Momentum Trainingmomentumtraining.com.au

Privacy Policy

Last updated: 21 October 2026 (previously 19 October 2026 — see §13 for what changed)

See also: Terms of use · Payments & refunds · Delete your account

Momentum Training is a personal-training app where your coach builds your program and you log your training. Because we handle information about your body and your health, we take your privacy seriously. This policy explains what we collect, why, who can see it, and the choices and rights you have.

1. What we collect

We only collect what we need to deliver your coaching and to show you your own progress.

Account & identity

• Email address — used to sign you in: first with a one-time link from your coach, then, if you set one, with your email and a password (the app on an iPhone home screen needs one). The password is kept only as a salted hash — see section 6.
• Your name — as entered by your coach when they set up your profile.

Training & performance

• Your program, and the workouts you log — exercises, sets, weights, reps, effort (RIR/RPE), tempo and set types.
• Runs you log or import — distance, time, pace and interval splits.
• Cardio you log — what it was, time, distance, heart rate, calories, effort, the machine's numbers (such as level, incline or stroke rate) and your notes.
• Session feedback you send your coach — how a session felt, notes, and any set you flag.
• Personal bests, streaks and progress metrics we calculate from the above.

Body & health information

• Morning body weight, and any body measurements you record.
• Daily readiness check-ins — your sleep, soreness and stress ratings.
• Injuries or exercises to avoid, so your program can be adjusted.
• Menstrual cycle information, if you choose to use cycle tracking (see section 2 — this is opt-in and private by design).
• Data from wearables and health apps you choose to connect (see section 5).
• Pathology results, if you and your coach choose to use blood-marker tracking — see section 2, which covers how this is consented and sent.

Photos, quizzes and screening

• Progress photos you or your coach add, stored privately per client and shown only to you and your coach.
• Your answers to an in-app personality profile quiz, if you complete one — used by your coach to tailor how they coach you.
• Your answers to a pre-exercise screening / movement questionnaire (e.g. a PAR-Q-style form), used by your coach to flag anything that needs a modified program or a referral before you train.

Form-check videos

• If you send a form check, the short video you record is uploaded so your coach can review your technique. Videos are stored privately and are only accessible to you and your coach.

Food & nutrition

• Free-text food diary entries or photos you or your coach enter, and the recipes your coach builds for you.
• When you or your coach search for a packaged food, the search term and any barcode you enter is sent to Open Food Facts, an independent, crowd-sourced food database — this is a lookup, not an account, and nothing that identifies you is sent with it.
• The weather on Today uses your city, worked out from your phone’s time zone, or your own location if you choose to share it in Settings. The location is rounded to about a kilometre, kept on your phone, and sent only to fetch the forecast: our server asks MET Norway for it, so MET never sees who you are.

Board (optional)

• Your username, any Board photo, the posts, comments, kudos, hellos and cheers you give, any reports or blocks you make, your challenge sign-ups and team, the events you say you’re going to, and your coach’s marks that you came. See section 4A.

Technical information

• Basic technical data needed to run a website securely (such as your IP address and browser type), handled by our hosting providers.
• Information saved on your own device to let you log workouts offline and stay signed in (see section 10).
• When you last had the app open, which your coach sees on their list of clients (for example “Seen 2h ago”). Only the latest time is kept.

We do not use third-party advertising, and we do not run marketing or behavioural tracking analytics in the app.

2. Health & sensitive information

Under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs), information about your health, body and menstrual cycle is “sensitive information” and gets extra protection. We collect it only with your consent, and use it only to deliver your training and show you your own data.

Consent for a sensitive category is recorded — who gave it, when, and under what wording — before that category is used, not assumed from you simply using the app:

Where a category doesn't yet have its own recorded consent event, it is still covered by the coaching agreement you sign and by this policy — we are moving each of these to an explicit, logged consent screen, in the order listed, and will update this table as each one lands.

3. How we use your information

• To deliver the coaching service — so your coach can build your program, see the training you log, and give you feedback.
• To show you your own progress — trends, personal bests, recovery and readiness.
• To pre-fill your daily check-in from any wearable you connect, so you confirm rather than re-type.
• To provide optional cycle-aware training guidance, if you opt in.
• To send you notifications you have chosen to receive (see section 11).
• To keep the service secure, working and backed up.

We do not sell your personal information, and we do not use it for advertising.

4. Who we share it with

Your information is only shared where it’s needed to run the service:

Your coach

The purpose of the app is that your coach (Momentum Training) can see the training and health information you log, so they can coach you — with the exception of the cycle-tracking dates described in section 2.

Trainers your coach works with

Your coach may have a trainer take some of your sessions. A trainer your coach has added to you sees your program, the weights and reps you lifted, any injuries and pain you have told your coach about, and your goals, and logs the sessions they take with you. They don’t see your food, body measurements, photos, messages with your coach, check-ins or contact details. Your coach can remove a trainer at any time, and you can see who trains you in the app.

Other members of your board

Only if you join Board. See section 4A.

Service providers who help us run the app

These providers process data on our behalf, under contract, only to provide their service to us:

Because some providers are overseas, connecting to the app or receiving a notification may involve your information being handled outside Australia. We take reasonable steps to use reputable providers that protect your information.

