Privacy in the app

This app is run by Endeavour Healthcare (Endeavour Disability Support Services Pty Ltd, ABN 48 675 864 089), a registered NDIS provider, for its support workers, participants and office team. This page explains what the app collects and why. Our full privacy policy covers how we handle personal information generally.

What the app collects

• Your account: name, email address, phone number and password (stored only as a one-way hash). Optional two-factor authentication.
• Support workers: your roster, clock-in and clock-out times, shift notes, travel and expense claims, credentials you upload (such as screening checks and first aid certificates), and the payroll details you enter (tax file number and bank account, encrypted).
• Support workers, when applying: an emergency contact, your right to work in Australia (and visa details if you hold one), and your qualifications.
• Support workers, optional matching profile: only if you choose to fill it in and agree to it, details that help match you with participants: gender and pronouns, cultural background, Aboriginal and Torres Strait Islander identity, religion, languages, height and build, interests and similar. Each item is optional and can be left as “prefer not to say”. Our office uses it to suggest matches, and our website’s matching preview can show your first name, suburb, languages, interests and why you might suit someone to people looking for support.
• Participants: your NDIS number and suburb, your scheduled visits and the support you received, as recorded by your support workers and our office.
• Location, only when you clock in or out — and only if you have agreed to it. It is used to confirm a visit took place at the right address, as NDIS visit verification expects. The app never tracks your location in the background or between clock events. The exact position is encrypted: office staff see whether a visit was verified and how far away the clock event was, and only an administrator can reveal the exact position, which is logged. You can clock in without sharing your location.
• Photos and files you choose to upload, such as a credential or a receipt. The app only uses your camera or photo library when you pick a file to upload.
• Notifications: if you allow them, a device token that lets us send notifications to this phone.

What notifications say

Notifications appear on your lock screen, so they never include a participant’s name, health information or the text of a message — only a time and a suburb, with the details inside the app after you sign in. Notifications are delivered through Apple (iPhone) or Google (Android).

What the app does not do

• No advertising, and no advertising or analytics trackers.
• We never sell your information or share it for marketing.
• No background location tracking.

Where it is kept

The app’s servers and database are hosted in Sydney, Australia, and all information travels encrypted. Access inside Endeavour is limited by role: support workers see their own shifts, participants see their own care, and office staff see what their job needs. Sensitive actions — including office staff opening a conversation or revealing a clock-in location — are recorded in an audit log.

Who it is shared with

Only as needed to provide and claim for supports, or as the law requires — for example the NDIA, a participant’s plan manager, or the NDIS Quality and Safeguards Commission — and with the service providers that run the app on our behalf (hosting, email and notification delivery), under contract.

Deleting your account

You can delete your account in the app at any time: Account → Delete account, or ask our office to do it for you. This removes your sign-in, contact details, matching profile, the exact locations recorded when you clocked in and out, and notification registrations straight away. As an NDIS provider we are required by law to keep records of the supports we delivered, worker screening and credentials, and pay and tax records (including messages and shift notes, which keep the name of the person who wrote them), generally for seven years; those records are kept securely for at least that period. A participant’s care record, including the contact details the office holds for them, is kept the same way: deleting your app login doesn’t end your services. If you applied through the app and were never approved, there is nothing we are required to keep: your application and the documents you uploaded are deleted too.

Access, correction and complaints

To see or correct the information we hold about you, or to make a privacy complaint, contact us on 1800 929 163 or info@endeavourhc.com.au. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

App support · Sign in