Legal

CareReady Terms of Service

DRAFT — not legal advice, not yet reviewed by a lawyer.

This is the working draft we hold ourselves to today. The highlighted gaps below are the parts still to be filled in, and we'd rather show you they're missing than make something up.

Drafted 10 August 2026. Do not publish as final until a lawyer has reviewed it.

Last updated: 17 August 2026 — clause 10 rewritten to one flat plan with a one month free trial (product review meeting, 17 Aug 2026); the free tier and the Pro name are gone, and the price itself is stated once, in clause 10.

These terms are an agreement between you and AHTI Group Pty Ltd (ABN 65 702 401 634, ACN 702 401 634), the Australian company that operates CareReady — we, us and CareReady in these terms all mean that company. You is the person or business using the app — usually an independent NDIS support worker running as a sole trader, sometimes an organisation using CareReady Workforce. By creating an account or using the app, you agree to them.

Other documents that form part of this agreement:

  • Our Privacy Policy, which covers how we handle personal information. Published at /privacy.
  • Our Acceptable Use Policy, which covers what the app may and may not be used for. Published at /acceptable-use.
  • Our Free Trial Terms, if you are on the free first month. Published at /free-trial-terms.

If any of those conflict with these terms, these terms win, except where the other document says it overrides them for a particular thing.

1. What CareReady is

CareReady is software. It helps an independent NDIS support worker run their own business — clients, bookings, session notes, invoicing, compliance documents, and a view of their own money and tax position.

We are not a party to the arrangement between you and the people you support. You hold that relationship. You agree the supports, you deliver them, and you are the one the participant, their family, their plan manager and the NDIS Commission deal with. We are the tool you use to keep the record.

That distinction is not a disclaimer we are hiding behind. It decides who is responsible for what throughout these terms, so it is worth being blunt about it up front:

  • You provide the support. We provide the software.
  • Your obligations under the NDIS Code of Conduct are yours. The Code applies to every NDIS provider and worker, registered or not, and nothing about using CareReady shifts, softens or satisfies it.
  • Your service agreement with a participant is between you and them. We are not a party to it, we do not enforce it, and we do not stand behind it, even where you have used the app to write it.

2. What CareReady is not

To be clear about the limits, because some of these matter a great deal:

  • We are not a registered NDIS provider, and we are not endorsed, approved or accredited by the NDIA or the NDIS Quality and Safeguards Commission. Using CareReady does not make you registered either, and it does not make anything you do compliant on its own.
  • We do not broker, match or manage the work. CareReady Connect is a directory where a worker can publish a profile and a participant can read it. We take no commission, we are not a party to whatever you and a participant agree, and we do not handle any money between you.
  • We do not give legal, tax, accounting or NDIS-compliance advice. Nothing in the app is advice about your own situation. For that, go to a qualified professional, the NDIS Commission, or the ATO.
  • We do not check your work. The app runs automated checks on invoices before they go out, and those checks are genuinely useful, but they are not a review, an audit or a guarantee. A clean check is not a promise that a claim will be paid or that a record will satisfy an auditor.

You are responsible for meeting the obligations that apply to you. Two are worth naming because people are commonly surprised by them.

You are very likely covered by the Privacy Act 1988 yourself, whatever your turnover. The small business exemption in that Act does not apply to a business that provides a health service and holds health information — and care for a person with a disability is treated as a health service. That means the Australian Privacy Principles and the Notifiable Data Breaches scheme apply to you directly, in your own name, not just to us. We think you should know that, and we would rather tell you than let you assume otherwise. It is a general statement about how the Act is written, not advice about your situation, and you should get your own advice if it matters to you.

Record-keeping obligations vary by who you are and where you work. Registered NDIS providers have specific retention periods for incident and complaint records. State health records laws can require participant health information to be kept for years after the last service. Tax law has its own periods for business records. Our Privacy Policy sets out what we understand these to be. Working out which apply to you is your job, not ours.

You also agree that you will not use CareReady in a way that breaches any law that applies to you.

4. Your account

You need an account to use the cloud version of CareReady. You are responsible for:

  • keeping your login details secure, and not sharing them
  • the accuracy of what you enter, about yourself and about the people you support
  • everything done under your account

Tell us straight away if you think your account has been accessed without your permission. Contact details are at the end.

You must be at least 18 and able to enter a contract to hold an account.

