Privacy Policy

NDIS Budget Guard handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

• Your email address and password (stored hashed, never in plain text).
• Plan details you enter: plan name, dates, total value and category budgets.
• Expenses you record: date, amount, category, description and any receipt image.
• Basic technical logs needed to keep the service running and secure.

We do not collect health records, NDIS participant numbers or data from the NDIS portal, and we have no access to your NDIS plan.

Why we collect it

To run your account, show your budget, send the alerts you have switched on, and process your subscription.

Storage and third parties

• Supabase — hosts our database, authentication and receipt file storage.
• Stripe — processes subscription payments. Card details go directly to Stripe; we never see or store them.
• Email delivery provider — sends alert and account emails.

Some of these providers may store or process data outside Australia. We only use providers with recognised security practices.

Marketing and the Spam Act 2003

Alert and marketing emails include an unsubscribe link, and you can turn email notifications off at any time in Settings. Essential account emails (password resets, billing receipts) are still sent.

Access, correction and deletion

You can view and edit your data in the app at any time, and delete your account and all associated data from Settings. To request a copy of your data, email privacy@plancheck.com.au.

Complaints

If you are unhappy with how we handled your information, contact privacy@plancheck.com.au. If you are still not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).