Published 16 October 2026 · Version 1.0
Responsible organisation: ARC INTELLIGENCE PTY LTD, ABN 26 698 244 610, ACN 698 244 610, operator of AI Fitness, based in Western Australia, Australia. Privacy contact: support@aifitness.com.au. Effective date and version: 16 October 2026; version 1.0. Where applicable, we act as the controller of information used to operate AI Fitness.
This notice explains how we handle information through the app, websites and related support. It distinguishes private records, cloud processing and information you choose to share. It is not consent to every possible use. Please also read the notice shown when a feature requests sensitive information or permission.
1 Information we collect and generate
| Category | Examples and source | Main purpose |
|---|---|---|
| Account and contact | Email, account identifier, authentication details, display name, age or birthdate, preferences and support correspondence supplied by you or your sign-in service. | Account access, eligibility, support and account administration. |
| Health and fitness | Height, weight, measurements, goals, activity, workout summaries, nutrition logs, dietary restrictions, allergies, injuries, conditions, medication information and limitations you supply; connected readings you authorise; and related estimates. | Features you request, progress records and personalisation, subject to the required consent. |
| AI interactions | Messages, relevant profile and plan context, voice input or transcripts, images or clips submitted to AI, generated answers and requested actions. | Responding to your requests, generating plans and operating the selected AI feature. |
| Media and movement | Selected photos, recordings, progress images, pose or movement data, estimates and exported media, depending on the feature. | Movement analysis, recording, editing, progress comparison and sharing you choose. |
| Location and activity | GPS route points, time, distance, approximate location, territories and location-derived rankings where you enable relevant features. | Activity tracking, maps and the competitive or sharing functions you choose. |
| Community | Profile content, posts, comments, follows, likes, audience settings, messages, reports and moderation records. | Social features, audience delivery, community operation and safety. |
| Transactions | Purchase identifiers, subscription status, plan and billing events from the store or payment service. | Entitlements, billing support, fraud prevention and required records. |
| Technical and consent records | Device and app version, network identifiers, diagnostic events, security logs, permission choices and records of acceptance or consent. Advertising identifiers and analytics events may be involved where those services operate and permission is required. | Reliability, security, lawful analytics, consent evidence and disclosed advertising functions. |
Not every feature uses every category. Information may be supplied by you, generated during use, received from a connected service with permission or submitted by another user, for example in a message or report. Inferences about your health or behaviour can themselves be personal or sensitive information, even when uncertain or wrong. Do not upload other people’s medical information unless the feature permits it and you have the necessary authority.
2 Device storage and cloud processing
Some app records and movement processing occur on your device. Other functions need remote servers. Account services, cloud backup where enabled, community features, synchronisation and selected AI or media features may send information to contracted cloud hosting, database, storage, communications and AI-processing providers.
Cloud backup and cloud AI are separate: turning off backup does not necessarily prevent information being sent when you request a cloud AI answer or publish a post. Likewise, on-device pose tracking does not mean that every recording or AI review stays on the device. Check the relevant feature notice and contact support if you need clarification before sending information.
Use the backup and integration controls available in your app version, or contact support for help with a particular feature. Information already shared or lawfully retained may require a separate deletion request.
3 Health information and meaningful choice
Health details can be particularly sensitive. Collection and processing must have the consent or other specific legal basis required by applicable law. General contract acceptance, device permission or marketing consent does not authorise every health-data use. You may contact support before using a feature for information about its data, purpose and recipients, or to decline or withdraw consent-based processing.
You may decline optional health details or withdraw consent for future consent-based processing. A feature that genuinely requires those details may then stop working or provide less personalisation; we explain that consequence. Withdrawal does not automatically erase information that must be retained for a lawful independent reason, and it does not affect the lawfulness of earlier processing. You may separately request deletion.
4 Coach AI processing
When you request personalised coaching, the request may include your message and saved profile information, including relevant health conditions, medication information, allergies, limitations, goals, current plan and recent progress. It may also include conversation context and media you submit. An AI service provider processes the request and returns an answer or structured result. Voice features may also use speech recognition and speech generation services.
