can try to resolve it. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this policy from time to time. We will post the updated version here and change the “last updated” date above. Material changes will be communicated to account holders.

Support For Everyone · ABN 50 686 098 448
Email: admin@supportforeveryone.com.au