This Privacy Policy explains how Ascendium ("we", "us", "our") collects, uses, discloses, and protects personal information through Ascendium (the "Service"), in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. Information We Collect
To provide the Service, we collect:
- Account information — your name, email address, and password.
- Health and fitness information — date of birth, sex, height, weight, training/dietary preferences, and any medical condition, injury, allergy, or dietary restriction you disclose at intake. This is "sensitive information" under the Privacy Act, and we only collect it with your consent, to build and adjust your training and nutrition program safely.
- Progress data — logged workouts, weigh-ins, and any progress photos you choose to upload.
- Communications — messages between you and your coach.
- Payment information — subscription payments are processed by Stripe; we do not store your full card details ourselves.
- Device information — for push notifications, if you enable them.
2. How We Use Your Information
We use your information to:
- build and adjust your personalised training and nutrition programs;
- track your logged progress and show it back to you and your coach;
- process your subscription and communicate about your account;
- send service notifications you've opted into (e.g. check-in reminders); and
- maintain the security and proper functioning of the Service.
3. Who We Share It With
We don't sell your personal information. We share it only with the service providers that help us run Ascendium, each bound to use it only for that purpose:
- Supabase — database and file storage hosting.
- Stripe — payment processing.
- Anthropic — the AI provider used to help generate your training and nutrition program from the inputs you provide.
- Your coach — who can see your intake information, logged progress, and messages in order to coach you.
Some of these providers may store or process information on servers located outside Australia. We take reasonable steps to ensure any overseas recipient handles your information consistently with the Australian Privacy Principles.
4. Data Security & Retention
We use industry-standard measures (encrypted storage, access controls) to protect your information. We keep your information for as long as your account is active, and for a reasonable period after cancellation in case you resubscribe or as required for legal, accounting, or dispute-resolution purposes. You can request deletion of your account and data at any time — see Section 6.
5. Cookies & Similar Technology
We use essential cookies/local storage to keep you signed in and remember basic preferences. We do not use third-party advertising trackers.
6. Access, Correction & Deletion
You can view and update most of your information directly in the app (Settings). You may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and associated data, by contacting us (Section 8) or through the in-app messaging feature.
7. Children
The Service is not directed at, and we do not knowingly collect information from, anyone under 18.
8. Complaints & Contact
If you have a question or concern about how we handle your personal information, contact us through the in-app messaging feature. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of the Service after a change takes effect constitutes acceptance of the updated policy.