This Policy explains how Ultimate Strength and Nutrition Pty Ltd (ABN 44 688 595 673), together with its associated entities Ultimate Golf Performance Pty Ltd, Ultimate Golf Education and Mark Ashton Golf ("we", "us", "our") collects, uses, discloses and protects your personal information, consistent with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
**Your controls.** Marketing messages are off unless you opt in. We never use your identifiable health information to train AI models. Where AI-assisted analysis is used, it forms part of how we deliver coaching — see section 4.
1. Information we collect.
- Account and contact details: name, preferred name, email, phone, and date of birth.
- Health and training information: questionnaire answers, injuries/conditions you disclose, goals, workout logs, RPE, check-ins and reviews. Where features involving photographs are made available and you choose to use them, any images you upload.
- Preferences: units, date format, display settings and your marketing preference.
- Billing status: subscription/plan status via Stripe. We do not store your full card number — card data is handled by Stripe.
- Technical and security data: log-in events, IP address, device/browser information, and security events, used to keep accounts safe.
2. How we use it. To provide and personalise your coaching and programs; to produce summaries, analysis and draft content to support your coach (see section 4); process payments and manage your membership; communicate with you about your training, account and service (including transactional email such as password resets and notifications); maintain security and prevent misuse; meet legal obligations; and improve the Service.
3. Legal basis / consent. We collect sensitive information (health information) with your consent, which you provide by completing questionnaires/check-ins and accepting this Policy. Marketing is optional and requires your separate consent, which you give and may withdraw at any time in Settings. Withdrawing consent to the core collection of your health information means closing your account, as we cannot provide coaching without it.
4. Automated and AI-assisted processing.
- **What we do.** We use, or may use, automated systems including artificial intelligence services to analyse the information you provide through our questionnaires, check-ins, training logs and recorded progress. These systems support your coach by producing summaries of your information, identifying patterns and potential risks for your coach's attention, drafting or suggesting program content, drafting messages for your coach to review before sending, and proposing or making adjustments to your program between coach reviews.
- **Part of the Service.** Where AI-assisted analysis is used, it forms part of how we deliver coaching and is not a user-selectable add-on. It is part of how your information is turned into a personalised program.
- **Human oversight.** Your coach remains responsible for your program. Drafts and suggestions are provided to your coach and are not shown to you unless your coach approves them. Where automated adjustments to your program are used, they operate within limits your coach sets, are recorded, can be reversed by your coach, and are subject to your coach's review. We do not make automated decisions about you that have a significant effect without human involvement. Messages to you are never sent without your coach's approval.
- **Automatically generated content shown to you.** Some content may in future be generated automatically and shown to you without your coach reviewing it first — for example routine session guidance or progress summaries. Where that happens, it will be clearly indicated as automatically generated, your coach will review it at regular intervals, and your coach can change or remove it at any time. Programs and messages are never sent to you without your coach's approval.
- **Not medical assessment.** These systems do not diagnose, assess the severity of any condition, or replace advice from a health professional. Where our pre-exercise screening indicates you should seek professional advice, no automated processing of that submission occurs until clearance is recorded.
- **Providers and location.** This processing may be performed by a third-party provider on our behalf, or on infrastructure we operate. Any third-party provider is engaged under contract to process your information only on our instructions and not to use it for their own purposes. Where a third-party provider is used, processing may occur outside Australia (see section 7).
- **Under-18 accounts.** We do not apply AI-assisted processing to information from accounts recorded as belonging to a person under 18. There is no parent or guardian override for this.
5. Improving coaching for golfers. Golf-specific strength and conditioning data is rare, and most tools in this space are built on general fitness information. We may use de-identified information from adult athletes who have accepted this Policy and our current Terms — stripped of names, contact details and anything that could identify an individual — to understand what works, refine our coaching methods, and develop and improve the AI tools that support your coach. Because this information cannot be linked back to you, it does not identify you. We never include images, and we never include information from accounts belonging to a person under 18. This is how we make the programming sharper for golfers, including yours.
6. Disclosure. We share information with: your assigned coach (to coach you); our associated entities named above, where needed to deliver, support and administer the Service to you; service providers who process data on our behalf (e.g. Stripe for payments, our email provider for transactional email, hosting/infrastructure providers, and any AI processing provider described in section 4); and authorities where required by law. We do not sell your personal information.
7. Overseas processing. Some providers may store or process data outside Australia, including any provider used for the processing described in section 4. We take reasonable steps to ensure they protect your information consistently with this Policy and the Australian Privacy Principles.
8. Marketing — optional, off by default. We send transactional messages about your account and training regardless of your marketing preference. We will only send you promotional messages about our programs, products or services — including from our associated entities — if you opt in in Settings. You can change your marketing preference at any time in Settings. We do not use your health information to target marketing.
9. Security. Passwords are hashed; access is role-restricted so athletes see only their own data and coaches see only assigned athletes; sensitive actions are logged; and we apply security headers and account-protection measures. No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by law.
10. Retention. We keep your information while your account is active and as needed to provide the Service, resolve disputes, and meet legal, tax and accounting obligations, after which we delete or de-identify it.
11. Your rights.
- **View and edit.** You can view and update the details available to you in Settings.
- **Access.** You can download your Body & Movement information directly from the app. For a copy of other personal information we hold about you, contact us at contact@ultimatestrengthandnutrition.com.
- **Correction.** You can ask us to correct information we hold about you. Where a record forms part of an immutable history, we add a corrected successor record rather than altering the original.
- **Deletion.** To request deletion of your account and associated data, contact us at contact@ultimatestrengthandnutrition.com. We action requests within 30 days. Some records are retained where we are required to keep them, including transaction and tax records and reduced audit records. Where AI-assisted processing has occurred, any output is deleted, while a reduced record of the action — such as its purpose, timing and approval — may be retained as an audit record.
- **Marketing.** You can change your marketing preference at any time in Settings.
- **De-identified information.** Information described in section 5 cannot be linked back to you and therefore cannot be individually retrieved or removed.
12. Children. The Service is not directed at children but may be used by minors with the approval and supervision of a parent or legal guardian. Users under 18 years of age require parent or guardian consent in accordance with our Terms. Some features are not available on accounts recorded as belonging to a person under 18, including AI-assisted processing and any feature involving photograph upload. These are not made available by parent or guardian consent.
13. Changes. We may update this Policy and will re-prompt you to accept material changes.
14. Contact / complaints. To make a privacy request or complaint, contact contact@ultimatestrengthandnutrition.com. If unresolved, you may contact the Office of the Australian Information Commissioner (OAIC).