Health apps you connect

If you choose to connect a service like Strava, Withings or WHOOP, data flows between that service and your Momentum Training account as described in section 5.

Legal reasons

We may disclose information if required by law, or to protect someone’s safety or our legal rights.

4A. Board: your coach’s client community

Board is an optional feed with challenges, shared with the other clients of your coach who have joined. It is off unless your coach turns it on, and you are only on it if you join.

Adults only. You must be 18 or over to join. If we don’t have your date of birth, we ask for it when you join and save it to your profile. Our database checks this, not just the app, so a client under 18 never sees Board.

What joining shares. Your username, and a profile photo if you add one, with the other members of your board and your coach, along with the day you joined. Nothing else about you is shared until you post something or join a challenge. Your name, email and training records stay private: members can’t read them.

What you choose to share

• Posts. When you share a session, run, personal best, badge, milestone or photo, the post keeps a copy of what you chose to show, such as the session’s name, length and number of sets. Weights stay off your posts unless you turn on Show my weights; turning it off takes them off your past posts too.
• Photos. A photo is shrunk on your phone before it uploads, which removes the location and other details a camera stores inside the file.
• This week’s challenges. If you sign up, the board sees your target and one number for the week (kilometres run, steps or sessions) and whether you’ve reached it. Nobody is ranked.
• Steps teams. If you’re in the steps challenge, you’re also on a team, Blue or Orange, for the month. The board sees which team you’re on; your week’s steps count toward its points. A teammate can cheer you on once a day; the cheer tells you who it was and how many steps you have to go, and only the two of you and your coach see it.
• Your coach’s challenges. Your coach can set a challenge over their own dates, such as a month of running. If you join one at a level, the board sees your level, your total over its dates and whether you’ve reached it. Only people who join are on it.
• Events. Your coach can put on a run or a group session. If you tap I’m in, the board sees that you’re going.
• Kudos, comments and hellos. Kudos and comments are seen by the board. In your first two weeks, members and your coach can say hi to you; the board sees who said hi.

What the app works out for you. Board offers you a milestone to share, such as your 25th session or your first 10 km run, from your own records. Nobody else sees it unless you post it.

Who came. After an event, your coach can mark that you came. Only you and your coach see it. A group session you came to counts as a session in your challenges.

Your coach and moderation. Your coach can see everything on your board, including posts that were reported or removed and who reported them, and can remove any post, comment or member. Momentum Fitness, which runs the app, can see every board.

Reporting and blocking. You can report any post or comment. Your coach sees the report; the person you reported isn’t told, and you stop seeing what you reported straight away. Anything two people report is hidden from the board until your coach decides. You can block a member: you stop seeing each other, including on event lists, hellos and challenge boards, and they aren’t told.

Keeping and deleting. You can delete your own posts at any time. If you leave Board, your posts, comments, kudos, hellos and cheers are deleted with you, and so are your challenge sign-ups, your team, your event replies and your coach’s marks that you came. Posts and comments your coach removes are kept for 30 days, so a report has a record, then deleted, photos included. Cheers are deleted after 14 days. Deleting your account removes everything you shared on Board.

Inviting a friend. A member can share a link that lets a friend who isn’t on the app ask to join. The friend leaves a first name and an email; your coach sees them and who sent the link, and uses them only to invite the friend, who gets an email only if your coach does. They are deleted after 60 days. When you challenge another member to a weekly challenge, they see your username in a notification; challenges are deleted after 14 days.

Where it’s kept. In Australia, in Supabase’s Sydney region, like the rest of your data. Board photos are in private storage and shown only through short-lived links.

Notifications. If you have notifications on, Board can send you kudos and comments on your posts and hellos when you’ve joined (grouped, a few a day at most), challenge news (Monday morning if you’ve signed up, when you hit your target, cheers from your team, and when you finish your coach’s challenge), your coach’s posts, and reminders and changes for events you’re in. Each of the four has its own switch in Settings.

5. Connected apps & wearables

Connecting a health app is optional and always your choice. When you connect one, you authorise it through that provider’s own secure sign-in, and we only receive the specific data below. You can disconnect at any time from Settings in the app, which stops any further syncing.

Each of these services has its own privacy policy that governs how they handle your data on their side: Strava, Withings, WHOOP. We only use the data they share to provide your coaching and show you your own information — we don’t use it for any other purpose. Strava data is displayed only to you and your coach.

The access keys that let us sync are stored securely on our server and are never shown to you, your coach, or anyone else.

6. Where it’s stored & how we protect it

• Your data is stored in Australia, in Supabase’s Sydney data region. A nightly backup copy of the files you or your coach upload is kept by Cloudflare in its Oceania region.
• It is encrypted in transit (HTTPS) and at rest.
• Access is isolated per person — each client can only ever see their own data, and each coach can only see their own clients, enforced at the database level.
• You first sign in with a one-time link from your coach. The app on an iPhone home screen then signs in with a password you set (you can set one in Settings to sign in on any device); it is stored only as a salted hash by our sign-in provider, never as text, and neither we nor your coach can see it.
• Form-check videos are kept in a private store and served only through short-lived, expiring links.

