Privacy Policy

1. Who We Are

Precision Physique AI (ABN 51 404 512 277) ("we", "us", "our") is an Australian business committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect:

• Account information — name, email address, password (hashed)
• Health and fitness data — age, height, weight, body fat percentage, fitness goals, injuries, dietary preferences
• Usage data — app interactions, feature usage, workout and diet logs
• Device information — device type, operating system, app version

3. How We Use Your Information

Your information is used to: generate personalised workout and nutrition plans; provide personal training services; track your fitness progress; improve our platform (aggregated, de-identified data only); send relevant communications; and comply with legal obligations.

4. AI Processing — Anthropic (APP 8 Disclosure)

To generate your personalised plan, we transmit a de-identified subset of your data to Anthropic PBC, a company incorporated in the United States. This is required under Australian Privacy Principle 8 (APP 8 — cross-border disclosure).

What is sent to Anthropic: age, sex, height (cm), weight (kg), fitness goal, training level, activity level, dietary preference, equipment available, and injury details. Your name, email address, user ID, and all identifying fields are never transmitted.

Purpose: generation of your personalised workout and nutrition plan only.

Retention: Anthropic retains API request logs for up to 7 days, after which they are deleted. Anthropic does not use your data to train AI models without consent.

Safeguards: processing is subject to a Data Processing Agreement (DPA) and Standard Contractual Clauses (SCCs) with Anthropic, providing comparable protections to the APPs.

Automated decision-making: AI-generated plans constitute automated processing. Plans are suggestions only and do not replace professional medical or fitness advice. You may request human review of any plan by contacting us.

5. Data Storage — Supabase (Sydney, Australia)

Your personal data is stored on Supabase infrastructure hosted on AWS in the ap-southeast-2 (Sydney) region, keeping your data within Australia. Supabase provides enterprise-grade security including encryption at rest and in transit, Row Level Security (RLS), and regular security audits.

6. Sharing Your Information

We do not sell, rent, or trade your personal information. We share data only with:

• Service providers necessary to operate the platform (Supabase, Anthropic, Stripe, Sentry)
• Personal trainers you book sessions with (name and booking details only)
• Regulatory authorities when required by law

7. Your Rights (Australian Privacy Act)

Under the Privacy Act 1988 and the APPs, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Opt out of direct marketing
• Make a complaint to the Office of the Australian Information Commissioner (OAIC)

8. Health & Biometric Information

Health information is sensitive information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We collect health data only with your explicit, informed consent and use it solely to provide our services.

8.1 Wearable & Device Health Data

If you grant permission, the app reads the following data from Apple Health (iOS) or Android Health Connect on your device:

• Steps — daily step count, used to calculate your actual activity level for TDEE accuracy
• Sleep duration — last night's sleep, used to pre-fill your wellness log and inform adaptive plan adjustments
• Resting heart rate — daily average, used as a recovery signal in adaptive plans
• Body weight — most recent recorded weight, used to pre-fill your wellness log

This data is read directly from your device's local health store. It is transmitted only to our Supabase database (Sydney, Australia — ap-southeast-2) and is never sent to any overseas third party in identifiable form. A de-identified activity level derived from step data may be included in AI plan generation requests sent to Anthropic PBC (see Section 4).

8.2 Not a Medical Device

This application is general wellness and fitness software only. Health and biometric data collected from wearable devices is used solely for wellness logging and fitness plan personalisation. It is not used to diagnose, treat, monitor, or manage any medical condition. This app is not a medical device under the Therapeutic Goods Act 1989 (Cth) and is not registered with the Therapeutic Goods Administration (TGA).

8.3 Consent & Withdrawal

You will be shown an explicit consent screen before any health data is accessed from your device. You may withdraw consent at any time via in-app settings, after which wellness fields revert to manual entry and no further health data will be read. Withdrawing consent does not affect previously stored data.

