Privacy
Last updated 29 July 2026
You are asked to share sensitive things about your life. This page explains exactly what happens to that information.
Draft pending legal review. This document has been written by the product team and has not yet been reviewed by qualified Australian NDIS, privacy and commercial lawyers. It must be reviewed and approved before public launch.
What we collect and why
We collect what we need to match you with suitable providers, and no more. You are never required to disclose a diagnosis — describing what support you need is enough. Where a field is optional, we say so, and “Prefer not to say” is available wherever it makes sense.
Each time we ask for something, we explain why we are asking at the point of asking.
Who sees your information
- Your Support Passport is divided into sections, each with its own sharing setting.
- During matching, providers see anonymised information only — never your identity or contact details.
- Your identity and contact details are shared at the point you choose: on referral consent, on selecting a provider, or after a provider accepts.
- You can preview the exact information a provider will receive before anything is sent.
- A nominee, family member or coordinator sees only what you have granted them, under a recorded authority you confirmed.
- There are no public participant profiles. Your exact address is never published.
Your disclosure history
Every time your information is actually shown to someone, we record it. You can read that history yourself — who saw which section, when, and on what basis.
Consent
Consent is specific, recorded against the exact wording you agreed to, and withdrawable. Withdrawing consent stops future sharing; it cannot retrieve information already provided to a provider, and we will tell you that plainly at the time.
Access, correction and deletion
You can export your personal information and ask us to correct or delete it. Some records must be retained — safeguarding records and financial records among them — and where we cannot delete something we will tell you what we kept and why.
What we do not do
- We do not sell participant information.
- We do not run advertising or analytics trackers on signed-in pages.
- We do not send participant information to general analytics platforms.
- We do not use your information to train AI models without your explicit, lawful consent.
- We do not use real participant data in development or testing.
Where your information is held
Participant information is held in Australian data centres. Where any processing occurs outside Australia, it is assessed and documented before it begins, and listed here.