Privacy Policy
Last updated: 22 July 2026
Our commitment to privacy
Lifecare Independent Living Pty Ltd (ABN 66 659 014 016), trading as Kindred Estate Solution (“Kindred”, “we”, “us” or “our”), is committed to managing personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) (Privacy Act) and other applicable privacy laws.
This document sets out our policies for managing your personal information and is referred to as our Privacy Policy. It applies to RosterFill, our rostering and shift-filling platform. In this Privacy Policy, “you” refers to any individual about whom we collect personal information.
About RosterFill
RosterFill is a software service that helps NDIS disability and aged-care providers roster support workers, broadcast and fill shifts, track attendance and manage compliance. Our customers are the provider organisations who use RosterFill (“providers”). Providers enter and control records about their own coordinators, support workers and the participants they support.
What information we collect about you
The personal information we collect depends on how you interact with RosterFill.
- Providers, coordinators and administrators. Name, email address, phone number, role, organisation name and ABN, and billing information (payments are processed by our payment provider; we do not store full card numbers).
- Support workers. Name, contact details, employment type, home suburb and travel radius, hourly rate (where recorded), skills, availability, credentials and the compliance documents you or your provider upload (for example NDIS Worker Screening, police checks, first aid, Working With Children Checks), clock-in/out times and timesheets, incident reports you submit, messages you send within the app, and responses to forms your provider assigns.
- Participants. Records your provider enters to roster care: name, address, contact details, care type (NDIS or aged care), preferred workers and language, and related notes. These may include sensitive information (such as health-related care details), which we collect and handle only to deliver the service and with the appropriate authority of the provider.
- Technical data. Device and browser information, IP address and activity logs needed to operate, secure and support the service.
You can decline to give us personal information, but that may mean we (or your provider) cannot provide some or all of the service.
How and why we collect and use your personal information
We collect personal information that is reasonably necessary to provide RosterFill. The purposes include:
- matching support workers to shifts and sending shift offers by SMS, email and push notification;
- recording responses, attendance, timesheets and cost estimates;
- compliance safeguards, such as blocking shift offers to workers with expired credentials;
- recording and triaging incident reports, and messaging between coordinators and workers;
- billing, administering your provider’s subscription, and providing support;
- operating, securing, maintaining and improving the service.
We generally collect personal information directly from you or from your provider organisation. We do not sell personal information and we do not use it for third-party advertising.
How we interact with you via the internet, and cookies
You can visit our public website without identifying yourself. To use RosterFill itself you sign in, and the personal information you provide is handled in accordance with this Privacy Policy.
RosterFill uses strictly necessary (essential) cookies, small files stored by your browser, to keep you signed in and to keep your session secure. These essential cookies are required for the app to function and cannot be switched off within the app. We do not use advertising or third-party tracking cookies. You can control or delete cookies in your browser settings, but if you block our essential cookies you will not be able to sign in.
Our public site may contain links to third-party websites. We are not responsible for the content or privacy practices of websites linked from ours.
Dealing with us anonymously
Where it is lawful and practicable (for example, a general enquiry), you may deal with us anonymously or using a pseudonym. Because RosterFill is an authenticated service tied to a person and a role, it is generally not practicable to use the app anonymously.
How we hold and protect information
- Application data is stored in secure databases hosted in the Sydney, Australia region.
- Each organisation’s data is isolated at the database level (row-level security); within an organisation, access is role-based, so workers see only their own records and assigned work.
- Credential and other uploaded documents are held in private storage and accessed only via short-lived, signed links.
- We use network and application security measures including encryption in transit (HTTPS), authentication controls and access logging, and we take reasonable steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure.
- We take steps to destroy or de-identify information we no longer require.
Direct marketing
We may occasionally contact you about RosterFill features, service updates or related offerings. You can opt out of marketing at any time using the contact details below; we may still contact you about the ongoing operation of the service.
How we use and disclose personal information
We use and disclose personal information to provide the service and to run our business. This includes disclosure to the trusted service providers that power RosterFill, and for administration such as billing, support, quality improvement, security, and meeting legal obligations (including responding to lawful requests). Our key service providers are:
- Supabase: database and authentication (data hosted in Sydney, Australia).
- Vercel, web application hosting and content delivery.
- Railway: background processing for offers, notifications and alerts.
- Brevo: transactional email (sign-in links, invitations, incident alerts).
- Twilio, delivering shift-offer SMS to workers’ phones.
- Stripe, subscription payments (we never store full card details).
Overseas disclosure
Your application data is stored in Australia. However, some of the service providers above may process limited personal information (such as email addresses, phone numbers or technical data) on servers located outside Australia, including in the United States and the European Union. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure the recipient handles it consistently with the APPs, except where an exception under the APPs applies or you have consented.
Accessing and correcting your information
You are entitled to access the personal information we hold about you and to request correction if it is inaccurate, out of date, incomplete, irrelevant or misleading. Much of your information can be viewed and corrected directly in the app, and providers can export their data at any time. To make a request, contact our Privacy Officer using the details below. We will not charge you for making a request, though we may charge for the reasonable cost of compiling information. We may decline a request in the limited circumstances permitted by the APPs, and if so we will give you reasons.
Data breaches and complaints
We comply with the Notifiable Data Breaches scheme under the Privacy Act. If you have a question, concern or complaint about how we handle personal information, contact our Privacy Officer. We will generally respond within a week and aim to resolve complaints within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) on 1300 363 992 or at oaic.gov.au.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The current version is always available on our website, and we recommend checking it periodically.
Contact us
Kindred Estate Solution. Privacy Officer
Lifecare Independent Living Pty Ltd (ABN 66 659 014 016)
Email: info@kindredsolution.com.au