Privacy Policy

Last updated: March 2026

1. Information We Collect

Rivea collects information necessary to facilitate NDIS referrals between support coordinators and service providers. This includes:

  • Coordinator details: name, email, phone, and organisation as provided on the referral form.
  • Participant details: first name, postcode, age group, NDIS status, service needs, and complexity flags. We do not collect full names, NDIS numbers, or other identifying participant information beyond what is necessary to match referrals.
  • Provider details: clinic name, contact information, service types, service areas, and capacity information.
  • Referral responses: provider responses including acceptance, waitlist, decline, and information requests.

2. How We Use Information

We use collected information to:

  • Match referrals with appropriate service providers
  • Generate AI-powered referral summaries to help providers assess suitability
  • Send email notifications about referral status changes
  • Track referral outcomes and provider response patterns
  • Improve matching algorithms and platform functionality

3. Information Sharing

Referral information is shared only with the service providers selected through our matching process. We do not sell, rent, or share personal information with third parties for marketing purposes.

4. Data Storage and Security

Data is stored securely using industry-standard encryption. Our infrastructure is hosted in Australia (Sydney region) to comply with Australian data residency requirements. We use Supabase for database services with row-level security policies.

5. AI Processing

Rivea uses artificial intelligence to generate referral summaries from coordinator-provided notes. AI-generated content is clearly marked and is used to assist - not replace - clinical decision-making by providers.

6. Your Rights

You have the right to:

  • Request access to your personal information
  • Request correction of inaccurate information
  • Request deletion of your information
  • Withdraw consent for data processing

To exercise these rights, contact us at hello@rivea.app.

7. Contact

For privacy-related enquiries, contact us at hello@rivea.app.