Sending information to an AI service is different from sharing it publicly. AI requests and related technical records may be processed or retained by the selected provider for delivery, security or abuse prevention. Retention and authorised human access depend on the service and contractual settings; this policy does not promise zero retention or the absence of provider access. Contact support@aifitness.com.au for the provider and handling details relevant to a feature before submitting information you do not wish to disclose.
We do not treat your acceptance of the Terms as permission to use private health information or conversations to train general-purpose AI models. Any proposed separate training or research use must be explained and have a valid legal basis, including separate consent where required. AI outputs and inferred profile information may be inaccurate; contact us to correct associated personal information.
5 Camera microphone and connected health data
We ask for device permissions needed by features you choose. Camera access may support movement tracking, scans, recording or uploads, depending on the feature. Microphone access may support voice interaction or recording. A hidden preview or a privacy display does not necessarily mean that recording has stopped; use the actual recording control.
Connected health services may provide the categories you authorise, such as steps, exercise, distance, energy estimates, heart rate, sleep or body measurements. You can review and revoke access in the relevant device or service settings. Revoking access stops future access as the integration permits; it does not by itself delete previously received records.
6 Public content and private messaging
Profile, feed, follower, forum, ranking and location-based features can have different audiences. Check the audience shown before posting. Public content may be accessible beyond your followers and may be copied, indexed or redistributed by others. Activity patterns can reveal sensitive details even when you use a display name.
Messages are delivered to intended recipients through our systems. Do not assume they are end-to-end encrypted or inaccessible to authorised support or moderation personnel unless the particular feature explicitly states and provides that protection. Reported content and relevant surrounding information may be reviewed to address safety, rights complaints or misuse.
7 Why we use information
We use information to provide the feature you request; maintain accounts and subscriptions; create and update personalised records and plans; deliver chosen community functions; respond to support; detect fraud, abuse and technical failures; protect security; and meet legal obligations. We limit each use to an appropriate purpose and data scope.
Optional analytics, advertising, marketing, research or model development require their own assessment and any necessary choice. A broad reference to improving the app does not authorise unrelated use of sensitive information. We may use properly de-identified aggregate information where re-identification is not reasonably likely in the circumstances; removing a name alone may not achieve that.
8 Providers and other recipients
Recipients may include cloud infrastructure and storage providers; authentication providers; AI and speech processors; communications, support and security providers; analytics or advertising services where disclosed and permitted; app stores and payment services; and the audience you select for social content. Providers receive only information appropriate for their role under the applicable arrangements.
We may disclose information when legally required or otherwise lawfully justified, such as responding to a valid legal process, protecting against a serious safety threat or establishing legal rights. We assess requests and do not treat any informal demand as authority. In a business sale or reorganisation, information may be transferred with appropriate safeguards and required notices; the event does not automatically permit unrelated marketing or health-data uses.
You can request the recipients and processing locations relevant to your account or a particular feature from support@aifitness.com.au. We will provide the information required by applicable law. An audience you select for a public post is separate from providers processing private records to operate the service.
9 Advertising analytics and cookies
The app includes advertising and analytics functionality. Those technologies can involve device identifiers, events, approximate location or other technical data. Websites may use cookies and comparable storage.
Where consent is required, optional tracking requires that consent and a way to withdraw it. This policy does not authorise using health information, private conversations or connected health records to target advertisements. Contact support to exercise any applicable advertising, sale or sharing opt-out rights. Device or browser settings can also restrict certain identifiers or cookies, although disabling necessary storage may affect sign-in and other requested functions.
10 Email and other marketing
Marketing emails are optional and require the separate choice described in our Terms. Email verification confirms access to an address; it does not establish marketing consent. We will keep evidence of marketing permission and withdrawal where needed to honour those choices. Acceptance of this policy does not enrol you in marketing.
Use the unsubscribe link or contact support@aifitness.com.au to opt out. We retain a limited suppression record where needed to honour your request and prevent re-enrolment. We keep essential account and security communications separate. Other channels require their own disclosure and any applicable consent.
11 Overseas processing
We operate from Australia. Cloud and AI features can involve overseas processing, including the United States. Provider locations and authorised support access can vary by feature. Contact support for the recipient and country information relevant to your use. Data location and access from another country are both relevant; we do not represent that all information remains in Australia.
