Last updated: Jun 2026

Privacy Policy

ICANReady is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Who we are

ICANReady ("we", "us", "our") is an independent document preparation tool designed to help NDIS participants, carers, and Support Coordinators prepare for I-CAN v6 support needs assessments. We are not affiliated with the National Disability Insurance Agency (NDIA), the National Disability Insurance Scheme (NDIS), or the Centre for Disability Studies.

2. Information we collect

We collect only the minimum information necessary to provide our service.

Waitlist sign-up

When you join our waitlist, we collect your email address, your role (e.g. participant, carer, Support Coordinator), and any optional comments you choose to share about your concerns regarding I-CAN v6. This information is stored securely in our database and used only to notify you when ICANReady launches and to understand the needs of our users.

Document preparation

When you use the document preparation tool, you will be asked to describe daily life observations and support needs across functional domains. We strongly advise you not to include your real name, NDIS number, Medicare number, date of birth, or any other direct personal identifiers in these fields. The tool is designed so that personal identifying information is entered only at the final PDF export step, directly in your browser, and is never transmitted to or stored on our servers.

De-identified functional descriptions (retained for product improvement)

After your document has been generated, we retain a de-identified version of the functional descriptions you entered, along with the AI-generated outputs, for the purpose of analysing and improving the accuracy of our AI system. Before retention, we remove any names, identifying numbers, or other direct identifiers that may have been included in the free-text fields. This retained data is not linked to your account, email address, or any other information that could identify you. It is used only for internal product improvement and is never sold, shared for marketing or advertising purposes, or used to make automated decisions about you.

If you would prefer that your functional descriptions not be retained even in de-identified form, please contact us at the email address below and we will delete the relevant records on request.

Usage data

We may also collect anonymised, aggregated usage data (such as which domains are most commonly used) to improve the product. This data cannot be used to identify individual users.

3. Sensitive information

Information about disability, health conditions, and support needs is considered sensitive information under the Australian Privacy Act 1988. We take extra care with this type of information:

  • Direct personal identifiers (name, NDIS number, Medicare number, date of birth) are never transmitted to or stored on our servers — these are only ever entered client-side, in your browser, at the final PDF export step.
  • Functional descriptions are de-identified before retention, as described in Section 2 above.
  • We do not share sensitive information with any third party for marketing or advertising purposes.
  • We do not use your information to make automated decisions that affect you.

4. How we use your information

We use the information we collect to notify waitlist members when ICANReady launches, to generate your preparation documents, to improve the product based on de-identified functional descriptions and aggregated, anonymised usage patterns, and to respond to any support queries you send us directly. We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 5.

5. Third-party services

ICANReady uses the following third-party services to operate:

  • Supabase — database storage for waitlist data, hosted in Australia where available. Supabase is SOC 2 Type II certified.
  • Vercel — website hosting and deployment. Vercel is SOC 2 Type II certified.
  • Anthropic / OpenAI API — AI processing of functional descriptions to generate document content. Only de-identified, non-identifying functional descriptions are sent to these APIs. API usage is not used to train AI models.
  • Lemon Squeezy — payment processing. ICANReady never sees or stores your full payment card details. Lemon Squeezy is PCI DSS compliant and acts as the Merchant of Record for all transactions.

6. Data retention

  • Waitlist data: Email addresses and associated data are retained until you request deletion or until one year after ICANReady's public launch, whichever comes first.
  • Direct personal identifiers (name, NDIS number, Medicare number, date of birth): never transmitted to or stored on our servers at any point.
  • Functional descriptions and AI-generated outputs: retained in de-identified form after your session ends, for the purpose of improving our AI system's accuracy. This de-identified data is retained for up to 24 months, after which it is deleted. You may request earlier deletion at any time by contacting us.
  • Generated PDF documents: made available for download immediately and are not stored on our servers after download.

7. Your rights

Under the Australian Privacy Act 1988, you have the right to access the personal information we hold about you, request correction of inaccurate information, and request deletion of your information — including de-identified functional descriptions retained under Section 2. To exercise any of these rights, please contact us at the email address below. We will respond within 30 days.

8. Cookies

ICANReady uses only essential cookies required for the website to function (such as session management). We use Google Analytics to collect anonymised, aggregated data about how visitors use our website — including pages visited, session duration, and general geographic region. This data helps us understand how to improve the service. Google Analytics does not receive any information about your disability, health, or NDIS assessment content. You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on. We do not use advertising cookies or tracking pixels beyond Google Analytics.

9. Children

ICANReady is not directed at children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly. Note that NDIS I-CAN v6 assessments are designed for participants aged 16 and over.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify waitlist members by email.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your information, please contact us at: contact@icanready.com