Tendaroo · Account & data deletion
Delete your Tendaroo account
You can request deletion of your Tendaroo account and any associated personal data at any time. This page explains how, what gets removed, and what we have to keep for NDIS and Australian financial-record compliance.
App: Tendaroo Mobile · Developer: SaaSForest Infotech Pvt Ltd
How to request deletion
-
1
Email security@tendaroo.com
Subject: "Account deletion request". Include the email address you use to sign in, your full name, and (if you remember) the organisation that gave you Tendaroo access.
-
2
We verify your identity
We reply within 2 business days from
security@tendaroo.comwith a one-time verification code. Reply with the code to confirm the request. -
3
We process the deletion within 30 days
Most requests complete inside 7 business days. You'll receive an email confirming what was deleted and what was retained (see below). The 30-day upper bound covers complex cases where we need to coordinate with the provider organisation that holds your work records.
What gets deleted
Personal information that identifies you is permanently removed from our active databases and backups (next backup rotation, max 30 days):
- Your full name
- Email address and phone number
- Password hash and authentication tokens
- Two-factor authentication secrets and backup codes
- Mobile-app session tokens and push-notification device IDs
- Profile photo and any documents you uploaded yourself (qualifications, ID scans)
- Home address, emergency contact details, and other HR profile fields
What we have to retain (and why)
Some data is kept in anonymised form after your deletion. This is required by the NDIS Quality and Safeguards Commission, the Fair Work Ombudsman, and the Australian Taxation Office. Anonymised means your identifying information is stripped — what remains is operational data that the provider organisation needs to satisfy their own audit and tax obligations.
| Data type | Retention | Why |
|---|---|---|
| Shift records you delivered | 7 years | NDIS audit + payroll requirement. Your name is replaced with "Former worker"; the shift's date, duration, and participant link stay. |
| Progress notes you wrote | 7 years | NDIS Practice Standard requirement. Your authorship attribution is replaced with "Former worker"; the note content remains for the participant's care record. |
| Reportable incident reports you filed | 7 years | NDIS Commission requirement. Reporter attribution anonymised; incident details retained. |
| Audit log of significant actions | 7 years | Hash-chained for tamper detection. Your user ID is replaced with a deletion marker; the timestamps and action types remain for compliance review. |
| Tax / payroll records (timesheets paid) | 7 years | ATO + Fair Work record-keeping requirement. The provider organisation retains these — Tendaroo holds a copy on their behalf. |
After 7 years, retained records are permanently destroyed during routine archive rotation.
If you're a tenant administrator
If you're the owner or admin of an NDIS provider that uses Tendaroo and you want to delete the entire tenant (not just your own account), please email security@tendaroo.com with subject "Tenant deletion request". We coordinate the data-export and offboarding flow separately — this typically takes 30 days from request to final destruction.
Contact
Email: security@tendaroo.com
Postal: SaaSForest Infotech Pvt Ltd · c/o security@tendaroo.com (we'll provide a postal address on request)
Response SLA: first reply within 2 business days, full deletion within 30 days.
Last updated: 17 June 2026. This page is maintained as a public reference for Google Play and Apple App Store policy compliance.