Privacy

Designed to minimise what we collect.

What we collect and why

We use questionnaire answers to identify potentially relevant programs and explain matches. If you create an account, we also keep your email/authentication identifier, profile, saved matches, application tracking and alert preferences so you can return and receive requested updates. Reports about incorrect program information are kept for review and abuse prevention.

Checking without an account

You can see results without creating an account. Non-sensitive answers and match history are stored under a random guest token, isolated from other visitors, and scheduled to expire after 30 days unless you convert the guest profile. The token is held in session storage and must be protected like a temporary password.

Information we do not require

Benefit Match does not require your bank or myGov password, tax file number, Medicare number, banking credentials, passport or driver licence identifier for discovery.

Optional sensitive support

Health, disability, caring and Indigenous-specific signals can be sensitive information. Optional sensitive-support questions are separated from ordinary discovery, use broad categories, are excluded from analytics and are not added to the stored profile. They are used transiently for the check you request.

Analytics, notifications and marketing

The current analytics boundary accepts only named product events and aggregate match counts—not profile answers, health information, exact income, free text, authentication secrets or guest tokens. Benefit alerts are controlled separately in your preferences. Marketing consent is not required to create an account and no marketing provider is currently configured.

Service providers and locations

Supabase provides database and authentication services. A production web host, email provider and any analytics/error provider will be named after final contracts and hosting locations are selected. These providers may process information outside Australia; the final disclosure and safeguards require legal review before launch.

Retention and deletion

Guest profiles are scheduled for deletion after 30 days. Account deletion removes the account profile, answers, saved matches, tracking, notifications and preferences through a privileged erasure process. Security and administrative audit records may be retained in pseudonymised form to protect the service and reconstruct important changes; the final lawful retention basis and periods require legal review.

Your choices and requests

• View and correct saved profile information.
• Disable benefit alerts independently of account use.
• Delete your profile or account.
• Choose “Prefer not to say” where offered.
• Request access, correction or make a privacy complaint through the production privacy contact.

Privacy contact: [TO BE SUPPLIED BEFORE LAUNCH]

Official sites

When you follow a government or program-authority link, that site’s privacy practices apply.