No system can be guaranteed 100% secure, but we take reasonable steps to protect your information and to keep those steps up to date.

7. How long we keep it

We keep your information while your coaching relationship is active, so your history and progress stay available to you. If you stop training with us, or ask us to delete your data, we will delete or de-identify it within a reasonable period, except where we’re required to keep some records by law. Your coach can also remove your profile, which deletes your associated training data. Leaving Board deletes what you shared there. Board posts and comments your coach removes are deleted after 30 days, and cheers after 14. When a log you keep (a workout, food, a weigh-in or a check-in) is changed or deleted, we keep the earlier version for 90 days so a mistake can be put right; nobody else can see it, and it is deleted with your account.

8. Your rights & choices

Under the Australian Privacy Principles you can:

• Access your data — you can export your logged training, runs and weigh-ins to a file yourself from Settings, or ask us for a copy. Export everything about me includes what you shared on Board.
• Correct it — ask us to fix anything inaccurate.
• Withdraw consent — disconnect any wearable, turn off cycle sharing, or turn off notifications, at any time in Settings, and leave Board at any time from your Board profile.
• Delete your data — ask us, or your coach, to delete your account and information (how to delete your account). We keep nothing back except what the law requires us to retain (see section 7), and deleting your account also removes your photos, videos and pathology files from storage, not just the database rows that point to them.
• Complain — if you’re unhappy with how we’ve handled your information (see section 14).

To exercise any of these, contact us using the details in section 14. We’ll respond within a reasonable time and won’t charge you for a simple request.

9. Under-18 clients

We coach some clients who are under 18. Where a client is a minor:

• A parent or guardian provides consent for the young person to use the app and for us to collect their information.
• A parent or guardian can access, correct or delete their child’s information, and can exercise the choices in section 8 on their behalf.
• We take extra care with sensitive information belonging to young athletes and collect only what is needed for their training.

Where a client is under 18, their coach records the parent or guardian's name, contact details and consent against the client's profile before coaching continues.

Board (section 4A) is not available to anyone under 18.

If you believe a minor has provided us information without appropriate consent, please contact us and we will address it.

10. Local storage & cookies

The app saves some information in your browser or on your device — for example, to keep you signed in and to let you log a workout even when you have no signal (your entries are saved on the device and synced when you’re back online). This storage is used to make the app work, not to track you or for advertising. Clearing your browser data will remove it.

11. Notifications

Notifications are off by default. If you turn them on, you choose which types you receive (for example, workout reminders or messages from your coach), and you can change or switch them off at any time in Settings or in your device settings. Board’s four types (kudos, comments and hellos; challenges; coach posts; events) have their own switches.

12. If something goes wrong

If we become aware of a data breach that is likely to result in serious harm to you — for example, unauthorised access to health information — we will notify affected clients and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme in the Privacy Act, without unreasonable delay once we have completed a reasonable assessment. That notice will say what happened, what information was involved, and what we recommend you do.

13. Changes to this policy

We may update this policy from time to time — for example, if we add a new feature or integration. The “last updated” date at the top shows when it last changed, and we’ll take reasonable steps to let you know about significant changes. The 21 October 2026 update lists the cardio you log in section 1, says, in section 7, that the earlier version of a changed or deleted log is kept for 90 days, and adds three providers to section 4 that the app already used: Stripe, which takes payment for a training agreement; Google, for signing in with Google and, if your coach connects it, the calendar that keeps your sessions; and YouTube and Vimeo, which play the exercise videos. The 19 October 2026 update adds trainers your coach works with, in section 4, says your coach sees when you last had the app open (section 1), and adds challenging a member and inviting a friend to Board (section 4A). The 14 October 2026 update adds Board, section 4A, an optional community your coach can turn on, and the lines about it in sections 1, 2, 4, 7, 8, 9 and 11. The 6 October 2026 update says the developers’ AI tools may read a new client’s own activity, without changing it, in their first 30 days in the app, to find anything that went wrong for them; before, they read only totals (section 4). The 3 October 2026 update adds Cloudflare, which keeps a nightly backup copy of the files stored in the app, as a processor, and says so in section 6. The 1 October 2026 update lists every place AI (Anthropic) is used and what each sends, says the weekly coach email’s AI summary no longer receives names, says the developers’ AI tools read only totals that identify no one, and corrects the sign-in line in section 1 and the section numbers. The 30 September 2026 update says sign-in can use a password you set, which the app on an iPhone home screen needs (section 6 said sign-in was passwordless only). The 27 September 2026 update added MET Norway, which supplies the weather on Today, as a processor. The 3 September 2026 update added the per-category consent table in section 2, disclosed Resend and Open Food Facts as processors, added progress photos, personality-quiz answers and screening-form answers to section 1, and added this breach-notification section — none of it changes what the app already did, only what this policy says about it.

14. Contact & complaints

For any privacy question or request, or to make a complaint, contact:

David Coyne — Momentum Fitness
Email: david@momentumfitness.com.au

We’ll acknowledge your complaint and aim to resolve it promptly. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.