Privacy Policy

Albet — operated by Bradycorp Pty Ltd. Last updated 16 July 2026.

Albet is an NDIS plan-management platform and participant app. We handle your information under the Australian Privacy Act 1988 (including the Australian Privacy Principles) and the NDIS Act 2013. This policy covers the Albet web platform, provider and support coordinator portals, and the Albet mobile app.

What we collect

• Participants: name, date of birth, NDIS number, contact details, representative/nominee details, NDIS plan and budget information, invoices and payment history for your plan, and documents you or your providers give us (plans, service agreements, reports).
• Providers and support coordinators: business details, ABN, contact details, bank account details (for paying invoices), invoices and remittance history.
• App and portal usage: login email, sign-in events, and device push token if you enable notifications. We do not use advertising or third-party analytics trackers.

Why we collect it

Solely to deliver NDIS plan management: processing and paying provider invoices, claiming from the National Disability Insurance Agency, tracking plan budgets, producing statements and reports, and communicating with you, your representative, your providers and (where you have one) your support coordinator. We do not sell personal information or use it for advertising.

Automated processing

We use AI systems to help read invoices and plan documents and to check invoices against NDIS pricing rules. AI processing is scoped to one participant at a time, prompts are never retained by the AI provider for training, and every automated decision that matters (like rejecting an invoice) can be reviewed by our staff. You may ask us to have a person manually review any decision.

Where it's stored

All data is stored in Australia (AWS Sydney region). Bank account details are encrypted at the field level; all traffic is encrypted in transit. Staff access requires multi-factor authentication and every change to your records is captured in a permanent audit trail.

Who we share it with

• The NDIA and its systems (via our claiming intermediary) to lodge and reconcile claims against your plan;
• Your providers — only what's needed to process their invoices for you (never your whole plan);
• Your support coordinator, where you have endorsed one, sees the budgets for the plans they support;
• Our infrastructure suppliers (AWS Australia, email delivery) under contracts consistent with the APPs;
• Nobody else, unless you ask us to or the law requires it.

How long we keep it

NDIS rules require plan-management records to be kept for 7 years. After that, records are securely deleted or de-identified.

The mobile app

• Signing in uses your email and a one-time code; your session token is stored in your device's secure storage.
• Push notifications (budget alerts, invoice approvals) are optional and can be turned off in your device settings.
• The camera/photo library is used only when you choose to upload a document or reimbursement receipt.
• The app contains no ads and no third-party tracking.

Deleting your account

You can request deletion of your Albet app account at any time from Settings → Delete account in the app. This immediately de-links the app and stops your notifications. Because NDIS rules require plan-management records (invoices, claims and payments) to be kept for 7 years, those financial records are retained for that period and then securely deleted or de-identified; everything not subject to that obligation is removed. You can also request deletion by emailing us.

Your rights

You can ask for a copy of the information we hold about you, ask us to correct it, or raise a concern about how it's been handled (Australian Privacy Principles 12 and 13). Contact us and we'll respond within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Contact

Bradycorp Pty Ltd — privacy@albet.com.au