Your Body Project: Privacy Policy

1.1Your Body Project is operated by Your Body Project Pty Limited, ACN 700 886 362, ABN 11 700 886 362. Contact: privacy@yourbodyproject.app.

1.2YBP collects: your email address and sign-in details; your profile (date of birth, sex, height, body weight, goal, experience, training days, gym memberships, muscle priorities); injuries, pain, soreness and daily readiness you report; your workouts, sets, reps and loads; messages to the AI coach; feedback you send; comments you write in the documentation portal; health platform metrics you connect; push notification tokens for Android; a bot check result at sign-in; your device location when you search for a gym, gym check-ins and the coordinates of gyms you add; and technical logs.

1.3On the public website YBP also collects waitlist sign-ups (email address and IP address) and contact form messages (name, email address, message and IP address). Your IP address is stored with waitlist sign-ups and contact form messages, to limit abuse, and it appears in server logs, which are kept for up to 90 days and exclude sign-in tokens.

1.4If you do not give us information the service needs, such as your email address, we cannot create your account. If you leave optional fields out, such as your date of birth, injuries or a connected health platform, the service still works with less personalisation.

1.5We handle your information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles whether or not a small business exemption could apply to us, because we collect health information.

2.1Injuries, pain, soreness, readiness, body measurements, connected health platform metrics and the optional enhanced athlete profile setting are health information. You can decline to connect a health platform and still use the app with less personalisation.

2.2Today YBP reads steps, body weight, sleep, active energy, heart rate, resting heart rate, heart rate variability and workout sessions from Apple Health and Health Connect. When a Garmin account is linked, YBP can also read sleep score, stress score and Body Battery from Garmin. It reads nothing else. Heart rate is stored only for the time windows of logged training sessions, and the raw samples are deleted 12 months after the session. Session summaries stay.

2.3We collect health information only with your consent. Accepting the Terms is not that consent. We ask for your consent separately, at each point where we collect health information, and not as part of accepting the Terms: when you connect a health platform, when you enter injuries, when you report pain, when you do a daily check in, when you ask the AI coach, and when your phone's location is used to find a gym. Each ask says what is collected and why, and the app records your answer against the version of the wording you saw. The enhanced athlete profile setting shows its notice where you turn it on, and turning it on is your consent to its use as clause 2.6 describes.

2.4You can withdraw consent at any time without deleting your account: disconnect the platform in your device settings, turn a setting off in your profile, or stop entering the information. Information already stored stays with your account until you delete the account. If you want particular records removed sooner, email privacy@yourbodyproject.app and we will tell you what we can do.

2.5The enhanced athlete profile setting is optional and self declared: you turn it on or off yourself, and we never infer or verify it. It is health information. It is used only to adjust your programming, it is not sent to the AI coach, it is never shared with anyone, and it is deleted with your account. Turning it off in your profile stops it being used at once.

3.1YBP uses your information to build and adapt your programme, adjust training to your readiness and pain reports, run your account, provide support, and keep the service secure. Training and health data are not used for advertising or audience building.

3.2In full, the purposes are: to build and adapt your programme; to show you your own trends; to run your account and sign-in (and billing, if paid plans are introduced); to answer support requests and feedback; to send service messages, and marketing you can opt out of (section 6); and to keep the service secure and meet our legal obligations. We may analyse de-identified, aggregated training data to improve the engine; that analysis cannot identify you. We do not sell your information.

3.3You may choose to import training history from a CSV export from another training app (Strong, Hevy or FitNotes). The file is read on your own device and the file itself is not uploaded. After you confirm the exercise matches, we store only the confirmed working sets from the last 12 weeks: exercise, date, load, repetitions and an optional effort rating, with no notes or workout names. We use them to show you your own history and, only if a later feature is switched on, to set your starting loads. They never affect your streaks, compliance or programme adjustments. Imported history is deleted with your account, you can delete it at any time from the import page, and it is included in Download my data.

4.1YBP does not sell your information. It shares limited data with these providers. Hosting and database: Google Cloud (Cloud Run and Cloud SQL) (Australia (Sydney)). Email delivery: Google Workspace (SMTP) (United States and other countries where Google operates). Sign-in: Google sign-in (United States and other countries where Google operates); Apple sign-in (where offered) (United States). Push notifications: Firebase Cloud Messaging (Android only) (United States and other countries where Google operates). Bot protection: Cloudflare Turnstile (United States, on Cloudflare's global network). Advertising measurement on the public home page: Meta Pixel (public home page only) (United States). AI coach: OpenAI (API, model gpt-6-luna) (United States). Health platforms and wearables: Apple Health (HealthKit) (United States); Google Health Connect (United States and other countries where Google operates); Garmin Health API and Connect IQ (United States). Exercise demonstration media: MuscleWiki (exercise videos) (United States). Place names for gyms you add: OpenStreetMap Nominatim (reverse geocoding) (United Kingdom and the European Union (OpenStreetMap Foundation)). App distribution: Google Cloud Storage (app builds) (Australia (Sydney)). YBP is free during early access, so no payment provider receives your information. If paid plans are introduced, the payment provider is named here before you are charged.