We apply the safeguards required by the laws that govern the transfer, which may include provider contracts, security controls, transfer assessments and recognised transfer mechanisms. For EEA transfers, see Regional Supplements. Accepting the Terms is not a blanket waiver of overseas-transfer protections. Contact us for information about applicable safeguards, with confidential details redacted where appropriate.
12 Retention and deletion
We keep personal information only for the time justified by the purpose and applicable law. Different categories may have different periods. Account and private records are generally held while needed to provide your selected features; temporary uploads, AI provider records, diagnostics and backups require specific shorter schedules where appropriate.
| Record category | Criteria used to determine retention |
|---|---|
| Account, plans, progress and connected activity | Whether needed to provide the account or feature you use, your deletion request and any specific legal retention requirement. |
| AI requests, answers and submitted media | The requested feature, saved conversation or media history, provider processing arrangements and proportionate security or abuse-prevention needs. |
| Posts, messages and moderation records | Your sharing and deletion choices, recipient copies, and a proportionate need to investigate reports, protect users or resolve disputes. |
| Backups and operational logs | Recovery, security and investigation needs, rotation of the relevant system and applicable deletion duties. Backup copies must not be used to defeat a valid deletion request. |
| Billing, legal and consent records | The applicable statutory record requirement, evidence of consent, and the period reasonably necessary for a specific legal claim or obligation. |
| Marketing suppression | Limited information needed to continue respecting an opt-out and prevent accidental re-enrolment. |
These criteria are not permission for indefinite retention. Ask support for information about the period or deletion status applicable to your records. We will explain any lawful reason for retaining information after a request and restrict its further use.
You may request account or data deletion using the available in-app control, our deletion request page, or support@aifitness.com.au. We verify requests proportionately and respond within applicable legal time limits. We aim to respond within 30 days unless a shorter period applies. Acknowledgement is not confirmation that every system has completed deletion; we will explain any lawful exception, delay or permitted extension and provide completion information.
Limited records may remain where required by law or necessary and lawful for security, fraud prevention, disputes, consent evidence or suppression. We tell you about applicable exceptions and restrict further use. Backup handling must comply with applicable deletion obligations; a restored backup must not silently reinstate a validly deleted account. Deleting the app alone does not delete server information or cancel a subscription. Exported videos, device gallery files and copies held by other users or independent platforms may require separate action. We explain what we control and assist where legally required.
13 Security and incidents
We use reasonable technical and organisational measures appropriate to the information and risk, including access controls. No service can promise absolute security. That limitation does not remove our legal duties.
We assess suspected incidents and notify affected people and regulators where required, with information about the incident, likely consequences and available protective steps. A contractual disclaimer is not a waiver of breach notification or security obligations. Report suspected account compromise promptly to support.
14 Access correction and complaints
Depending on applicable law, you may request access, correction, deletion, restriction, portability or information about processing; object to certain processing; withdraw consent; or exercise advertising and sale-related choices. These rights may have lawful exceptions. We explain any refusal and available review or complaint options. We do not require a waiver of rights to make a request or penalise you for exercising protected rights.
Contact support@aifitness.com.au with enough information to identify your account and request. We respond within the applicable legal period and seek only proportionate verification. We may provide a secure method for sensitive information. You can complain to us and, where applicable, to the Office of the Australian Information Commissioner, your European supervisory authority or a relevant US regulator. See the Regional Supplements for additional rights.
For a privacy complaint, we acknowledge receipt, assign it to the responsible privacy contact, investigate the relevant records and give you a written outcome with reasons and any corrective action. We aim to provide that outcome within 30 days, explain any delay and comply with shorter legal deadlines. If you are dissatisfied, we explain the applicable external complaint route.
15 Automated personalisation
The Services use automated processing to generate plans, estimates, content and recommendations from your information. These outputs can influence your choices but are not clinical decisions or guarantees. You can seek correction and report problems.
16 Adults and changes to this notice
The Services are intended for people aged 18 and over. We do not knowingly invite children to submit health information. If you believe a child has provided information, contact us so we can assess the circumstances and take appropriate action. An account that was able to register does not establish that the person meets the age requirement.
We update this notice when practices or law change and provide prominent notice of material changes. New consent is requested where required before a new consent-based use begins. We do not retrospectively authorise additional processing by silently changing a page.