8.4 Retention & Deletion

Health and biometric data stored in our systems is deleted within 30 days of account deletion. You may request deletion of specific health records at any time by contacting privacy@precisionphysique.ai.

8.5 NSW Health Records and Information Privacy Act 2002

For users in New South Wales, health information is also subject to the Health Records and Information Privacy Act 2002 (NSW) (HRIPA). You have the right to access and correct any health information we hold about you. Requests should be directed to our Privacy Officer at the contact address in Section 14.

9. Data Retention & Account Deletion

This section covers the Precision Physique app, published by Precision AI Labs Pty Ltd (ACN 699 956 842).

9.1 How to delete your account

In the app (preferred):

1. Open Precision Physique and sign in.
2. Go to the Profile tab.
3. Scroll to Danger zone and tap Delete account.
4. Read the summary of what is deleted and what is retained.
5. Type your account email to confirm, then tap Delete forever.
6. Deletion is immediate and cannot be undone. You are signed out and returned to the login screen.

If you have an active subscription purchased through the App Store or Google Play, the app will ask you to cancel it in the store first, then return to complete deletion. Subscriptions purchased on the web are cancelled automatically as part of the deletion.

By email (if you cannot access the app): send a request from the email address on your account to privacy@precisionphysique.ai with the subject Delete my account. We will verify ownership of the email address and complete the deletion within 30 days.

9.2 What is deleted

The following data is deleted immediately when you use the in-app flow, and within 30 days for email requests:

• Your profile (name, email, date of birth, height, weight, subscription tier)
• All workout logs, exercise entries, and plan history
• All diet logs and meal history
• Health-sync data imported from Apple Health or Google Health Connect (sleep, HRV, resting heart rate, steps, weight)
• AI-generated plans and adaptation history
• Coach assignment and any notes shared with a coach
• Payment references (Stripe / Apple / Google identifiers linking you to your subscription)

9.3 What is retained, and for how long

• Pseudonymised payment audit records — retained for 5 years to meet Australian Taxation Office record-keeping requirements. These records do not contain your email, name, or any health data.
• De-identified consent stamps — retained as proof that consent was granted and later revoked, as required by the Privacy Act 1988 (Cth). These cannot be linked back to you.
• Anonymised, aggregated analytics — retained indefinitely. Cannot be linked back to any individual.
• Data required by law — retained only where a specific legal obligation applies, and only for the period the law requires.

No email address, name, or health data is retained after deletion.

9.4 Deleting specific data without closing your account

You may request deletion of specific health records at any time — without closing your account — by contacting privacy@precisionphysique.ai.

10. Error Monitoring — Sentry

We use Sentry for application monitoring and error tracking. Sentry may collect device identifiers and session data to help us diagnose technical issues. This data is processed in the United States under Sentry's privacy policy. No personally identifiable information (email, name) is transmitted to Sentry.

11. Website Analytics (precisionphysique.ai)

Our marketing website uses privacy-conscious analytics to understand traffic and improve content. We do not sell analytics data to third parties.

Vercel Web Analytics — cookieless, aggregate page-view metrics hosted by Vercel Inc. (United States). No cross-site tracking cookies are set by this service.

Google Analytics 4 (optional, consent-based) — if you click Accept on our analytics banner, we load Google Analytics to measure page views, scroll depth, section engagement, and waitlist button clicks. Google may process IP address and device data in the United States under Google's terms. You may decline analytics cookies and still use the site.

Campaign attribution — standard UTM parameters in the URL (e.g. utm_source=instagram) may be stored in your browser session to attribute waitlist sign-ups to marketing campaigns. We do not send your waitlist email address to analytics providers — only aggregate conversion events.

12. Children's Privacy

Our Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification at least 14 days before changes take effect. Your continued use of the Service after notification constitutes acceptance.

14. Contact & Complaints

Privacy enquiries: privacy@precisionphysique.ai

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):
www.oaic.gov.au  ·  1300 363 992