Privacy Policy

Information We Collect

We collect information you provide directly — name, email address, fitness goals, body metrics, workout data, and payment information. We also collect usage data (pages visited, features used, session duration) to improve the service.

Some of this is health information, which is “sensitive information” under the Privacy Act 1988 (Cth). That includes your date of birth, height, weight, body-fat percentage and body measurements, any allergies, dietary restrictions or medical conditions you record, progress photos, and data imported from a connected wearable (such as heart rate, sleep and recovery metrics). We collect it only with your consent, only where it is reasonably necessary to provide the coaching, nutrition and progress features you have asked for, and we handle it under the higher standard the Australian Privacy Principles set for sensitive information. You can use StrataFit without providing most of it — leaving a field blank means the related feature is less personalised, not that the service stops working.

How We Use Your Information

Your data is used to provide personalised coaching, track your progress, process payments, and improve StrataFit. We do not sell your personal information to third parties.

Data Storage

Your data is stored on servers hosted by our infrastructure providers. Our primary database is hosted in the United States (Neon, AWS-backed). Files you upload — profile photos, progress photos, creator media, and images attached to community posts — are stored separately in Cloudflare R2 object storage, not in the database. Application delivery is handled via Vercel (global CDN). We take reasonable technical and organisational measures to protect your information, including encryption in transit and at rest.

Video used for AI form analysis is not uploaded or stored at all. The analysis runs entirely in your browser on your device, and only the resulting scores and technique notes are sent to us — never the footage.

Cross-border Disclosure (Australian Privacy Principle 8)

As an Australian-based service, we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In providing the service, your personal information may be disclosed to, stored by, or processed by third-party sub-processors located outside Australia, including in the United States and the European Union.

We take reasonable steps to ensure overseas recipients handle your personal information in a manner consistent with the APPs. By using StrataFit, you consent to this cross-border disclosure.

If you have concerns about cross-border disclosure, please contact us at support@stratafit.app.

Sub-processors

We use the following third-party sub-processors to operate the service. Each processes personal data on our behalf under data processing agreements:

Data Retention

We retain personal information only for as long as necessary to provide the service and comply with legal obligations. Our standard retention schedule is:

After the applicable retention period, data is securely deleted or de-identified. You may request early deletion at any time (see Your Rights below).

Cookies & Tracking

We use cookies and similar technologies to operate and improve the service. Specifically:

• Essential cookies — required for authentication and session management (e.g. your login session). These cannot be disabled without breaking the service.
• Analytics — we may collect aggregated, anonymised usage data to understand feature adoption and performance. No third-party advertising cookies are used.

You can clear cookies via your browser settings at any time. Clearing essential cookies will sign you out of the service.

Your Rights

Under the Privacy Act 1988 and the Australian Privacy Principles you have the right to access, correct, or request deletion of your personal data. You can:

• Delete your account and all associated data from Settings → Privacy & Data → Delete Account.
• Export all your data as JSON from Settings → Privacy & Data → Export All Data.
• Contact us at support@stratafit.app for any access or correction request we cannot fulfil in-app.

We aim to respond to privacy requests within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Health & Biometric Data

StrataFit collects health and fitness information that may constitute sensitive information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This includes, but is not limited to:

• Body measurements (weight, height, body-fat percentage, and similar metrics)
• Workout and activity logs (exercise type, duration, sets, reps, and load)
• Nutrition records (meals, calories, macronutrients, and dietary preferences)
• Wearable and integration data (heart rate, step counts, sleep, and similar)
• Progress photos you upload
• Technique scores and notes from AI form analysis — the video itself is never uploaded

Purpose. We collect this data solely to provide the StrataFit service — generating personalised coaching plans, tracking your progress, and improving the accuracy of AI recommendations. We do not use sensitive health data for advertising or sell it to third parties.

Consent. By entering health or biometric data into StrataFit you consent to its collection and use for the purposes described in this policy. You may withdraw consent at any time by deleting specific data in-app or by requesting account deletion (see Your Rights above).

Storage. Health and fitness records — measurements, workout logs, nutrition records and wearable data — are stored in our database (Neon / AWS, United States). Photos you upload for progress tracking are stored in Cloudflare R2 object storage (United States / global), not in the database. Video for AI form analysis is never uploaded, so none is held in either. Both stores are encrypted in transit and at rest. Access is restricted to authorised personnel and the automated systems required to provide the service.

Export & deletion. You can export all your health data at any time from Settings → Privacy & Data → Export All Data, or delete it permanently via Settings → Privacy & Data → Delete Account. Deletion is irreversible and takes effect within 30 days.

AI & Automated Processing

StrataFit uses artificial intelligence to generate coaching plans, answer questions, and personalise your experience. When you interact with AI features — for example, asking the AI coach a question or requesting a programme — the inputs you provide (including relevant context from your logged data, such as recent workouts or stated goals) are sent to a third-party AI provider.

Provider. Our primary AI provider is Anthropic, PBC (United States). Data sent to Anthropic is processed under their Privacy Policy and API usage policies. Anthropic does not use API inputs to train their models without explicit consent.

What is shared. We minimise the data sent to AI providers. Requests include only the information needed to generate a relevant response (e.g. your question, recent workout summary, or stated fitness goals). We do not include payment details, authentication credentials, or unrelated personal information in AI requests.

No automated decisions with legal effect. AI responses are informational suggestions, not binding decisions. StrataFit does not use automated processing to make decisions that produce legal or similarly significant effects about you.

Opting out. You can use StrataFit without engaging AI coaching features. Logging workouts, tracking nutrition manually, and browsing the exercise library do not trigger AI processing. If you wish to avoid AI entirely, simply do not use the Coach or AI-generated plan features.

Children and Young People

StrataFit is not intended for anyone under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.

Between 13 and 18 the service is available, but nutrition targets are handled differently on purpose: StrataFit will not set a calorie deficit for someone under 18, and calorie targets for that age group are held at a maintenance figure rather than a weight-loss one. AI-generated nutrition and training advice is not designed for under-18s, and we recommend it is used only with the involvement of a parent, guardian or qualified health professional. Where a young person cannot understand what they are consenting to, consent should be given by a parent or guardian.

If There Is a Data Breach

We are covered by the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth). If a breach of personal information we hold is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as soon as practicable after we become aware of it, and tell you what happened, what information was involved, and what you can do in response.

Because StrataFit holds health information, we treat the threshold for “serious harm” conservatively — if we are unsure whether a breach meets it, we will assess it as though it does rather than stay silent.

Contact

Questions about this policy? Email us at support@stratafit.app.

StrataFit is a product of Northern Edge Software, which is the entity responsible for the personal information described in this policy and appears on your statement as NORTHERN EDGE SOFTWARE.