Privacy Policy

1. Who We Are

Precision AI Labs Pty Ltd (ACN 699 956 842 · ABN 67 699 956 842) ("we", "us", "our") is an Australian company committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect:

• Account information — name, email address, password (hashed)
• Health and fitness data — age, height, weight, body fat percentage, fitness goals, injuries, dietary preferences
• Screening answers — your answers to the in-app nutrition screening questions, used only to decide whether nutrition targets are shown to you and, where needed, to suggest you see an Accredited Practising Dietitian.
• Food searches — the food names you type when searching, kept with your account
• Wearable and device health data — steps, sleep duration and stages, resting heart rate, heart-rate samples, heart rate variability, and body weight, read from Apple Health or Android Health Connect with your consent (see Section 8.1)
• Usage data — app interactions, feature usage, workout and diet logs
• Photos — food photos and photos of nutrition information panels that you capture in the app for macro logging
• Messages — messages you send to a coach in the coach chat, and messages you send to the ARIA chatbot on our marketing site
• Device information — device type, operating system, app version

3. How We Use Your Information

Your information is used to: generate personalised workout and nutrition plans; provide personal training services; track your fitness progress; improve our platform (aggregated, de-identified data only); send relevant communications; and comply with legal obligations.

4. AI Processing — Anthropic (APP 8 Disclosure)

Some features use Anthropic PBC, a company in the United States, to process data. This is a cross-border disclosure under Australian Privacy Principle 8 (APP 8).

Because Anthropic is outside Australia, it is not bound by the Australian Privacy Principles, and if it mishandles your information you may not be able to seek redress under the Australian Privacy Act. By choosing Allow, you consent to this disclosure.

We ask first. Before anything is sent, the app shows a consent screen that names Anthropic and lists what is sent. If you choose Not now, nothing is sent, and features that don't need AI keep working (plans are built from our standard templates). You can change this any time in Profile → Data and privacy. Each change is recorded.

What is sent:

• Your profile: age, sex, height, weight, goal, training level, activity level, equipment, training days, diet preference and nutrition targets.
• Any injuries or limitations you enter.
• Summaries of your training and food logs: sets per muscle, your previous plan's structure, fatigue flags and left/right strength balance. For meal ideas only: your recent calorie and protein averages and your most-logged foods.
• Your recovery level as one word: green, amber or red.
• Food photos, nutrition-label photos and food names you choose to analyse. From app version 1.0.2 (141), photos are sent without location or camera details.

Features that use it: workout plans and Program Rebuild; meal ideas (if enabled); food photo, label and food-name lookup; left/right balance coaching; and the chat on our website (the messages you type, up to your 10 most recent per turn; no account needed).

Never sent: your name, email, contact details, user ID, payment details, heart rate, HRV, sleep, steps or water intake. If a photo or message itself shows something identifying, that content is sent as you provided it.

Photos: we don't store your photos. We keep a fingerprint of the image (SHA-256) and the nutrition result, so the same photo isn't analysed twice.

Retention at Anthropic: under Anthropic's standard commercial terms, API inputs and outputs are deleted within 30 days by default. They are kept longer only if flagged under Anthropic's Usage Policy (up to 2 years) or if agreed in writing. They are not used to train Anthropic's models by default.

Purpose: only to deliver the feature you are using.

Automated decision-making: AI-generated plans constitute automated processing. Plans are suggestions only and do not replace professional medical or fitness advice. You may request human review of any plan by contacting us.

5. Data Storage — Supabase (Sydney, Australia)

Your personal data is stored on Supabase infrastructure hosted on AWS in the ap-southeast-2 (Sydney) region, keeping your data within Australia. Supabase provides enterprise-grade security including encryption at rest and in transit, Row Level Security (RLS), and regular security audits.

6. Sharing Your Information

We do not sell, rent, or trade your personal information. We share data only with:

• Service providers necessary to operate the platform: Supabase (database, authentication and transactional email — Sydney, Australia), Vercel (marketing site and web-app hosting), Anthropic PBC (AI processing — see Section 4), Stripe (payments for web-purchased subscriptions and coach services), Apple and Google (in-app purchases on iOS and Android respectively, including subscription validation), Open Food Facts (barcode-to-product lookup), Calendly (booking coach and PT sessions), Sentry (crash and error reporting — United States, see §10), and Cloudflare (bot protection for the chatbot on our marketing site).
• Coaches you are assigned to — with your consent recorded in the consent log, coaches can view your profile, onboarding data, workout and diet plans, exercise and diet logs, coach notes, and messages you exchange with them. Coaches see wellness values (weight, steps, session feeling); raw wearable device data is not shared with coaches. Coach access applies only while consent is active, and you can withdraw it at any time from Profile → Coach.
• Regulatory authorities when required by law

7. Your Rights (Australian Privacy Act)

Under the Privacy Act 1988 and the APPs, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Opt out of direct marketing
• Make a complaint to the Office of the Australian Information Commissioner (OAIC)

8. Health & Biometric Information

Health information is sensitive information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We collect health data only with your explicit, informed consent and use it solely to provide our services.

8.1 Wearable & Device Health Data

If you grant permission, the app reads the following data from Apple Health (iOS) or Android Health Connect on your device:

• Steps — daily step count, used to calculate your actual activity level for TDEE accuracy
• Sleep duration and sleep stages (light, deep, REM) — used to pre-fill your wellness log and inform adaptive plan adjustments
• Resting heart rate and heart-rate samples — used as recovery signals in adaptive plans; heart-rate samples are also used to derive a resting-heart-rate estimate when the device provides no native value
• Heart rate variability (HRV RMSSD / SDNN) — used as a recovery signal in adaptive plans
• Body weight — most recent recorded weight, used to pre-fill your wellness log

This data is read directly from your device's local health store and transmitted to our Supabase database (Sydney, Australia — ap-southeast-2). Heart-rate, HRV and sleep data are used by our servers to adjust your training and to compute your recovery score; they are not sent to Anthropic PBC or any other overseas third party. An activity level derived from your step average is used in workout-plan generation (see Section 4).

