How we handle personal information
Who we are
Care+ is software made by Admin Covered that NDIS providers and households use to run their services.
When a provider or household uses Care+, they collect and decide how to use the information about their participants, workers and contacts; Admin Covered stores and processes it for them. Questions about a participant's record go first to the provider or household that keeps it.
What is collected
People who sign in: name, email address, sign-in and security events, and the roles given to them.
Participants: name, contact details, date of birth, NDIS number, funding and plan-management details, goals, risk alerts, emergency contacts, nominees and guardians, consents, documents such as the Support Plan, and the records of services delivered.
Workers: name, contact details, NDIS worker screening number, credentials and availability.
Sign-up requests: organisation name, contact name, email, phone and message.
Why
To schedule and deliver supports, keep service records, bill, meet NDIS record-keeping and quality obligations, and keep accounts secure. If required information is not given, the related feature may not work — for example a participant cannot be activated without an NDIS number.
Who sees it
Only people in the same workspace whose role and access allow it: a support worker sees only the participants they are given access to. Admin Covered staff do not see participant or worker records. Information is not sold and is not used for advertising.
Care+ is hosted in Sydney, Australia, by Supabase (database, files, sign-in), Vercel (web hosting) and Amazon Web Services (virus scanning, logs).
Emails (invitations, sign-in links and notices) are sent by Resend, a United States company, from its Tokyo, Japan sending region. Resend stores the recipient's email address, the subject, the email text and delivery records in the United States. Emails never contain participant care details.
How it is protected
Records are stored in Australia (emails as described above) and encrypted in transit and at rest; NDIS numbers, dates of birth and credential document numbers are additionally encrypted by the application. Access is checked on every request, files are virus-scanned before anyone can open them, and every change to a record is logged.
Access, correction and complaints
Ask the provider or household that keeps your record to see or correct it, or contact us. If you are not satisfied with how a complaint is handled, you can contact the Office of the Australian Information Commissioner (oaic.gov.au). NDIS participants can also contact the NDIS Quality and Safeguards Commission.