Privacy Policy

NDISMATE.AI PTY LTD (ABN 89 700 685 427) · Last updated 25 July 2026

The short version (Easy Read):

We do not save your plan, your voice, or your conversation.
You do not need an account. We do not know who you are.
When you close the page, your information is gone.
Questions? Email admin@ndismate.ai.

What we process, and how

When you upload an NDIS plan, the document is sent securely to Google's Gemini service to read it for your session. When you talk with Matey, your voice and messages are processed by the same service to hold the conversation. NDISmate.ai does not save the PDF, the extracted plan, your voice, or the conversation transcript. There is no database of user content and no account system.

If you ask Matey to send a letter

By default, when Matey helps you write a letter, you send it yourself from your own email app — nothing passes through us. If you choose the option to have Matey send it for you, the letter you wrote and approved is passed to an Australian email carrier that delivers it and keeps a short delivery record (including the address, so repeated bounces can be stopped). NDISmate.ai keeps no copy of the letter, and the carrier never receives your plan document — only the message you approved, word for word. Matey never sends anything to the NDIS or a government address on your behalf; those stay a draft you send yourself.

What stays on your device

Your companion settings (language, voice, communication style) and a random anonymous identifier are kept in your own browser's storage, on your device. You can clear them at any time through your browser settings. They contain no personal details.

What we keep server-side

To keep the free service fair and prevent abuse, we keep short-lived, hashed rate-limit counters (a one-way code derived from your network address and the anonymous identifier). These expire automatically within 24 hours and cannot be reversed into your identity. Standard security screening is provided by Cloudflare Turnstile, which has its own privacy policy.

Third parties

Google (Gemini) processes plan documents and conversations to provide the service for the session. Cloudflare provides security screening. Vercel hosts the website. We do not sell or share your information with anyone, and we run no advertising or tracking analytics on plan content.

Sensitive information

NDIS plans contain sensitive information. That is exactly why the product is built session-only: the safest data is data that is never kept. If we ever offer optional accounts or saved history, that will be a separate, explicit opt-in with its own consent — never a silent change to this policy.

Your rights and contact

We operate under the Australian Privacy Act 1988 and the Australian Privacy Principles. Because we do not hold your content, there is usually nothing for us to access, correct, or delete — but you can always contact us about privacy at admin@ndismate.ai. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).