Privacy Policy

Sparks Provider is operated by Sparks Support Pty Ltd, T312, 1 Village Centre Way, Forest Glen QLD 4556. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. In this policy, we, us and our mean Sparks Support Pty Ltd.

Sparks Provider is business software for support providers. An organisation controls the records its authorised owners, admins and workers enter. We process those records to provide and protect the service.

The app is not directed to children as account holders. A provider may record information about a person receiving support, including a child, only where the provider has the authority and notices needed to do so.

We collect the information needed to provide and support your provider workspace.

• Account and identity information: name, email address, user identifier, membership role and security or sign-in state. Supabase Auth handles passwords and sessions.
• Business and team information: business identity and settings, ABN, contact details, address, invoice and bank settings, staff profiles, employment details, qualifications and checks, availability, emergency contacts, photos and compliance documents.
• Support and service records: participant identity and contact details, date of birth, NDIS number, plan information, goals, emergency contacts, support and health information, photos, documents, schedules, attendance, timesheets, travel, notes, tasks, incidents, agreements, rates, invoices, reports and NDIS claiming information.
• Communications and integrations: invitation, sign-in, reminder and support messages, plus the information an authorised user chooses to send to Xero.
• Help assistants: questions you choose to ask Cody, our in-app help assistant, and its answers, and the name, email address, question and replies you choose to give the website assistant.
• Purchase information: product, customer, transaction and subscription identifiers and status. We do not receive full payment card details.
• Technical and support information: request and device information needed to operate the service, limited error diagnostics, basic information about how the website and service are used, and anything you include in a support request.

Camera and file access is used only when you choose a photo or document to upload. Do not enter information that your organisation does not need or is not authorised to hold.

Participant and worker records can contain sensitive information, including health information and compliance documents. We only handle this information because your organisation chooses to enter it to run its service.

Your organisation is responsible for having the authority, consent or other lawful basis needed to enter another person’s information, and for telling them how it will be handled.

We use personal information only to run and improve Sparks Provider:

• Authenticate users and keep organisation records separated.
• Provide rostering, worker, document, incident, agreement, invoice, export and reminder features.
• Send service messages and complete actions an authorised user requests.
• Process purchases, show subscription status and provide purchase restoration.
• Answer help questions and support, access, correction and deletion requests.
• Understand how the website and service are used, so we can improve them.
• Protect accounts, investigate faults, prevent misuse and meet legal and record-keeping obligations.

We do not sell or rent personal information, and we do not send participant and worker records to advertising platforms.

Cody, our in-app help assistant, is optional. When you use it, Anthropic processes only your current typed question, first name, role and the relevant published Provider help articles. Participant and worker records, rosters, notes, documents, agreements, timesheets, invoices and reports are not sent to Cody.

Cody cannot inspect or change your workspace and does not make automated decisions. If the published help articles do not support a confident answer, the question is placed in our support CRM and linked to your signed-in account so our team can reply by email.

The public website assistant is optional. Anthropic processes only the current question, first name and published public Provider information. Your email and earlier messages are not sent to Anthropic. The question and reply are recorded in our support CRM. If the assistant cannot answer, or you choose to leave a message, the name and email you supplied let our team take over and reply by email.

Anthropic states that its commercial API inputs and outputs are not used to train its models by default and are normally deleted from its systems within 30 days, subject to its published safety, legal and contractual exceptions. More detail is in our AI Use Statement.

Business owners can choose to receive occasional product tips and getting-started reminders on their phone. This permission is separate from work alerts and review invitations and is off until you enable it. You can turn product tips off in the app’s Account notification settings without changing work alerts.

Apple or Google receives the device notification token and message needed to route a phone notification. We keep your permission choice and notification content, time and sending outcome. These messages are intended for general product guidance, not participant details. A notification accepted by Apple or Google is not proof that it was displayed or read.

