Privacy policy

This explains what we collect, why, who else sees it, and how to get it back or have it deleted. It is written to be read, not to be survived.

Last updated: 19 October 2026

Who is responsible

2150 Training Club is operated by Daniela Gallego Muñetón (ABN 26 904 815 842), a sole trader based in Victoria, Australia. She is the one accountable for the information described here.

We follow the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles. We are covered by that Act even as a small business, because we hold health information — the pre-exercise questionnaire and, if you join the challenge, your form, both below. We are not going to hide behind the small-business exemption when the thing we ask you about is your health.

What we collect, and why

What	Why we need it
Your name and email address	To create your account, sign you in, and email you things you asked for. If you pay for a class or the challenge without an account, we create one with that name and email, with no password, so what you paid for is kept under your name; you finish it by choosing your password from the link we email you. If you start a payment and do not finish it, that password-less account —with your name, your email and, if it was a class, your health questionnaire— is deleted automatically 7 days after your last payment attempt (or when the link to finish it expires, if you asked for one), unless it holds something in your name, such as a gifted class; when it is deleted, we keep a record of what you accepted without your name or email, as when you delete your account; if you want it sooner, ask us.
Your password	Stored only as a cryptographic hash by our database provider. Nobody here can read it, including us.
Your language choice	So the site opens in English or Spanish without you asking twice.
Your answers to the pre-exercise questionnaire (PAR-Q)	To know whether you should check with a doctor before training. This is health information and is treated as sensitive.
If you allow it in the app: the DAILY summary of four things from your phone or watch — steps, active minutes, energy burned (kcal) and average heart rate	So that you can see them in your own panel, and for nothing else. It starts switched off: until you say yes, we read nothing. Explained in full below.
A record of each consent: which document, which version, the date, your IP address and browser	So that both of us can prove what you agreed to and when. Without it, consent is a claim rather than a fact.
Your subscription status and payment history	To give you access to what you paid for, and to keep our books.
Playback records: which class you watched or downloaded, when, from which IP address and with which browser or app	To spot an account being shared or resold; for your streak and your progress, which are calculated from this record; and to know whether you have gone a while without watching anything — which is what decides whether we send you the reminder email. Dani sees in her panel how long each subscriber has gone without training, and which classes are watched most. It is what allows us not to lock the platform down harder for everyone else.
Bookings for in-person classes and one-to-one sessions, your place on a waiting list, and the trail of each change: who booked or cancelled and when — and, if you did it on the website, from which IP address (and, for classes, with which browser)	To hold your place, to know who is in the room, and to settle it if there is ever a disagreement about who cancelled what. The trail is deleted after 24 months.
Every failed sign-in —including a wrong current password when changing it or deleting your account—, and every time someone creates an account or asks to reset a password: the time, the IP address, and a one-way fingerprint of the email used	To stop someone guessing passwords against your account or opening accounts in bulk. The email itself is never stored — only a fingerprint that cannot be turned back into an address. Deleted after 24 hours.
Whether you want our emails, and the date you unsubscribed if you did	So we do not write to you after you said no (except notices about something you booked or signed up for, which always reach you). We keep the unsubscribe date even if you turn them back on later: it is our proof that we honoured it.
Which emails we have sent you: what kind, when, and whether they went out or failed	So we do not send you the same one twice, and so we can answer you if you ever ask whether something was sent. We do NOT store the content of the email, or whether you opened it; Resend keeps a copy of what was sent in its dashboard.
Which programme you started and on what day, even if you drop out partway	To know where you are up to. The record is not deleted if you abandon it: the attempt is part of your history, and deleting it would be rewriting it.
If you turn on app notifications: an identifier for your phone so we can send the alert	To tell you when a spot opens up in a class you were waiting for. It is deleted as soon as you turn notifications off, sign out or delete your account.
If you join the Transformation Challenge with nutrition (if you buy videos only, we do not ask for it): your form — name, age, illnesses, medication or supplements, allergies, what you ate the day before, foods you dislike and favourites, weight and height — and the date and text version with which you authorised its use	So that the challenge nutritionist can prepare your plan, and so that Dani, who runs the challenge, can support you with it. You, the nutritionist and Dani see it. mokap_lab, which maintains the platform, only goes in if needed to fix something. Every time someone opens it is recorded. It is asked for with a separate authorisation, never pre-ticked, and you can delete it whenever you like from the same screen. If your nutrition payment is refunded, we delete it at that moment, together with your photos and your plan.
If you like, three photos of you in shorts and a top (front, side and back)	For the same purpose, and only if you tick their own permission. They are stored without your phone's location or details, the nutritionist and Dani see them (and mokap_lab only if needed to fix something), and every time someone opens them is recorded. If you withdraw the permission, they are deleted on the spot, even once the challenge has started.
In the challenge: which group you bought, the day you are on, the days you asked to have opened, and your plan	To open each video on its day, at your midnight, and give you your plan. We keep your browser's time zone from the purchase to know when your midnight is.
Application faults: what broke, when, and your identifier if it happened while you were doing something	So we can fix it. We never store your questionnaire answers or the content of anything you wrote in there. Deleted after 90 days.

