1. Who We Are
Precision Physique AI Pty Ltd ("we", "us", "our") is an Australian company committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Information We Collect
We collect:
- Account information — name, email address, password (hashed)
- Health and fitness data — age, height, weight, body fat percentage, fitness goals, injuries, dietary preferences
- Usage data — app interactions, feature usage, workout and diet logs
- Device information — device type, operating system, app version
3. How We Use Your Information
Your information is used to: generate personalised workout and nutrition plans; provide personal training services; track your fitness progress; improve our platform (aggregated, de-identified data only); send relevant communications; and comply with legal obligations.
4. AI Processing — Anthropic (APP 8 Disclosure)
To generate your personalised plan, we transmit a de-identified subset of your data to Anthropic PBC, a company incorporated in the United States. This is required under Australian Privacy Principle 8 (APP 8 — cross-border disclosure).
What is sent to Anthropic: age, sex, height (cm), weight (kg), fitness goal, training level, activity level, dietary preference, equipment available, and injury details. Your name, email address, user ID, and all identifying fields are never transmitted.
Purpose: generation of your personalised workout and nutrition plan only.
Retention: Anthropic retains API request logs for up to 7 days, after which they are deleted. Anthropic does not use your data to train AI models without consent.
Safeguards: processing is subject to a Data Processing Agreement (DPA) and Standard Contractual Clauses (SCCs) with Anthropic, providing comparable protections to the APPs.
Automated decision-making: AI-generated plans constitute automated processing. Plans are suggestions only and do not replace professional medical or fitness advice. You may request human review of any plan by contacting us.
5. Data Storage — Supabase (Sydney, Australia)
Your personal data is stored on Supabase infrastructure hosted on AWS in the ap-southeast-2 (Sydney) region, keeping your data within Australia. Supabase provides enterprise-grade security including encryption at rest and in transit, Row Level Security (RLS), and regular security audits.
6. Sharing Your Information
We do not sell, rent, or trade your personal information. We share data only with:
- Service providers necessary to operate the platform (Supabase, Anthropic, Stripe, Sentry)
- Personal trainers you book sessions with (name and booking details only)
- Regulatory authorities when required by law
7. Your Rights (Australian Privacy Act)
Under the Privacy Act 1988 and the APPs, you have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your data
- Opt out of direct marketing
- Make a complaint to the Office of the Australian Information Commissioner (OAIC)
8. Health & Biometric Information
Health information is sensitive information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We collect health data only with your explicit, informed consent and use it solely to provide our services.
8.1 Wearable & Device Health Data
If you grant permission, the app reads the following data from Apple Health (iOS) or Android Health Connect on your device:
- Steps — daily step count, used to calculate your actual activity level for TDEE accuracy
- Sleep duration — last night's sleep, used to pre-fill your wellness log and inform adaptive plan adjustments
- Resting heart rate — daily average, used as a recovery signal in adaptive plans
- Body weight — most recent recorded weight, used to pre-fill your wellness log
This data is read directly from your device's local health store. It is transmitted only to our Supabase database (Sydney, Australia — ap-southeast-2) and is never sent to any overseas third party in identifiable form. A de-identified activity level derived from step data may be included in AI plan generation requests sent to Anthropic PBC (see Section 4).
8.2 Not a Medical Device
This application is general wellness and fitness software only. Health and biometric data collected from wearable devices is used solely for wellness logging and fitness plan personalisation. It is not used to diagnose, treat, monitor, or manage any medical condition. This app is not a medical device under the Therapeutic Goods Act 1989 (Cth) and is not registered with the Therapeutic Goods Administration (TGA).
8.3 Consent & Withdrawal
You will be shown an explicit consent screen before any health data is accessed from your device. You may withdraw consent at any time via in-app settings, after which wellness fields revert to manual entry and no further health data will be read. Withdrawing consent does not affect previously stored data.
8.4 Retention & Deletion
Health and biometric data stored in our systems is deleted within 30 days of account deletion. You may request deletion of specific health records at any time by contacting privacy@precisionphysique.ai.
8.5 NSW Health Records and Information Privacy Act 2002
For users in New South Wales, health information is also subject to the Health Records and Information Privacy Act 2002 (NSW) (HRIPA). You have the right to access and correct any health information we hold about you. Requests should be directed to our Privacy Officer at the contact address in Section 13.
9. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Upon account deletion, personal data is deleted within 30 days, except where retention is required by law. Anonymised, aggregated data may be retained indefinitely.
10. Error Monitoring — Sentry
We use Sentry for application monitoring and error tracking. Sentry may collect device identifiers and session data to help us diagnose technical issues. This data is processed in the United States under Sentry's privacy policy. No personally identifiable information (email, name) is transmitted to Sentry.
11. Children's Privacy
Our Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification at least 14 days before changes take effect. Your continued use of the Service after notification constitutes acceptance.
13. Contact & Complaints
Privacy enquiries: privacy@precisionphysique.ai
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):
www.oaic.gov.au · 1300 363 992