Privacy
Last updated 12 September 2026. Sortaroo is run by Stray Anchor Pty Ltd (Australia).
The short version
Sortaroo holds invoices from your support workers and the record of what you claimed and paid. We do not sell anything about you, we do not advertise, and there are no third-party trackers or analytics in the app. We never ask for your NDIS number.
What we store
- Your email address, which is how you sign in.
- The participant's first name, and your state, so we can work out public holidays.
- Each worker's name, and optionally their ABN, email and bank details.
- Invoices: amounts, dates, invoice numbers, and the PDF or photo itself.
- What you claimed, what the NDIS reimbursed, and what you paid each worker.
Bank details are encrypted before they are written down, with a key held separately from the database, and are only decrypted on the screen where you pay someone.
Where it lives
In Australia. The database is in Azure's Australia East region, and email is sent through Amazon Web Services in Sydney.
Who else sees it
- Anthropic — when an invoice arrives, we send that document to Anthropic's Claude to read the total and the dates. It is used to answer that one question and not to train anything. If you would rather no document left our systems, use manual entry instead and nothing is sent.
- Amazon Web Services — sends our email, so it handles your address and the contents of the messages we send you.
- Cloudflare — runs the app and receives invoice emails on your forwarding address.
- Google (Firebase) — delivers push notifications, if you turn them on. It receives the notification text, which never contains bank details.
- The worker you choose — if you send a worker their status link, that page shows them their own invoices and where each one is up to. Nothing about other workers, and nothing about your plan's balance.
We do not give your information to anyone else, including the NDIA.
Your forwarding address
Anyone who knows your @in.sortaroo.app address can send mail to it, so treat it like
a password. Mail from senders you have not approved is held aside rather than added to your ledger,
and you can change the address at any time under Account.
We don't keep the invoices
Ask your workers to CC this address as well as you, so the original invoice always lands in your own inbox — that is your record, and the NDIS expects self-managers to keep these. Sortaroo needs the file only to attach to your payment request and to pay the worker, so we delete the stored copy 90 days after an invoice is paid, and the raw email within 30 days. The ledger entry — who, how much, when, and what happened — stays.
Deleting everything
Under Account there is a Delete account button. It removes your plans, every invoice and stored document, every worker and their encrypted bank details, and your sign-in. It happens immediately and cannot be undone. Backups roll off within 14 days.
Getting in touch
Email privacy@sortaroo.app. You can ask for a copy of what we hold, ask us to correct it, or complain — to us, or to the Office of the Australian Information Commissioner.