4.2Apple, Google and the health platforms you connect also hold information about you under their own privacy policies, which govern what they do with it. We do not control that.

4.3If YBP is sold or transferred to a new operator, your information transfers with it, and this policy continues to apply until it is replaced with notice to you.

5.1Your records are stored in Australia (Sydney). The providers listed in section 4 may process information in the countries shown there, including the United States.

5.2We send information overseas only to the providers in section 4, and only what each needs. Our basis is your informed consent: by using a feature that depends on an overseas provider (signing in with Google or Apple; connecting a wearable; asking the AI coach), you consent to that provider receiving the information section 4 describes, in the country shown there. This means Australian Privacy Principle 8.1 does not apply to those disclosures, and we may not be accountable under the Privacy Act for how the overseas provider handles the information. You can avoid each transfer by not using that feature.

5.3For the AI coach, OpenAI's API terms state that data sent through its API is not used to train its models. We rely on those terms and have not verified them independently.

5.4The first time you open the AI coach, the app shows a notice and asks you to agree before anything is sent. You can switch the coach off at any time in Me, then your profile. Off stops anything being sent to the AI provider. Your earlier questions stay in your account until you delete it.

5.5Your connected health data is never sold or used for advertising. It is not sent to anyone else, except that a readiness answer derived from it, such as your sleep rating, and any joint pain you report, may be sent to the AI coach provider when you ask the coach a question.

6.1Marketing emails carry an unsubscribe link and a one click unsubscribe header, and unsubscribe requests are recorded so we do not email you again.

6.2We email you news and offers only if you tick the unticked "Send me news and offers" box when you sign up or join the waitlist, or turn it on later in Me. We record your answer, the version of the wording and the date. Every marketing email has an unsubscribe link and a one click unsubscribe header, and you can change your choice in Me at any time. Service emails, such as your sign-in link, are not marketing. We never send marketing to an address that has not said yes.

6.3We may use the home page pixel to show advertising to people who visited the public home page. It never uses your account or health data (section 7).

7.1YBP uses a sign-in session cookie. On the public home page only, a Meta advertising pixel can record the page view and waitlist or contact conversions. The home page shows a choice banner to every visitor. The pixel loads only for visitors in Australia, New Zealand and the United States, and only after you tap Accept. If we cannot tell where you are, it does not load. Nothing runs inside the signed in app or the phone apps, and Google Analytics is not used. To change your mind, clear this site's data in your browser and the banner asks again.

7.2You can also stop the pixel with a browser content blocker, and you can manage Meta ads in your Facebook or Instagram ad preferences.

7.3We do not currently respond to Do Not Track or Global Privacy Control browser signals.

8.1Account and training data are kept for the life of the account. Coach messages are kept until the account is deleted. Database backups are kept for up to 7 days and encrypted database dumps for up to 30 days. Server logs are kept for up to 90 days and exclude authentication tokens. Raw workout heart rate samples are deleted 12 months after the session they belong to; the session summary stays with your account.

8.2Contact form messages are kept for 12 months, and resolved feedback for 24 months, then deleted. Waitlist sign-ups are kept for 12 months from the day YBP launches, then deleted. These periods are provisional, and this policy changes if they do.

8.3Documentation portal comments, administrator action records and campaign email records have no automatic end date today. Section 11 says what happens to each when you delete your account. When we set a purge period for any of them we will state it here.

8.4YBP does not hold your card details; Stripe and the app stores take payment and keep their own payment records. When an account that had a paid subscription is deleted, we keep one minimal billing record for tax: the provider, the plan where one is recorded, the status and the period dates, under a one way code and with no email address, no amounts and no training data. It is deleted five years after the end of the last billing period. Your deleted account can still be matched to it while our backups (up to 30 days, section 11) or the payment provider's own records hold your account id and email.

8.5We keep that record for 5 years, as Australian tax law requires, and it is not deleted with your account until that period ends. Ask privacy@yourbodyproject.app what is kept about you.

9.1Traffic to YBP is encrypted in transit over TLS (HTTPS). Sign-in is passwordless. Because your email account controls sign-in, protect it.

9.2Your records are stored on Google Cloud in Sydney, encrypted at rest by the platform, in a database reachable only from our private network. Secrets and keys are kept in a managed secret store, not in code. Direct access to the production database is limited to the operator.

9.3Named YBP staff with administrator or coach access can view an athlete's training data to support their programme. That access is limited to named people.

9.4No system is perfectly secure. We cannot promise that your information will never be accessed without authority; section 12 says what we do if it is.

10.1You can download your data from Me, then Account, using Download my data, and change your settings in the app. To correct anything else, ask us at privacy@yourbodyproject.app.

10.2We respond to a request for access or correction within 30 days. We verify a request by checking that it comes from the email address on the account. If we refuse a request, we tell you why in writing and how to complain.

