1. What Information We Collect

Account information

Name, email address, password (hashed — never stored in plain text), and your role (member or trainer).

Profile information

Optional: avatar photo, biography, location, date of birth, body measurements.

Health and fitness data

This is sensitive information under the Privacy Act. We collect: training plans and workout logs, meal plans and nutrition logs, body weight records, sleep data (duration and stages), heart rate data, progress photos, and supplement logs. This data is synced from Apple Health / HealthKit where you grant permission.

Trainer–client data

When you link with a trainer, information about that relationship (linked date, goals, session rate) is recorded. If you approve health data sharing, the specific categories you approve are disclosed to your trainer.

Technical information

IP address, browser type, operating system, pages visited, and timestamps. This is used for security monitoring and service improvement.

2. How We Use Your Information

• To provide, operate, and improve the Service
• To calculate nutritional targets and macro recommendations
• To enable trainer–client plan assignment and health data sharing (with your consent)
• To send service-related emails (account confirmations, password resets)
• To detect and prevent fraud and security breaches
• To comply with our legal obligations

We do not use your health or fitness data for advertising purposes and we do not sell your personal information to third parties.

3. Health Data — Special Protections

Health information is sensitive information under the Privacy Act. We handle it with additional protections:

• Health data is stored encrypted at rest
• Access to health data is restricted to you and trainers you have explicitly approved
• You can revoke trainer access to your health data at any time from Account Settings
• Health data is not used for any purpose other than operating the fitness tracking features you have enabled
• We retain your health data for as long as your account is active, plus 30 days after deletion

4. Disclosure to Third Parties

We disclose your information only to:

• Your trainer — only data categories you have explicitly approved
• Service providers — hosting, email delivery, and monitoring services that process data on our behalf under strict confidentiality agreements
• Law enforcement — where required by Australian law or valid court order

We do not disclose personal information to overseas recipients unless they are subject to equivalent privacy protections.

5. Your Rights Under the Australian Privacy Act

You have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your account and personal data
• Complaint — lodge a complaint with us, and if unresolved, with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au

To exercise these rights, contact us at privacy@hyperformancex.com.au. We will respond within 30 days.

6. Security

We implement appropriate technical and organisational measures to protect your personal information, including TLS encryption in transit, hashed passwords (bcrypt), encrypted health data at rest, and access controls. No system is completely secure; please use a strong, unique password and enable two-factor authentication when available.

7. Cookies

We use a single session cookie to keep you logged in. We do not use third-party tracking cookies or advertising cookies.

8. Data Retention

We retain your personal data while your account is active. On account deletion, personal data is deleted or anonymised within 30 days. Anonymised aggregate data (e.g. usage statistics with no identifying information) may be retained indefinitely.

9. Children

HyperformanceX is not directed at children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will delete it promptly.

10. Changes to This Policy

We will notify you by email at least 14 days before material changes take effect. The current version and effective date are shown at the top of this document.

11. Contact & Complaints

Privacy Officer: privacy@hyperformancex.com.au
If you are not satisfied with our response, you may contact the OAIC: www.oaic.gov.au or 1300 363 992.