We never see or store your card number. Payments are entered directly with our payment provider, and we only receive the result and the last four digits.

Your health information, specifically

The PAR-Q is sensitive information under Australian law, which means we need your explicit consent to collect it, we can only use it for the purpose you gave it for, and it deserves more care than the rest.

It is used for one thing: deciding whether we should ask you to talk to a doctor before training, and adapting a session if you tell us about an injury.
It is never shared with the booking tools, the payment provider, or anyone else outside the platform.
Your instructor does not see your answers. She sees a flag that says whether anything needs a conversation — the text stays with you.
It is never used to set prices, to target advertising, or to decide anything about your account.

The Transformation Challenge form is something else, and it is said separately. If you join, the form asks about illnesses, medication, allergies, what you eat, weight and height, and three photos if you like. Unlike the PAR-Q, people DO read it: the nutritionist, to prepare your plan, and Dani, to support you during the challenge. It is asked for with its own authorisation, never pre-ticked; every time someone opens it is recorded; and you can delete it from your account whenever you like, even once the challenge has started.

And what your phone or watch brings, which is the second kind. If you connect Apple Health or Health Connect, we read each day's summary of four things: steps, active minutes, energy burned in kilocalories, and average heart rate. Nothing else: no location, no sleep, no weight, no minute-by-minute detail. One number per day, per thing.

It starts switched off. Until you allow it in the app we read nothing — and the box does not come ticked.
We only read. We never write anything back into Apple Health or Health Connect, and we cannot: the app does not ask for that permission.
Only you see it, in your panel. Your instructor does not. That is not a promise of goodwill: there is no permission in the database that would grant it to her.
It does not change what you pay. It is there whether you subscribe or not.
It is never used for advertising, for any analysis of ours, or shared with anyone outside the platform.
It is data your device DECLARES to us: we do not measure it, and it decides nothing. Not your access, not your price, not a single recommendation.
You can withdraw it on the same screen, with one tap, and withdrawing deletes what we had already stored — it does not merely switch something off. It disappears from the live system at once; from the backups within 30 days at most, like everything else.

Who else your data touches

These are the actual companies, not a generic list. Some of them are outside Australia, and Australian privacy law requires us to say so plainly.

Provider	What they hold, and where
Supabase	The database and the sign-in system: your account, questionnaire, what your watch brings if you connect it, your bookings and waiting list, the record of what you watched, consents, subscriptions and the notifications identifier. Hosted in Sydney, Australia. It also prepares the account emails themselves (confirming your address, resetting your password and confirming an email change), which Resend delivers.
Bunny Stream	The class videos, including the ones you download in the app. When it serves a video it sees, like any server, the IP address and the browser or app you request it from; the record of what you watched is kept by us, in Supabase. Video is delivered from servers around the world — Europe included — so it does not stutter.
The challenge nutritionist	ONLY if you join the Transformation Challenge: she sees your form and, if you uploaded them, your photos, and uploads your plan. She signs in with her own account, which only shows challenge forms — no payments, classes or other clients — and every time she opens a form or a photo it is recorded. She works in Australia and sees it inside the platform: we do not send it to her by email or to any other tool.
Stripe	Payments. They hold your card details; we do not. Stripe operates from the United States and processes data globally.
Resend	It delivers every email. The account ones: confirming your address, resetting your password, confirming an email change and, if you paid without an account, the link to create it. The ones about what you bought or booked: the confirmation of your challenge purchase with your group's date, the reminder to finish your form, the notice saying your challenge starts tomorrow, the one saying your nutrition plan is ready, the one saying your spot was cancelled, your group changed or your challenge payment is being refunded, and the one saying you now have the nutrition you added or its payment is being refunded; the confirmation of your class or 1-to-1 session with the address, the reminder with the address two hours before it starts, the notice that your class, booking or session was cancelled, the one saying a payment that could not be applied to your booking is being refunded, and the one saying a spot opened up on the waitlist; and, if you have the video plan, the notice before it renews and the confirmation that you cancelled it. These notices and the account emails always reach you, even if you unsubscribed from the rest, because without them you would not know what is happening with what you paid for or be able to sign in. The rest carry a link to stop receiving them: the welcome when you create your account, the welcome to the video plan, the one that reminds you to come back if you have the video plan and have not watched a class in a while, and the one that, when your challenge ends, tells you which group and which classes come next. And, if Dani has her sales notices switched on, it delivers her a notice of each booking and each challenge purchase with your name, your email, what you booked or bought, when it is for and what you paid; never anything about your health. Resend keeps a copy of what was sent in its dashboard. Servers in the United States.
Vercel	The hosting of the site itself. Like any server, it sees your IP address and browser on each request. A United States company; requests are served from the region closest to the database.
Expo Push	ONLY if you turn on app notifications: it delivers the alert to your phone when a spot opens up in a class you were waiting for. What it receives is a device identifier — not your name, not your email, not who you are — and the line you see: the class and the time. Nothing else. Servers in the United States, and from there to Apple or Google. If you turn notifications off or sign out, that identifier is deleted.
mokap_lab (who built the platform)	A backup of the whole database, once a day, on our own storage in Australia. It contains everything above, including your health questionnaire answers, the challenge form and photos if you uploaded them, and whatever your watch brings if you connected it. It exists so your data can be given back to you if something breaks, and that file is handled with the same care as the original.

