Privacy Policy

Welcome to My Special Needs ('App,' 'we,' 'our,' or 'us'). This Privacy Policy outlines how we collect, use, store, and protect personal and professional data from therapy providers ('Therapy Providers,' 'you') who use our digital platform and related services (the 'Services').

We respect your privacy and are committed to maintaining the confidentiality and integrity of your information. Our practices comply with the Australian Privacy Principles (APPs) and the General Data Protection Regulation (GDPR).

By registering or using the App as a Therapy Provider, you agree to this Privacy Policy and our Terms and Conditions.

We collect information to enable you to provide professional services and connect safely with clients and carers.

a. Information You Provide Directly:

Registration Details: When you sign up, we collect your name, professional title, email, password, and contact information.

Professional Credentials: We may collect your qualifications, certifications, NDIS registration number, insurance details, and verification documents to confirm your eligibility as a therapy provider.

Profile Information: You may include information such as your biography, areas of expertise, location, session types (in-person or virtual), and pricing details.

Client Data: You may input or upload therapy notes, session records, progress updates, and reports for your clients. This data remains confidential and is only shared with authorized users (the client, carer, or plan manager) with appropriate consent.

Billing Details: Payment information such as Stripe account details or bank information is collected for payout and invoicing purposes.

Communications: Any email or chat correspondence with our support team is recorded to assist with service-related inquiries.

b. Information Collected Automatically:

Usage Information: Includes session logs, time spent on features, and app navigation activities.

Device Information: Includes your device model, browser type, operating system, IP address, and access time.

Location Data: With your consent, we may collect location information to display your practice area or availability to clients nearby.

We use your data responsibly to deliver, improve, and secure the Services. Key purposes include:

To Facilitate Connections: Allow clients to find and contact verified Therapy Providers.

To Manage Your Account: Enable account login, professional profile setup, and service listings.

To Support Session Management: Provide scheduling, session tracking, and progress documentation tools.

To Process Payments: Manage billing, payouts, and financial reporting through secure channels.

To Ensure Platform Integrity: Verify provider credentials, prevent fraud, and enforce compliance.

To Improve User Experience: Analyze aggregated usage data to enhance system design and feature performance.

To Communicate With You: Send policy updates, service notifications, and support responses.

We do not sell your data. We only share your information in the following limited circumstances:

Client Access: Profile details such as name, location, and specialization are made visible to potential clients who search for Therapy Providers through the platform.

Service Providers: We share limited information with third-party providers (e.g., AWS for hosting, Stripe for payment processing, and analytics partners) who perform functions on our behalf under strict confidentiality agreements.

Legal Compliance: We may disclose information to comply with legal obligations, enforce our Terms, or respond to lawful requests.

Business Transactions: If our company undergoes a merger, acquisition, or restructuring, your information may be transferred under equivalent privacy protections.

We implement advanced technical and organizational measures to safeguard your data:

Encryption: All personal and professional data is encrypted in transit and at rest using industry-standard protocols (TLS/SSL).

Access Control: Access is restricted to authorized personnel and service partners on a need-to-know basis.

Security Framework: We adhere to ISO 27001 and HIPAA-aligned standards for data protection.

Although no digital system can guarantee absolute security, we continuously monitor, test, and enhance our systems to reduce risks.

We retain your data as long as your account is active or as required by applicable law. You may request deletion of your account and data by contacting us at support@myspecialneeds.com. Some records may be retained for legal, financial, or audit purposes.

Depending on your jurisdiction, you may have the following rights:

Access: Request access to your stored personal or professional data.

Correction: Request updates or corrections to inaccurate information.

Deletion: Request deletion of your data, subject to legal requirements.

Restriction: Request limited processing of your data under specific conditions.

Data Portability: Request a copy or transfer of your data to another platform.

Withdrawal of Consent: Withdraw previously given consent for optional data uses (e.g., location services).

You can exercise these rights by contacting us at support@myspecialneeds.com.

As a Therapy Provider, you are responsible for handling client data in accordance with privacy and healthcare regulations.

You must ensure informed consent is obtained before collecting or sharing client data and comply with applicable laws, including the Australian Privacy Principles (APPs) and the GDPR.

Client-related data stored within the platform is encrypted and protected. You must not export or share such data externally without proper authorization.

Data may be stored and processed in secure servers located in Australia and other regions. We ensure that all transfers comply with international data protection laws and that equivalent security measures are applied wherever your data is processed.

If you use integrated tools such as CRMs, NDIS plan managers, or telehealth platforms, their data use is governed by their own privacy policies.

We recommend reviewing these third-party policies before connecting or authorizing integrations, as My Special Needs is not responsible for their handling of your information.

We may use anonymized and aggregated data to power AI features that assist in progress tracking, performance insights, and care optimization.

AI data is never used for automated decision-making about individual Therapy Providers and remains non-identifiable at all times.

Therapy Providers must comply with all applicable consent requirements when working with minors or clients under carer supervision.

Any personal or session data for minors must be handled with parental or guardian consent and in compliance with relevant child protection laws.

We may update this Privacy Policy periodically to reflect new regulations or platform changes.

We will post the updated policy on this page and revise the 'Effective Date' below. We encourage you to review this page regularly.