Most of what CareReady holds is not about you. It is about the people you support, and a lot of it is sensitive information under the Privacy Act — health and disability information, and where you record it, whether someone is Aboriginal or Torres Strait Islander.

You are responsible for having the right to hold it. Before you enter a participant's sensitive information, you need their consent, or the consent of the person legally able to decide for them. Consent has to be informed, voluntary, current and specific — a participant should be able to say yes to some of it and no to the rest, particularly the optional fields.

Practically, that means:

  • Only enter what you actually need for the support you provide.
  • Do not enter information about someone you do not support. See the Acceptable Use Policy.
  • Keep a record of the consent, including where it came from a nominee or guardian rather than the participant themselves.
  • If a participant asks to see what you hold about them, or asks you to correct it, that request comes to you. You can answer it from the app.

We do not read participant records as part of running the service, and access is walled off in the database rather than by the app being careful. The Privacy Policy sets out the exceptions and the one case that is not a wall — a coordinator at an organisation you work through can see your work records, though not your participants' records.

6. If there is a data breach

This clause exists because a breach involving participant information is almost always a breach for both of us at once, and the law expects that to have been sorted out in advance rather than argued about on the day.

Under the Notifiable Data Breaches scheme, where the same incident is a notifiable breach for more than one organisation, one organisation notifying can discharge the obligation for the others. That only works if we have agreed who does what. So:

  1. Whoever finds out first tells the other, without delay. For us, that means telling every affected worker. For you, it means telling us at the contact address below.
  2. We assess the technical side. What happened, what data was involved, how it happened, and what we have done to contain it. You cannot do that part and we can.
  3. You know the people. We do not hold the relationship with your participants and in most cases we cannot contact them. You can.
  4. Where the breach sits in our systems — our infrastructure, our code, our error — we will prepare and lodge the statement to the Office of the Australian Information Commissioner, unless we agree with you that you should. We will give you the wording, so that what you tell participants matches what the regulator has been told.
  5. Where the breach sits in your account — a shared or guessed password, a lost device, information sent to the wrong person, someone else using your login — the assessment and the notification are yours. We will give you the logs and technical detail you need to do it, and we will help.
  6. Telling participants is normally yours to do, because you are the one with the direct relationship, unless we agree it is better done by us in a particular case.
  7. Neither of us waits for the other before containing the problem. Notification can be coordinated. Containment cannot.

Nothing in this clause limits either of our obligations under the Privacy Act. It sets out how we intend to meet them together.

7. NDIS pricing information

CareReady holds a copy of the NDIA's published Pricing Arrangements and Price Limits, version-stamped, and prices a support by the date it was delivered rather than the date you invoiced it.

The NDIA's own published schedule always prevails over anything shown in the app. Item codes and prices change every year and sometimes mid-year. We keep the catalogue current and we tell you on screen which version you are working from, but you are the one submitting the claim, and it is your responsibility to make sure what you submit is right.

8. Money and tax figures

CareReady adds up your own records and applies published rates to them. It shows you what you have invoiced, what has been paid, what is still out, your GST position against the registration threshold, and an estimate of tax on the figures you have entered.

That is arithmetic, not tax advice, and the line is deliberate.

  • We are not registered tax agents or BAS agents, and nothing the app does is a tax agent service.
  • We do not lodge anything, we do not deal with the ATO on your behalf, and we do not tell you what to claim, what to set aside, or what your tax position is.
  • Every rate the app uses carries the source it was read from and the date it was read, shown on the page. Where a figure is our own arithmetic rather than something the ATO has published, the app says so rather than putting a number in the regulator's mouth.
  • The figures are a starting point for you and your accountant. They are not a substitute for either, and you should not lodge off them without checking.

If a figure in the app looks wrong to you, it might be. Tell us.

9. Wages and payroll

CareReady never calculates wages. Not pay rates, not penalty rates, not allowances, not superannuation, not leave, not termination entitlements.

CareReady Workforce records the hours worked and hands them to a licensed payroll system, which does the award interpretation and the payment. Award interpretation is regulated, and it is not ours to reinvent. If you are an organisation using Workforce, paying your people correctly is yours, and the hours we record are an input to that, not the answer.

Workforce is a preview today. What it shows is not yet running on live organisation data, and it does not bill anyone. We will say so plainly rather than let a demo be mistaken for a product.

