Privacy Policy

Last updated: May 2026

Who operates this service

Support Circle is operated by Finn Software Pty Ltd (trading as Support Circle App), a company registered in Queensland, Australia.

This policy is made under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

What Support Circle is

Support Circle is a care coordination tool for NDIS families. It lets parents and specialists share session summaries, goals, and appointments in one place. It is not a clinical records system, not a My Health Records provider, and not a substitute for the records specialists keep in their own professional systems.

What information we collect

  • Your email address and display name (required to use the service)
  • Your child's first name and date of birth (optional, used only within your circle)
  • Session summaries and coordination notes you choose to share within your circle
  • Goals, appointments, and team member information you add to your circle
  • Health-related information about your child that you or specialists enter into the service (e.g. diagnoses referenced in session notes, therapy goals, care plans)
  • Profile photos you upload (stored in Australia)

Sensitive information and consent (APP 3)

Information about a child's health, disability, or therapy is sensitive information under the Privacy Act 1988. We collect this information only because:

  • You (or your child's specialist) enter it into the service voluntarily, which constitutes your express consent to our handling of it for the purpose of care coordination; and
  • The collection is reasonably necessary to provide the service you have requested.

We do not use sensitive information for any purpose other than providing and improving the Support Circle service. You may withdraw consent at any time by deleting your account and associated data.

Why we collect this information

We collect personal and sensitive information to:

  • Provide the care coordination features of the service (sharing session notes, goals, and appointments within a circle)
  • Authenticate your account and keep your data secure
  • Send service-related notifications (e.g. new session summaries, appointment reminders)
  • Respond to support requests
  • Improve the service based on aggregated, de-identified usage patterns

We do not sell your personal information. We do not use your personal information for advertising.

Where your data is stored

All circle data — notes, goals, appointments, member profiles — is stored in Supabase on AWS ap-southeast-2 (Sydney, Australia). Your data stays in Australia.

Third-party services we use

Operating the service requires us to share limited data with the following third parties:

  • Supabase (database and authentication infrastructure) — stores your account and circle data on AWS in Sydney, Australia. Supabase Privacy Policy
  • Vercel (web hosting) — serves the Support Circle application. Vercel may transiently process request metadata (IP addresses, browser type) as part of hosting. Vercel Privacy Policy
  • Google OAuth — if you sign in with Google, Google authenticates your identity and shares your email address and display name with us. We do not receive your Google password. Google Privacy Policy
  • Anthropic — when a specialist generates an AI session summary, the session note text is sent to Anthropic (USA) to produce a plain-language summary. See the AI processing section below for full details.
  • Resend — used to send transactional emails (invite notifications, session summary alerts). Your email address is shared with Resend for this purpose.

We do not share your data with any other third parties except as required by Australian law.

AI processing (Anthropic)

When a specialist generates an AI session summary, the session note text is sent to Anthropic (USA) via their API to produce a plain-language summary. Before this happens, specialists see a disclosure and must explicitly consent.

  • No names or contact details are included in what is sent to Anthropic
  • Anthropic does not retain or train on data submitted via their API
  • Specialists review and edit the AI-generated summary before it is shared with the circle

For full details on Anthropic's data handling, see anthropic.com/legal/privacy.

Who can see your information

  • Only members you have explicitly invited to your circle can see your circle's content
  • Parents control who is invited. Specialists only see what is relevant to your child's coordination
  • Private parent notes are visible only to parents in the circle unless explicitly shared
  • Support Circle staff access data only when required to investigate a support issue, and only with your permission

Your rights under the Australian Privacy Principles

Under the Privacy Act 1988 (Cth), you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your account and data
  • Complain about how we handle your information

To exercise any of these rights, email support@supportcircle.io. We will respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Data retention

Your data is retained for as long as your account is active. When you delete your account, all personal data is deleted within 30 days. Backups are purged within 90 days.

Cookies and analytics

We use essential session cookies for authentication only. We do not use advertising cookies or third-party tracking.

Changes to this policy

We will notify active users by email of any material changes to this policy before they take effect.

Contact and privacy complaints

Finn Software Pty Ltd (trading as Support Circle App)
ABN: 75 698 582 286 | ACN: 698 582 286
Queensland, Australia

Privacy enquiries: support@supportcircle.io