Warrie Digital
Privacy Policy
Warrie is a record-keeping application for independent disability support workers. This Privacy Policy explains how Warrie Digital (we, us or our) handles personal information through the Warrie mobile application, the website at warrie.com.au, and related support services.
We recognise that information entered into Warrie may include sensitive information about NDIS participants and other people. We aim to handle that information carefully, transparently and securely.
1. Who this policy applies to
This policy applies to people who create or use a Warrie account, contact Warrie Digital or visit our website, and individuals whose information is entered into Warrie by an authorised user, including NDIS participants, emergency contacts and witnesses.
The support worker or organisation using Warrie is responsible for ensuring they have authority to collect, enter and use information about other people.
2. Information we collect and hold
Account and worker information
- name, email address, phone number, login and authentication information;
- business or organisation name, ABN, business address and worker or provider identifiers;
- profile preferences, report contact details and business logo; and
- account, security and support correspondence.
Participant and support-work information
- participant names, preferred names, date of birth, NDIS number, contact details, address and emergency contacts;
- disability, diagnosis, health, medication, allergy, care and support information;
- shift times, locations, notes and support records;
- medication schedules and administration records;
- incident reports, witness details, actions and outcomes;
- expenses, receipts, mileage and travel information; and
- documents, photographs and files uploaded by the user.
Some of this information may be personal information or sensitive information, including health information.
Device, technical and website information
We may process record identifiers, timestamps, authentication events, app version, device or operating-system information, error information and security logs needed to operate and secure Warrie.
Our website uses Cloudflare Web Analytics to understand general visits and page performance. It is configured as privacy-focused aggregate analytics and is not intended to identify individual visitors. If we later add contact forms, advertising, cookies or additional analytics, we will update this policy before using them.
3. How information is collected
Information is collected when a user creates or updates an account; creates participant, shift or other work records; uploads a file; uses an optional device feature such as camera, files, notifications, maps or location; signs in; generates or shares a report; or contacts Warrie Digital.
Users generally choose what work and participant information to enter. Warrie does not infer clinical decisions or medication instructions.
4. Why we collect and use information
We use information to:
- create, authenticate and secure accounts;
- provide participant, shift, notes, medication, incident, expense, mileage, document and reporting functions;
- display reminders and notifications chosen by the user;
- generate user-requested reports and exports;
- provide support and respond to enquiries, privacy requests and complaints;
- maintain, diagnose and improve reliability and security;
- prevent misuse, fraud or unauthorised access; and
- meet applicable legal and regulatory obligations.
Warrie does not sell personal information or use participant information for targeted advertising.
Scribe is not active as an external AI-processing feature at Phase 1 launch. Warrie does not send notes or participant information to an external generative-AI service at launch. If this changes, we will update this policy and provide any notice or consent required before activating that processing.
5. Device permissions
Warrie may request access to camera, photos or files for user-selected uploads; location or maps for selected location or travel functions; notifications for selected reminders; and external browser, email or sharing apps when the user chooses those actions. Permissions can be managed through Android settings, although disabling one may prevent the related feature from working.
6. Service providers and disclosures
We use service providers to operate Warrie. These may include Google Firebase for authentication, database and file storage; Google Sign-In; Google mapping or location services selected by the user; Cloudflare for website delivery, security and aggregate analytics; and device services or destinations selected by the user.
We may also disclose information where required or authorised by law, to protect the safety or rights of users or others, or to investigate fraud, security incidents or misuse. We do not disclose participant records to other Warrie users. Warrie’s access controls are designed to separate each account owner’s data.
7. Storage and overseas processing
Core Warrie records are stored using Google Firebase services configured for an Australian region where available. Some authentication, security, support, network or service-provider processing may occur outside Australia, including in the United States or other countries in which our providers operate.
8. Security
We use reasonable technical and organisational safeguards appropriate to the nature of the information, including authenticated access, owner-based database and storage controls, encrypted network connections, restricted operational access and security testing.
No internet service can guarantee absolute security. Users must protect their device, login credentials and exported files, sign out of shared devices and promptly tell us about suspected unauthorised access.
9. Reports, exports and user sharing
Users may generate, download or share reports and files containing personal or sensitive information. Once information is exported from Warrie or sent to a destination chosen by the user, the user is responsible for protecting it and sharing it only with authorised recipients.
10. Retention and deletion
We retain account and app information while the account is active and only as long as reasonably necessary to provide the service, meet legal obligations, resolve disputes, maintain security and enforce agreements.
An account holder may request deletion through the in-app Settings path once available or through our Account Deletion page. A verified request will delete the Warrie account and associated user data from active systems, except information that must be retained for a legitimate legal, regulatory, security, fraud-prevention or dispute-resolution reason.
Where limited information must be retained, we will restrict its use to that purpose and delete or de-identify it when retention is no longer required. Residual copies may remain temporarily in protected backups until the normal backup cycle expires.
Deletion is permanent. Users should export records they are required to keep before requesting deletion. Warrie Digital does not decide the professional record-retention duties applying to an individual support worker or provider.
11. Access and correction
Users can view and update much of their information within Warrie. A person may request access to, or correction of, personal information we hold by emailing support@warrie.com.au. We may need to verify identity and authority before acting, particularly where a request concerns participant or health information.
If another Warrie user entered the information as part of their support-work records, we may need to refer the request to that user or work with them to protect other people’s privacy and record integrity.
12. Account deletion requests
To request deletion without access to the app, follow the instructions on the Account Deletion page or email support@warrie.com.au from the registered account email with the subject Delete my Warrie account.
Do not send a password, participant health information or identity documents unless we specifically request an appropriate verification step.
13. Privacy enquiries and complaints
Privacy Officer — Warrie Digital
Email: support@warrie.com.au
Website: warrie.com.au
Please explain the issue and provide enough information for us to investigate without unnecessarily including participant or health information. We aim to acknowledge privacy complaints promptly and respond within 30 days where practicable.
If a complaint is not resolved, an individual may be able to contact the Office of the Australian Information Commissioner at oaic.gov.au.
14. Children
Warrie accounts are intended for adult support workers and authorised organisations, not for use by children. A user may enter information about a participant under 18 only where the user has lawful authority and a genuine support-work purpose.
15. Changes to this policy
We may update this policy when Warrie’s functions, service providers or legal obligations change. We will publish the updated policy here, change the “Last updated” date and provide additional notice where a change materially affects users.