11.1Closing your account keeps your data for 30 days, so you can reopen it with everything as you left it. After 30 days your account and every record tied to it are permanently deleted from the live database. That also deletes any waitlist sign-up or contact form message sent from your email address, and the log of emails sent to it. These items are not removed with the account: Feedback you sent, and comments and replies you wrote in the documentation portal. Your email address on them is replaced by a code that is not linked back to you. The words you wrote stay, so anything in them that names you stays too, and private backup copies are also kept. There is no automatic end date today. Records of administrator actions. For example resetting your sign-in, changing your access, or removing an account. Your email address as the person acted on is replaced by the same code. If you were the administrator who took the action, your address stays on the record. The same applies to the record of changes to engine settings, if you were the administrator who made one. There is no automatic end date today. Email records. If you unsubscribed, the unsubscribe record stays, but only as a coded one-way version of your address. It stops us emailing you again and cannot be turned back into your address. Gyms you added to the shared gym list. A commercial gym you added stays for other athletes, with your link to it removed. A home gym is deleted with your account, including its coordinates. Backups. Database backups kept for disaster recovery still hold your data for up to 7 days, and encrypted database dumps for up to 30 days. Server logs. Server request logs are kept for up to 90 days, and they exclude authentication tokens. Payment records. Stripe and the app stores keep payment records under their own retention rules. For tax we keep a minimal billing record for five years from the end of your last billing period: the payment provider, the plan where one is recorded, the subscription status and the period dates. It holds no amounts, no email address, no training data and no provider customer id. It is filed under a one way code, although your deleted account can still be matched to it while our backups (up to 30 days) or the payment provider's own records hold your account id and email. The record is deleted when the five years end. Deleting your account ends a web subscription at the end of the period you have paid for; a subscription bought in the App Store or Google Play is managed there, so cancel it there as well.

11.2This list is kept in step with what the deletion code does. If the code changes, this list changes in the same release.

12.1If we become aware of a data breach that is likely to cause serious harm to you, we assess it promptly, take steps to contain it, and notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires. The notice says what happened, what information was involved, what we have done, and what you should do.

13.1YBP is for people aged 16 or older. When you accept the Terms you choose whether you are 18 or older, or 16 or 17, and a 16 or 17 year old confirms that a parent or guardian has agreed. We keep that choice and the confirmation with your Terms acceptance. The app refuses to set up an account when the date of birth you enter shows you are under 16.

13.2We do not knowingly collect information from anyone under 16. If we learn that an account belongs to a person under 16, we close it and delete its data. We will review this policy against the Children's Online Privacy Code when it takes effect.

14.1Send privacy questions and complaints to privacy@yourbodyproject.app.

14.2We acknowledge a complaint within 5 business days and aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.

15.1The training engine adapts your training automatically. It starts from your goal, experience, schedule and equipment. It then adjusts loads, sets, rest, exercise choices and which sessions go ahead, using what you tell it and what you log: your daily readiness (sleep, how you feel and soreness), how hard your sets felt (effort), any pain you report, and your recent sessions. If you connect a health platform or a wearable, that data informs the adjustment and never overrides your own answers.

15.2For example, a poor readiness answer can lower a load or drop a set, pain you report can swap or pause an exercise, and several hard sessions in a row can bring a lighter week forward. An adjustment changes a training suggestion. It does not decide anything about your access, your price or your account.

15.3The app shows the reason for an adjustment in plain words on the session, so you can see why. Where the app allows it, you can override: you can skip a session, change an exercise, change your time for the day, or do your check in again with different answers.

15.4None of these adjustments has a legal effect on you or a similarly significant effect. If you think an adjustment is wrong, email support@yourbodyproject.app and a person will look at it.

16.1YBP is offered in Australia and is not directed at people in the European Union or the United Kingdom, so this policy has no GDPR or UK GDPR section. If you use YBP from those places, the rights in sections 10, 11 and 14 apply to you all the same, and you can ask us about any right under your local law.

17.1YBP is not directed at people in the United States, so this policy has no US state privacy rights section. If you use YBP from there, sections 10, 11 and 14 still apply to you.

18.1YBP is not directed at people in Washington or Nevada, so this policy has no consumer health data notice under those states' laws. Section 2 describes how we handle health information for everyone.

19.1The privacy labels in the Apple App Store and the data safety section on Google Play are prepared from this policy. Where they use different category names, this policy is the fuller description and prevails.

20.1Location. When you search for gyms near you, your phone's location is used to find them and is not stored. If you check in at a gym, whether you tap it or the app does it for you because you are within 500 metres of it, the gym, the date and the time are stored in your check in history. When you add a gym, its coordinates are stored with the gym. For a home gym those coordinates are where you live, so they are stored with your account and deleted with it. To name the suburb of a gym you add, its coordinates are sent to OpenStreetMap (Nominatim), and the gym map loads its tiles from OpenFreeMap, which can see your IP address.

20.2Android push tokens are stored to deliver notifications and you can turn them off in device settings. Cloudflare Turnstile checks that a sign-in request is human. Android, Wear OS and Garmin builds are served from Google Cloud Storage by signed link.

20.3Nothing else is collected through location, notifications, bot protection or app distribution.