Privacy Policy
This policy explains how Calibr HQ Pty Ltd (“Calibr”, “we”, “us”) handles personal information when you use the Calibr website, apps and services. We are an Australian company and handle personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). Because Calibr personalises training from your health screening and fitness data, some of what we collect is sensitive (health) information, which we only handle with your express consent.
1. What we collect
- Account and identity: display name, email address, date of birth (used to enforce our 16+ age rule and minor safeguards), and authentication identifiers.
- Free-trial eligibility: a one-way SHA-256 identifier derived from a comparison form of your email address (lowercase with any
+tagremoved). We preserve the address you entered for login and delivery and do not remove dots or apply provider-specific address rules. - Health information (sensitive): your PAR-Q health-screening answers and outcomes, GP clearance evidence where you provide it, fitness baselines (for example FTP, 1RMs, 5k time), rendered workout targets and completed workout results, and — for 16–17 year olds — parent/guardian consent records.
- Payment information: subscription and transaction records. Card details are collected and held by our payment processor, Stripe — we never see your full card number.
- Content you create: messages in program chat and reports you submit.
- Technical data: device and log information needed to run and secure the service, including IP address and browser details recorded as evidence when you give consent.
2. Why we collect it (collection notice)
We collect and use your information to:
- create and administer your account and verify eligibility (age, and guardian consent for 16–17s);
- screen for training readiness and personalise your program — rendering workout targets from your baselines within our safety limits;
- process subscriptions, payments and coach payouts, enforce one free trial per canonical email address, and keep records tax law requires;
- operate program chat and moderate content for safety;
- respond to support requests and safety escalations;
- meet our legal obligations, including under privacy, consumer and tax law.
If you do not provide the information marked as required during setup, we cannot provide a personalised program. Browsing public program pages does not require an account.
3. Consent and lawful basis
We rely on your consent for collecting health information and for marketing; on the need to perform our contract with you for account, subscription and program delivery; and on legal obligations for records we must keep (such as tax records). Consents are recorded with the document version you accepted and can be withdrawn at any time in the app or by contacting us — withdrawal stops the related processing but does not affect processing that already happened.
4. Health information — your express consent
When you tick the health-data consent during setup, you expressly consent to Calibr collecting and handling the health information described in §1 for the purposes in §2 only: screening your training readiness, personalising your program, applying safety limits, and meeting our safety and legal obligations. We do not use your health information for advertising, and we never sell it.
- Health information is stored in Australia (AWS Sydney region), encrypted at rest, with access audited.
- Your coach sees the training data needed to coach you — baselines, rendered targets, results and your messages — not your raw PAR-Q answers.
- If you are 16 or 17, we also require your parent or guardian’s consent before collecting health information, and we apply stricter safety limits to your program.
- You can withdraw this consent at any time; doing so stops personalised rendering and further health-data collection, and you can then delete your account and data (§7).
5. Who we share information with
We share personal information only as needed to run Calibr:
- Your coach — training data required to deliver your program (see §4).
- Service providers: Amazon Web Services (hosting and authentication, Sydney region), Stripe (payments), and media infrastructure providers (Mux, Cloudflare) for video content. Some providers process limited data outside Australia (for example Stripe payment processing in the United States); where they do, we take reasonable steps required by APP 8 to ensure your information is handled consistently with the APPs.
- Authorities where the law requires it.
We do not sell personal information, and we do not share health information with advertisers.
6. How long we keep it
- Health screening, baselines and training history: while your account is active.
- Financial and tax records: retained for the period Australian tax law requires (up to 7 years), in anonymised form after account deletion.
- Consent and safety records: retained as evidence for the period the law allows or requires.
- Free-trial eligibility identifier: retained while Calibr operates the one-trial policy, including after account deletion, solely to prevent repeated trials. It is not used for login, email delivery or marketing.
- Deleted accounts: we disable account access and remove active product identifiers within 30 days of your deletion request. Some health, safety, consent, audit or legal records may be retained in a restricted archive where Australian law requires or permits retention (§7).
7. Access, correction, export and deletion
- You can access and correct your information in the app, or by contacting us.
- You can export your data as a portable file from your account settings.
- You can delete your account and personal data at calibrhq.com/account/delete or in the app. We disable account access and remove active product identifiers within 30 days. Some health, safety, consent, audit or legal records may be retained in a restricted archive where Australian law requires or permits retention, and the one-way free-trial eligibility identifier is retained for the narrow purpose described in §6.
8. Marketing communications
We only send marketing email if you opt in, and every message includes a working unsubscribe link, consistent with the Spam Act 2003 (Cth). Service messages (receipts, safety notices, security alerts) are sent regardless of marketing preferences. We never use your health information for marketing.
9. People aged 16–17
Calibr is available from age 16. Consistent with OAIC guidance, we treat people aged 16 and over as generally able to consent to the handling of their own personal information; because training programs involve health information and physical risk, we also require a parent or guardian to confirm their consent before a 16–17 year old can record health information or subscribe. Guardians can contact us at any time to withdraw that consent, which stops personalised rendering for the minor.
10. Security and data breaches
We protect personal information with encryption in transit and at rest, row-level access controls, multi-factor authentication for privileged access, and audit logging. If a data breach is likely to result in serious harm we will notify affected users and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme.
11. Questions and complaints
Contact us at support@calibrhq.com — we will respond to privacy complaints within 30 days. If you are not satisfied with our response you can complain to the OAIC at oaic.gov.au.
12. Changes to this policy
We update this policy as Calibr develops. Material changes are notified in the app and, where they affect a consent you gave, we ask you to re-consent. The current version and effective date appear at the top of this page.