10. Subscription, billing and the free trial

The plan. One subscription — CareReady, at $49 a month, or $530 a year paid annually (about 10% off twelve months at the monthly price), billed in advance either way. There are no tiers and no separate free plan: every subscription starts with a one month free trial instead, and the Free Trial Terms set out how it works. A Registration readiness pack is planned at $299–$499 one-off, but it is a preview today and nothing bills it yet. Who bills it: Australian Health Tech Investments Pty Ltd (ACN 701 409 841), the company that operates CareReady (see clause 20; ABN to be added on issue).

Cancellation and refunds. You can cancel at any time, from inside the app or by written notice to us at the contact address in clause 20. On the monthly plan, cancelling keeps your access until the end of the month you have already paid for; we do not refund the unused part of a month. On the annual plan, cancelling keeps your access until the end of the year you have already paid for — or, if you would rather have the money back than run out the year, write to us and we will refund whichever whole months remain unused. We do not refund a part-used month either way. Nothing here limits any right or remedy you have under the Australian Consumer Law.

If your subscription lapses or a payment fails, your account moves to read-only: you can sign in, see your records and export them, but not create or change anything. Export stays available for at least 90 days from the lapse. If the account is still lapsed after that, we may close it and delete its data under our retention commitments in the Privacy Policy — but you do not have to wait for that: you can ask us to delete a lapsed account sooner, or to keep it open longer while you sort out payment, at any time by writing to us.

Price changes. If we change the price of a plan you are on, we will tell you at least 30 days before it takes effect, and you can cancel before then without paying the new price. We will not change the price of a period you have already paid for.

If you are on the free trial month, the Free Trial Terms set out what is covered, how long it runs, and what happens at the end. In short: nothing charges automatically, because we do not hold a card and billing is not switched on yet. Read them anyway.

11. Acceptable use

The Acceptable Use Policy sets out what the app may be used for, in short and in plain terms. The two rules that matter most: use it for genuine support work you actually do, and do not put other people's participants in it.

We can suspend or close an account that breaches it. How that works, and what warning you get, is in that policy.

12. Who owns what

You own what you put in. Your client records, notes, invoices, documents and business information are yours. We do not claim ownership of any of it.

You give us a limited licence to run the service for you. To host your data we have to store it, back it up, transmit it, and display it back to you. So you grant us permission to do those things, for the purpose of providing CareReady to you, and for nothing else. That licence ends when your data is deleted.

We will not use your content for anything other than running the service. We do not sell it, we do not use it for marketing, we do not share participant information with anyone for their own purposes, and we do not use it to train artificial intelligence models. If that ever changes, it would need your consent, not a quiet update to this page.

We own the software. The app, its design, its code and its documentation are ours, and using CareReady does not transfer any of it to you. The NDIS price catalogue is the NDIA's published material, not ours.

Feedback. If you tell us how to make the product better, we can use that without owing you anything for it. We would rather have the feedback than the argument.

13. Availability

We want the app up all the time, and we do not promise that it will be.

  • There is no service level agreement and no uptime guarantee. We are a small operation and we would rather say that than write a number we cannot stand behind.
  • We depend on services we do not control, including our hosting and database providers. An outage at one of them is an outage for us.
  • We may need to take the app down for maintenance or to ship a fix. We will give notice where we can, and where an outage is short or urgent we may not be able to.
  • Parts of the product are previews, and we mark them as such on screen. A preview may change or be withdrawn.
  • Your records are stored in Australia. Where they are and who can reach them is in the Privacy Policy.

Nothing here overrides the Australian Consumer Law guarantee that a service is supplied with due care and skill. We are saying the app may sometimes be unavailable, not that we are free to be careless with it.

14. Your data when you leave

You can export at any time, from Settings, in the app, without asking us, in three forms: spreadsheets (one CSV file per kind of record, zipped, which open in Excel, Numbers or Google Sheets), a complete data file (JSON), and a plain-English summary (PDF). The export covers your business profile, your clients and their contacts, services, bookings, invoices, compliance documents, agreements, session notes, messages, incidents and expenses. Some uploaded files, like photos, are referenced in the export rather than bundled into it — if you need the files themselves, ask us and we will get them to you.