We do not sell your data, we do not trade it, and we do not hand it to advertisers. If that ever changes, it will be a new version of this page and we will tell you before it takes effect — not after.

Cookies, and what we do not do

We use two cookies. One keeps you signed in. The other remembers whether you chose English or Spanish. That is the whole list.

The app has no cookies. Your phone keeps, in its secure storage (the iPhone keychain or Android's), your session, your language and —if you use them— the notifications identifier and the key that encrypts your downloads. Classes you download are stored encrypted inside the app, and the widget keeps today's class and your streak. All of that except your language is deleted when you sign out or delete your account from the app. If the session ends another way — for example, you delete your account on the website — the app removes the reminders, the widget and the notifications identifier the next time it connects; your downloaded classes and your notification preference stay on the phone, the downloads encrypted: if you sign back in with the same account they are still there; if another account signs in, they are deleted; and if the account no longer exists, they go when you delete the app.

There is no Google Analytics, no advertising pixel, and nothing that follows you to other websites. That is also why there is no cookie banner: banners exist because of tracking, and we do not track. If we ever add analytics, it will not load until you say yes.

How long we keep things

Your account and questionnaire: while your account exists. If you delete it, they leave the live system at once (and the backups within 30 days at most).
Records of the documents you accepted (terms, privacy, waiver): for as long as your account exists and, if you delete it, seven more years from that day (then without your name or email: only a fingerprint of the email, the date, the version, the IP address and the browser). They exist to prove what was agreed, so deleting them early would defeat their purpose; after those seven years they are deleted automatically.
Payment records: Stripe keeps them for as long as Australian tax law requires. In our database, for as long as your account exists; if a payment was due to be refunded, the record of that refund remains (the Stripe payment number, the reason and the dates), without your name or email.
Playback records: 24 months, then deleted.
Sign-in, sign-up and password-reset attempts: 24 hours. After that they cannot stop anything and would just be an IP address kept for no reason.
The daily backups: 30 days, then they are deleted automatically. If you delete your account it disappears from the live system at once, and from the backups within 30 days at most. If you would rather not wait, ask us and we remove them sooner.
The record of which emails we sent you: 24 months, then deleted.
Application faults: 90 days.
What your phone or watch brings: for as long as you allow it. The moment you withdraw it, it is deleted.
Which programmes you started and your bookings: for as long as your account exists. They are your history, and the point of keeping them is that you can look back at it.
The trail of changes to a booking: 24 months.
Challenge photos: 90 days after your challenge ends, then deleted automatically (from the backups, 30 days later).
Your challenge purchase, the days you asked to have opened and the record of who opened your form or photos: while your account exists, or until the purchase is cancelled.
The challenge form and plan: 12 months after your challenge ends, in case you repeat it; then deleted automatically. If you delete it earlier, it goes straight away.
Whether you want emails or not: for as long as your account exists. If you unsubscribe, that date is kept even if you turn them back on later — it is our proof that we honoured it.

What you can ask us to do

See everything we hold about you. We will send it in a readable file, free, within 30 days.
Correct anything that is wrong. Most of it you can change yourself from your account.
Delete your account and your data. All that remains are the records of the documents you accepted (without your name or email) and the payments, which Stripe keeps as tax law requires. They leave the live system at once and the backups within 30 days at most; if you would rather not wait, ask us and we remove them sooner.
Withdraw the challenge authorisation, from your form: it deletes your form and photos on the spot. Without a form, the nutritionist cannot prepare your plan.
Withdraw a consent you gave. Withdrawing the health consent means we can no longer let you book physical sessions, and we will tell you that before you do it, not after.
Complain. Write to us first. If we do not fix it, you can take it to the Office of the Australian Information Commissioner (oaic.gov.au), and that is your right, not a favour.

If something leaks

Australia has a scheme called Notifiable Data Breaches. If data is lost or accessed and it is likely to cause you harm, we have to tell you and the Information Commissioner. We will tell you what happened, what was exposed, and what you should do — without waiting to have a nice explanation ready.

Questions, or a request about your data: hola@2150trainingclub.com. A real person answers, and we aim to reply within five business days.