Privacy Policy

SimplyADHD (ABN 40 658 219 311) is an Australian-operated service that provides personalised, AI-generated ADHD support resources for individuals and practitioners. In this policy "we", "us" and "our" refer to SimplyADHD.

This policy is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you have any questions about your personal information, email hello@simplyadhd.com.au.

• Account data: email address, optional full name, role (consumer or practitioner).
• Intake & participant data: for each kit you generate, the participant name, age, struggles, situation notes and preferences you enter.
• Generated content: the AI-generated PDF content and cover image associated with each kit.
• Billing data: subscription status and plan tier. Card details are handled directly by our payment processor; we never see or store them.
• Usage data: basic analytics about which pages are visited and which kits are generated.
• Contact messages: if you fill in our contact form, the name, email and message you submit.

We do not require or request "sensitive information" as defined in the Privacy Act (e.g. formal health records or diagnoses). You choose what you enter into intake fields, and we treat that content as personal information.

We collect and use personal information for the following primary purposes (APP 3 & APP 6):

• To generate the kits and resources you request.
• To deliver, support and bill the service you signed up for.
• To respond to your enquiries and support messages.

Secondary purposes are limited to aggregated, de-identified product analytics. We do not use any participant data, intake answers or generated kits to train AI models, and we do not sell your personal information.

To run the service we disclose personal information to a small number of trusted processors, some of which are located overseas:

• Supabase (database, authentication and file storage) — data hosted in supported regions, which may include the United States or European Union.
• Specialised AI inference providers (text and image generation) — United States. These providers process prompts and outputs only; we do not use participant data, intake answers or generated kits to train their or our own models.
• Stripe (payment processing) — Australia / United States.
• Resend (transactional email delivery) — United States.

By using the service you consent to this overseas disclosure. We take reasonable steps to ensure these recipients handle your information in a way consistent with the APPs, including through their contractual data-processing terms.

Personal information is encrypted in transit (HTTPS/TLS) and at rest. Database access is restricted by row-level security so users can only see their own records, and administrative access is limited to authorised personnel. Self-service account deletion is available from within the app.

You have the right to:

• Access the personal information we hold about you.
• Ask us to correct anything that is inaccurate or out of date.
• Delete your account and all associated data at any time via Account → Delete account, or by emailing us.
• Request a portable export of your data.
• Withdraw consent or object to processing where the law allows.

Email hello@simplyadhd.com.au to exercise any of these rights. We will respond within 30 days.

We keep your account and kit data for as long as your account is active. When you delete your account, your profile, clients, generated kits and stored images are removed immediately; encrypted database backups are purged within 30 days. Contact-form messages are retained for 12 months and then deleted.

We use only essential cookies required for authentication and session management. We do not use third-party advertising or cross-site tracking cookies.

SimplyADHD is not directed at children under 16. Practitioners and parents who use the tool to generate kits for under-16 participants are responsible for obtaining the appropriate parental or guardian consent before entering that participant's information.

If you believe we have breached the APPs or mishandled your personal information, please email hello@simplyadhd.com.au and we will investigate and respond within 30 days.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au/privacy/privacy-complaints.

We'll post any material changes here and notify active users by email at least 14 days before they take effect.