Export before you go. It is the simplest way to keep your own copy, and you may have record-keeping obligations that outlast your account. From 27 August 2026, NDIS law requires records relating to a claim — your invoices and the bookings billed on them — to be kept for seven years from the date of the claim; that duty is yours whether or not you still use CareReady, so the spreadsheets and the data file are built to be kept and read without us.

What we keep after you leave. When an account is closed we retain exactly the claim-related records the law requires us to hold — invoices and the bookings on them, for seven years from the claim — and remove the rest. The Privacy Policy sets out what is kept and for how long, and we will tell you plainly if anything else has to stay. While a closed account's records are held, you can still ask us for a copy of them.

Connections to other services. If you connect CareReady to Xero, the invoices you push are copied into your own Xero organisation and stay there; they are your books, not ours. Disconnecting (from Settings, at any time) removes CareReady's access on our end, and when we close your account we do the same. The grant itself stays listed under Connected Apps inside your Xero organisation until you remove it there, and we tell you that in the app rather than leaving you to assume it is gone.

Asking to delete your account does not delete it on the spot. It files a request that a person reviews, and we aim to come back to you within 30 days. We do it that way on purpose: an accidental tap should not destroy records you are legally required to keep. If there is something we cannot delete, we will tell you plainly what and why. The full process is in the Privacy Policy.

If we close your account for a reason set out in these terms, you get a reasonable period to export first, unless the reason is one where giving you that time would put other people's data at risk.

15. Australian Consumer Law

Our services come with guarantees that cannot be excluded under the Australian Consumer Law. Nothing in these terms excludes, restricts or modifies any right or remedy you have under it, and if any part of these terms would do that, that part does not apply.

Where the law allows us to limit our liability for failing to meet a consumer guarantee, we limit it to resupplying the service or paying the cost of having it supplied again.

PLACEHOLDER — lawyer to confirm: whether the s64A limitation above is available for this service, and whether the cap in clause 16 is enforceable given the free trial makes it nil for some users

16. Liability

Subject to clause 15, and to the extent the law allows:

  • We are not liable for the decisions you make about claims, compliance, tax, pay or legal matters, whether or not you used a figure from the app in making them.
  • We are not liable for indirect or consequential loss, including lost income, lost profits, or a claim that was rejected or paid late.
  • We are not liable for loss caused by something you did — a shared password, a lost device, information entered wrongly, or a record deleted from your own account.
  • Our total liability for all claims is limited to the greater of the fees you have paid us in the twelve months before the claim, and PLACEHOLDER — Jackson and the lawyer to agree a floor figure, so that a free-trial user is not capped at nil.

You are responsible for loss we suffer because you used CareReady in breach of these terms or the Acceptable Use Policy, or in breach of a law that applies to you. That responsibility is reduced to the extent we caused or contributed to the loss ourselves.

17. Suspension and termination

You can close your account at any time, for any reason, from within the app.

We can suspend an account immediately where we reasonably believe it is putting other people's data or safety at risk, or where the law requires it. We will tell you why as soon as we can.

We can close an account where you seriously or repeatedly breach these terms or the Acceptable Use Policy, or where you do not pay for it. Except in the risk cases above, we will give you notice and a chance to put it right first.

If we stop offering CareReady, we will give you at least 90 days' notice, so you have time to export everything and move.

Clauses 12 (who owns what), 15 (Australian Consumer Law), 16 (liability) and 18 (governing law) survive the end of this agreement.

18. Changes to these terms

We may update these terms. If a change is material — anything affecting price, your rights, or how we handle your data — we will tell you before it takes effect, and give you a reasonable period to read it and to leave if you do not accept it. Continuing to use CareReady after that means you accept the updated terms.

Minor changes, like a correction or a clearer sentence, we may make without notice. We will not use that as a way to slip a material change through.

19. Governing law

These terms are governed by the law of Queensland, Australia, and both of us submit to the courts of that place. This does not take away any right you have to bring a matter in another place where the law says you can.

20. Contact us

privacy@careready.com.au and our contact form handle account, billing and legal questions as well as privacy ones, until we have grown enough to split them out — both are monitored by the founding directors. Legal entity: Australian Health Tech Investments Pty Ltd (ACN 701 409 841), the Australian company that operates CareReady (see clause 10). The company's ABN is a separate registration still to come — ABN to be added on issue. A postal address will follow shortly.

Source of record: docs/TERMS-OF-SERVICE.md in the CareReady repository. Questions about anything on this page can go through our contact form.