This Privacy Policy explains how Body Recode collects, uses, and protects your information when you visit bodyrecode.au, take the Readiness Scorecard, complete The Body Decode, receive a read, or work with us in coaching. Most of what we hold about you is health information, which Australian privacy law treats as sensitive and protects more tightly than ordinary personal information. This policy is written to be read, not to be got past.
Information We Collect
A. Who you are
- Name
- Email address
- Phone number
- Age and biological sex
- Payment details, handled by our payment provider and never seen or stored by us
B. Health information
This is the heart of what we hold, and Australian privacy law treats it as sensitive information. Depending on how far you go with us, it includes:
- Your answers about sleep, stress, energy, digestion, recovery and how your body is responding
- Menstrual and hormonal status, including menopause status and any hormone therapy
- Medications and supplements you tell us you take
- Injuries, surgeries, diagnosed conditions and anything you raise as a health concern
- Body measurements, weight and progress photographs, if you provide them
- Blood test results your doctor ordered, if you choose to upload them
- The read we write about you, which is itself health information we have created and hold
We ask for your consent before collecting this, and we only ask for what your read and your program actually need. You can decline any question, and you can withdraw your consent at any time by emailing us.
C. Collected automatically
- IP address
- Device and browser details
- Pages viewed and time spent on site
- Cookies and tracking technologies
How We Use Your Information
We use your information to:
- Write your read and build your training, nutrition and daily routine
- Send you your read, your daily lessons, reminders and coaching messages
- Provide support
- Improve the method, using information that does not identify you
- Send marketing related to Body Recode
- Run advertising campaigns and retargeting
- Process payments
- Meet legal obligations
Sharing Your Information
We use a small number of trusted providers to run Body Recode. Each one only receives what it needs to do its job, and each is bound by its own confidentiality and security obligations.
A. Providers that handle your information
- Supabase, our database and secure file storage. Your records are held in Sydney, Australia.
- Anthropic, the interpretation engine that writes your read. Processed in the United States. See below.
- Vercel, website and application hosting. United States.
- Inngest, runs scheduled and background tasks such as reminders. United States.
- Resend, sends our emails. United States.
- Twilio, sends our text messages. United States.
- Stripe, processes payments. Australia and the United States. We never see or store your full card details.
- Zoom, runs coaching calls. We do not record them. United States.
- Postmark, receives email replies you send us. United States.
- Our own email and file storage (Google Workspace and Dropbox), where signed forms, medical clearances and correspondence are held. United States.
- Coaching and administrative contractors, bound by confidentiality agreements. Australia.
B. Advertising and analytics
Meta and Google receive information about website visits and purchases so we can measure and target advertising. They do NOT receive your assessment answers, your photos, your measurements, or any other health information.
C. How your health information is interpreted
Your assessment answers, and where you provide them your photos, measurements and blood results, are processed by Anthropic to produce your read. Anthropic processes this on our instructions only, and under its commercial terms it does not use it to train its models. Body Recode does not use your identifiable information to train any model.
If you came to us through a coach or a gym
Where a coach or a gym uses Body Recode with you, both they and we hold your information. They see what they need to coach you, and their own privacy obligations apply to them as well as ours to us. We never hand your information to another business to use for its own purposes.
We never sell your information.
Cookies and Tracking
We may use cookies and tracking technologies to analyse website activity, improve marketing effectiveness, measure ad performance, and personalise content. You can adjust cookie settings in your browser.
Data Security
We take reasonable steps to protect your information using secure systems, encrypted gateways, and restricted access. Information is encrypted in transit and at rest. No online transmission is completely secure.
Where your information is stored
Your information is stored in Australia, in Sydney. Some of the providers listed above operate overseas, which means limited information may be processed outside Australia in the course of delivering the service.
If something goes wrong
If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as required by the Notifiable Data Breaches scheme. Email info@bodyrecode.au to report a security concern.
How decisions about you are made
Part of what we do is automated. A computer program, using an artificial intelligence model, reads your answers and writes your read, your training program, your nutrition plan and your daily routine. We are telling you this plainly because from 10 December 2026 Australian privacy law requires it, and because you should know either way.
What the program uses
Your questionnaire answers, your check-ins, your measurements and photographs where you provide them, your medications, your menstrual and hormonal status, and your blood results where you upload them.
What it decides on its own
- Which pattern your answers point to, and what your read says
- The shape of your training program and your nutrition plan
- When an answer means we stop and ask you to see your doctor before we go further
Where a person is involved
Your read is a draft until a coach reviews it and publishes it to you. A coach can change it, hold it, or throw it out. Nothing about your safety is left to the model alone: the rules that stop a program and send you to your doctor are fixed rules, not a judgement the model makes.
If you disagree with it
Tell us. Email info@bodyrecode.au and a person will look at it. You can ask for the read to be corrected, redone, or removed.
How long we keep your information
We keep your health information while we are working with you, and then for seven years, which is the period health record law requires of health service providers in some Australian states. After that we delete it or strip it of anything that identifies you.
Photographs and blood test results are the most sensitive things we hold and the least often needed twice. You can ask us to delete either at any time, and we will, unless we are required to keep them.
If you want your information deleted sooner, email info@bodyrecode.au. We will tell you what we can delete, what we have to keep, and why.
Your Rights (Australia)
You can ask to see what we hold about you, ask us to correct it, ask us to delete it, withdraw your consent, or opt out of marketing. Email info@bodyrecode.au and we will answer within 30 days.
If you are not happy with how we handled it
Tell us first, at info@bodyrecode.au, and we will try to sort it out. If you are still not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
Children's Privacy
Body Recode is for adults. We do not knowingly accept anyone under 18, and we do not knowingly collect their information. If you believe a person under 18 has signed up, email us and we will delete what we hold.
Changes to This Policy
We may update this policy at any time. The latest version will always appear here.