Necessary cookies keep accounts signed in. Our first-party website analytics help us understand how public pages are used. Optional advertising measurement is a separate choice, available under Advertising preferences in the website footer. It is separate from optional marketing emails, and declining it does not affect calculator results, report delivery, your trial or your access to the service.

If you allow advertising measurement, Meta Pixel on public marketing pages and our server-side Conversions API report calculator activity, trial button clicks, a new trial workspace, its first shift and the first recorded subscription payment. Browser and click identifiers help connect a website visit to these milestones across sparksprovider.app and app.sparksprovider.app. Matching event IDs prevent counting browser and server reports twice.

Meta receives technical advertising identifiers, event names and times, and public page information. Browser connections also expose an IP address and browser information to Meta. We do not send calculator answers, account names, email addresses, phone numbers, participant or worker records, health information, notes, documents, or signed-in page URLs. Meta scripts do not run inside the signed-in app. Meta may process advertising information overseas under its privacy terms.

Advertising identifiers are retained for up to 90 days. Pending event payloads expire after seven days, and content-free delivery records are retained for up to 180 days. You can withdraw advertising permission in the website footer. Withdrawal stops future measurement but cannot recall events already received by Meta. Global Privacy Control and Do Not Track signals are respected.

The calculator summary needs no email. If you request a detailed report, your supplied contact details and calculator inputs go to our support CRM with a calculator tag for delivery and support. The separate, initially unticked email-marketing option is not required to receive your report or use the service.

We disclose only the information needed for the service involved, and we require our providers to protect it:

• Supabase for authentication, database and private file storage.
• Vercel for website, web application and API hosting.
• Resend for email delivery, and ClickSend or Twilio when an organisation enables SMS reminders. The SMS service receives the destination phone number, reminder text and delivery identifiers.
• Xero only when an authorised user connects Xero and chooses to send records.
• Stripe for separate web subscription and SMS-credit purchases.
• Apple and Google to process iOS and Android purchases and route phone notifications, and RevenueCat to receive an organisation-scoped pseudonymous identifier and app-store purchase or subscription status. RevenueCat does not receive the organisation login email for this purpose and does not decide app roles or authorisation.
• Anthropic when you use Cody or the website assistant, as described above.
• Meta only if you allow advertising measurement, as described above.

App-store purchases are not connected to the separate Stripe account. Some providers may process information in countries outside Australia under their own privacy and security terms.

We may also disclose information where required by law, to protect a person or the service, or as part of a business transfer subject to appropriate confidentiality and notice.

Sparks Provider uses encrypted network connections, encryption of stored data, private storage, role-based access, organisation-scoped database policies and restricted administrative access. Access is based on the authoritative membership role for the signed-in account. Security events are logged without intentionally placing participant details in diagnostic messages.

Encrypted recovery backups are monitored, access-restricted and held separately from the live service. No system can be completely secure, but we actively work to protect the information entrusted to us. Please report suspected unauthorised access promptly.

We keep active organisation records while needed to provide the service, maintain business records and meet the organisation’s operational and legal needs. Short-lived sign-in, invitation and diagnostic records are removed on defined schedules. An organisation should export records it is legally required to keep before closing its account.

When the organisation founder requests closure, uploaded documents and photos are removed from the active service straight away. Other active organisation records are scheduled for permanent deletion after 30 days and the founder can cancel during that period. Deleted information may remain in restricted encrypted recovery backups until those snapshots expire, no later than 56 days after deletion from the active service. Backups are used only for disaster recovery, not to restore an individual deleted account.

Removing a worker from an organisation is different from deleting the worker’s sign-in. See our account deletion instructions for both paths.

You can ask to access, correct or export your personal information, delete an individual sign-in, close an organisation account or make a privacy complaint. We may need to verify your identity and your authority for an organisation before acting. We will explain if information cannot be changed or deleted because of another person’s rights or an applicable legal requirement.

Email hello@sparksprovider.app. Please do not include passwords, sign-in codes or sensitive support records in an ordinary email.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy when the service, providers or legal requirements change. The latest version and its update date will stay available at this address.