Corella app privacy policy

Who we are, and who this covers

The Corella app is made by Business Innovise Hub Pty Ltd (ABN 72 680 230 362, “BIH”, “we”), an Australian software company based in Moama, New South Wales. It is the app for the staff of care providers that run on Corella — NDIS, aged care and community support providers in Australia. This policy covers the app; this website has its own privacy policy.

The provider you work for (“your organisation”) owns the records you create in the app and decides how they are used; we run Corella for your organisation under the agreement we sign with it. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles.

Your account

Your organisation’s office makes your account with your work email, and closes it when you leave — the app has no sign-up of its own. To correct your details or close your account, ask your organisation.

What the app collects, and why

• Your details. Your name, work email and phone number, from the account your organisation made — so it can roster you and reach you.
• Your position when you clock on and clock off. One reading when you press Clock on and one when you press Clock off, and only then — never in the background. It is used in that moment for your organisation's attendance check, and only the result is kept: whether you were at the visit, and how far away in metres.
• Photos you add. To progress notes, forms, odometer readings, receipts and documents — kept with the record they belong to, with the location and device details a phone writes into them removed.
• Your voice, where your organisation uses dictation or the visit scribe. The recording is sent to be turned into text: speech is transcribed in the European Union, and your instance instructs that service to delete the recording and its copy of the text. The text becomes part of your note.
• The care records you write. Progress notes, forms, charts, medication records and incident reports about the people you support. They are your organisation's records, kept in its own Corella.
• Messages you send to your team.
• Your timesheets and expense claims, for your pay.
• Crash reports — errors only, with no name attached, so we can fix faults.
• A notification token, once you turn notifications on, so your phone can receive them.

What it is used for

Your organisation’s work, and keeping the app running and fixing its faults — nothing else. The app carries no advertising and no analytics library, it never tracks you across other companies’ apps or websites, and your information is never sold.

Where it is kept

Your organisation’s Corella runs as its own isolated instance with its own database, hosted in Sydney, Australia, and every connection to it is encrypted. Corella’s AI features — drafting and checking notes among them — are switched on by your organisation when it chooses; while they are on, the text being worked on is processed by our AI provider in the United States under commercial terms that prohibit training on customer content. Our security & data handling page sets out each of these in plain English.

Your rights, and reaching us

For what your organisation holds about you — your account, your clock times, the notes you wrote — ask your organisation first: it holds those records and decides on them. You can also reach us through our contact form (choose “Privacy or data handling”) and a person will handle it. If you’re not satisfied with the response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).