8.2 Not a Medical Device

This application is general wellness and fitness software only. Health and biometric data collected from wearable devices is used solely for wellness logging and fitness plan personalisation. It is not used to diagnose, treat, monitor, or manage any medical condition. This app is not a medical device under the Therapeutic Goods Act 1989 (Cth) and is not registered with the Therapeutic Goods Administration (TGA).

8.3 Consent & Withdrawal

You will be shown an explicit consent screen before any health data is accessed from your device. You may withdraw consent at any time via in-app settings, after which wellness fields revert to manual entry and no further health data will be read. Withdrawing consent does not affect previously stored data.

8.4 Retention & Deletion

When you delete your account in the app, health and biometric data stored in our systems is deleted immediately; for deletion requests by email, within 30 days (see §9). You may request deletion of specific health records at any time by contacting privacy@precisionphysique.ai.

If you answer the pre-exercise screening or set injury areas, we keep a record of your answers, the advice we showed you and any clearance you or your coach record, for 7 years, to show that screening was completed. If you delete your account, this record is kept without your name or account link.

8.5 NSW Health Records and Information Privacy Act 2002

For users in New South Wales, health information is also subject to the Health Records and Information Privacy Act 2002 (NSW) (HRIPA). You have the right to access and correct any health information we hold about you. Requests should be directed to our Privacy Officer at the contact address in Section 14.

9. Data Retention & Account Deletion

This section covers the Precision Physique app, published by Precision AI Labs Pty Ltd (ACN 699 956 842).

9.1 How to delete your account

In the app (preferred):

1. Open Precision Physique and sign in.
2. Go to the Profile tab.
3. Scroll to the bottom and tap Delete account.
4. Read the summary of what is deleted and what is retained.
5. Type your account email to confirm, then tap Delete forever.
6. Deletion is immediate and cannot be undone. You are signed out and returned to the login screen.

If you have an active subscription purchased through the App Store or Google Play, the app will ask you to cancel it in the store first, then return to complete deletion. Subscriptions purchased on the web are cancelled automatically as part of the deletion.

By email (if you cannot access the app): send a request from the email address on your account to privacy@precisionphysique.ai with the subject Delete my account. We will verify ownership of the email address and complete the deletion within 30 days.

9.2 What is deleted

The following data is deleted immediately when you use the in-app flow, and within 30 days for email requests:

• Your profile (name, email, date of birth, height, weight, subscription tier)
• All workout logs, exercise entries, and plan history
• All diet logs and meal history
• Health-sync data imported from Apple Health or Google Health Connect (sleep, HRV, resting heart rate, steps, weight)
• AI-generated plans and adaptation history
• Coach assignment and any notes shared with a coach
• Payment references (Stripe / Apple / Google identifiers linking you to your subscription)

9.3 What is retained, and for how long

• Pseudonymised payment audit records — retained for 5 years to meet Australian Taxation Office record-keeping requirements. These records do not contain your email, name, or any health data.
• De-identified consent stamps — retained as proof that consent was granted and later revoked, as required by the Privacy Act 1988 (Cth). These cannot be linked back to you.
• Anonymised, aggregated analytics — retained indefinitely. Cannot be linked back to any individual.
• Data required by law — retained only where a specific legal obligation applies, and only for the period the law requires.

No email address, name, or health data is retained after deletion — except the pre-exercise screening record described in §8.4, kept for 7 years without your name or email.

9.4 Deleting specific data without closing your account

You may request deletion of specific health records at any time — without closing your account — by contacting privacy@precisionphysique.ai.

10. Error Monitoring — Sentry

We use Sentry for application monitoring and error tracking. Sentry may collect device identifiers and session data to help us diagnose technical issues. This data is processed in the United States under Sentry's privacy policy. Events carry a random internal account ID so we can group errors; no personally identifiable information (email, name) is transmitted to Sentry.

11. Website Analytics (precisionphysique.ai)

Our marketing website uses privacy-conscious analytics to understand traffic and improve content. We do not sell analytics data to third parties.

Vercel Web Analytics — cookieless, aggregate page-view metrics hosted by Vercel Inc. (United States). No cross-site tracking cookies are set by this service.

Google Analytics 4 (optional, consent-based) — if you click Accept on our analytics banner, we load Google Analytics to measure page views, scroll depth, section engagement, and waitlist button clicks. Google may process IP address and device data in the United States under Google's terms. You may decline analytics cookies and still use the site.

ARIA chatbot — if you use the chat on this website, the messages you type are sent to Anthropic PBC (United States) to generate replies, limited to your ten most recent messages per turn. We do not add your name or email address, but anything you type is sent as written, so avoid including personal or health details. See Section 4 for how Anthropic handles this data.

Campaign attribution — standard UTM parameters in the URL (e.g. utm_source=instagram) may be stored in your browser session to attribute waitlist sign-ups to marketing campaigns. We do not send your waitlist email address to analytics providers — only aggregate conversion events.

12. Children's Privacy

Our Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification at least 14 days before changes take effect. Your continued use of the Service after notification constitutes acceptance.

14. Contact & Complaints

Privacy enquiries: privacy@precisionphysique.ai

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):
www.oaic.gov.au  ·  1300 363 992