Privacy Policy

Joining the waitlist

If you join the waitlist, we collect only your email address — used to tell you when verification opens for you. If you tick the optional box for occasional updates and offers, we'll also send you those; it's off by default, and every email we send includes a way to opt back out. We don't use your waitlist email for anything else, and it's not shared with anyone outside our own systems.

What we collect once you're a member

• Your email and password (for login).
• Profile info you choose to add: name, age, gender, bio, prompts, interests, suburb/postcode.
• Photos you upload.
• Your NDIS plan letter or plan number document, used only to verify you're an NDIS participant.
• Messages (and optional voice messages) you send to matches.
• Basic activity data (e.g. when you last used the app) to show an "active now"/"active today" badge.
• If you turn on push notifications, a subscription reference for your browser/device so we can deliver them — no location or personal data is contained in it.

We never collect your live location — only the suburb/postcode you type in yourself.

Your NDIS document, specifically

It's used for exactly one thing: confirming you're a genuine NDIS participant before your profile goes live, using a mix of team review and AI-assisted checks — both held to the same standard. It's stored in a private file store that's never publicly accessible. When a check is AI-assisted, the document is sent to our AI provider (Anthropic) solely to assess it, not for any other purpose. Either way, the document is deleted once your profile is verified — we don't keep it stored afterward. It is never shown to other members and never used for anything else.

Photos

Photos are stored privately and are never given out as public links. While you're browsing, other members only ever see a blurred version — generated on our server, not just hidden with a filter — of your photos. Your real photo is only ever shown to someone after you've mutually matched with them.

Who can access your data

• You — always, via your account.
• Our admin team — for profile verification and handling reports. Every use of admin access is scoped to that specific purpose.
• A mutual match — sees your real photos and any messages you send them, and nothing else about your account.
• Our infrastructure providers — the app runs on Supabase (hosting, login, database, file storage) and, if enabled, Resend (sending you notification emails). They process data on our behalf to run the app and don't use it for their own purposes.
• Anthropic — powers our AI-assisted checks (verification documents, and a narrow scam/abuse scan on chat messages). It processes this content solely to return that assessment and doesn't use it for its own purposes.
• Local NDIS-related providers — never see your individual profile, your name, or any of your data. We may use your interests and general suburb internally to decide which locally-relevant provider listing to show you; a provider only ever sees how many members their listing reached in a region, never who.

We never sell your data. We don't run third-party ad networks or trackers in this app, and you're never tracked across other sites or apps. The only "advertising" here, if you see any, is locally-relevant NDIS provider listings we choose to show based on your interests and suburb — never your name, your photos, or anything else about you.

Deleting your data

You can permanently delete your account at any time from Account → Sign out section. This removes your profile, photos, NDIS document, matches, and messages from our systems — it isn't a soft delete, and it can't be undone. If you'd rather we do it for you, or want your waitlist email removed, contact us and we'll delete it manually.

Blocking and reporting

If you block someone, neither of you can see or message the other anymore. Reports are visible to our admin team only, so we can review and act on them.

Changes

If this policy changes in a meaningful way, we'll let members know before it takes effect.