PRIVACY POLICY.

Strong Ohana is operated by Mantleworks Pty Ltd (ABN 60 687 219 021) in New South Wales, Australia ("Strong Ohana", "we", "us", "our"). This policy explains what personal information we collect, why we collect it, how we use and protect it, who we share it with, and how you can access, correct or delete it.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where the EU or UK GDPR applies to you, we also honour the rights described in the "Overseas visitors" section below.

This policy applies to this website, the Strong Ohana app, our waitlist, our coaching service, our Lifeguard grant applications, and our email and social messages with you. It does not apply to third-party sites or services we link to, which have their own policies.

We only collect what we need to coach you well. Depending on how you use Strong Ohana:

Account and contact information. Your name, email address, password (stored only as a secure hash we cannot read), and the role on your account (client or coach).

Waitlist information. Your name, email, country, state or region, post code, age range, optional lifting experience, and your acceptance of our terms.

Training information. Your programs, the sets, reps, loads and effort scores you log, session notes, injury flags, and your training history over time.

Health and wellbeing information. Your daily check-ins (sleep, energy, soreness, stress, mood, bodyweight), injuries and symptoms you report, and anything you tell your coach about conditions, medications or medical clearance. In Australian privacy law this is sensitive information, and we collect it only with your consent and only to deliver your coaching.

Form check videos. Videos you upload of yourself lifting, the exercise name, your notes, and your coach's written review. Videos are stored in a private, non-public location and are viewable only by you and your coach unless you explicitly choose to share one.

Messages. The private messages between you and your coach inside the app.

Ohana Grant applications. If you apply for a supported place, the answers you give us, which may include age, gender, race (optional), health conditions, income band, health insurer (optional), experience, interests and commitments. These answers are used to assess grant eligibility, match applicants to potential sponsors or partners when consent is given, and report anonymously on the program's reach. Sponsor matching uses de-identified details and does not include your name, email or other direct identifiers.

Technical information. Standard server and security logs (such as IP address, browser type, pages requested and error reports) generated when you use the site or app.

We do not collect government identifiers, and we ask you not to send us detailed medical records, scans or pathology results. You can use Strong Ohana's public pages without giving us any personal information at all.

We use your information to create and secure your account; to write, adjust and progress your program; to review your form check videos and reply to you; to answer your messages and emails; to keep training safe by tracking injuries, symptoms and recovery; to assess Ohana Grant applications and, with your consent, seek a suitable sponsor or partner; to send you service emails such as waitlist confirmations and replies from your coach; to keep the app working, diagnose faults and prevent misuse; and to meet our legal obligations.

We also look at de-identified, aggregated patterns — for example how many people in a region joined the waitlist, or how often programs are completed — to plan capacity and improve coaching. That work never identifies you.

We do not sell your personal information. We do not use your health information, training data, messages or videos to advertise to you. We do not use automated decision-making to determine your coaching or your eligibility for support — a person reviews those decisions.

Service emails — waitlist confirmation, account and security notices, coach replies — are part of providing the service. Launch news and occasional updates are sent only where you have joined the waitlist or otherwise opted in, and you can stop them at any time by replying to any email or writing to legal@strongohana.com. We will act on an opt-out promptly and will not penalise you for it.

Your coach. Your coach sees the information needed to coach you: your program, logs, check-ins, injuries, form check videos and messages. Coaches are bound by confidentiality.

Service providers. We use reputable providers to run Strong Ohana, under contracts that require them to protect your information and use it only for us. These currently include our database, authentication and file storage provider (Supabase), our hosting and content delivery provider, our email delivery provider (Resend), and — only for coach-uploaded program documents — an AI text-parsing service. We do not send your health information, videos or messages to any AI service.

Where the law requires it. We may disclose information where we are required or authorised by law, to protect someone's life or safety, to investigate serious misconduct, or to establish or defend a legal claim.

Business changes. If Strong Ohana is sold or restructured, information may transfer to the acquirer, who must continue to handle it under a policy at least as protective as this one.

Only with your consent. We will not publish your videos, photos, results, name or story publicly, or use them in marketing, unless you have expressly agreed. Where the app offers a way to share a lift with the community, sharing is off by default, it is your choice each time, and you can withdraw it later.

Your information is stored in our providers' data centres, including in Australia and in other countries such as the United States, and may be accessed by our providers' support teams overseas. Where information leaves Australia, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

We protect your information with encryption in transit, access controls that limit each person to the records they need, database-level rules so clients can only reach their own records, private (non-public) video storage served only through short-lived links, hashed passwords, and audit and error logging. No system is perfectly secure, so we also keep only what we need and delete what we no longer need.

If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

We keep your account, training and health information while your account is active, and for up to seven years afterwards where we need it to meet legal, tax, insurance or claim-related obligations. Form check videos are kept while they are useful to your coaching; you can delete a video yourself once it has been reviewed, and deletion removes it from your account and from our storage. Waitlist entries are kept until launch or until you ask to be removed. Ohana Grant application answers are kept for the grant round they relate to, then de-identified or deleted. Security logs are kept for a short period for troubleshooting and fraud prevention.

You can ask us at any time to tell you what personal information we hold about you, give you a copy of it, correct anything inaccurate or out of date, delete your account and its data, stop sending you marketing, or withdraw a consent you gave us. Much of it you can also do yourself inside the app.

Write to legal@strongohana.com. We will verify who you are, respond within 30 days, and will not charge you for a reasonable request. If we must refuse access or deletion — for example where the law requires us to keep a record, or where a record also concerns another person — we will explain why in writing.

Strong Ohana is for adults. It is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

We use only the cookies and local storage needed to keep you signed in, remember your preferences, and keep the app secure. We do not use advertising cookies or third-party tracking pixels. Your browser can block or clear this storage, though doing so will sign you out.

If you are in the EU or UK, our lawful bases for handling your information are the performance of our contract with you (delivering coaching), your explicit consent (health information and any sharing), our legitimate interests (security, service improvement) and compliance with law. You may also object to processing, request restriction, request portability of your data, and lodge a complaint with your local supervisory authority.

If you think we have mishandled your information, email legal@strongohana.com with the details. We will acknowledge your complaint, investigate it, and give you a written response within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

We update this policy as Strong Ohana develops. The version date at the top of this page records the current version, and we will tell you directly about material changes where we hold your contact details. Continuing to use Strong Ohana after a change takes effect means you accept the updated policy.

Privacy Officer, Mantleworks Pty Ltd (ABN 60 687 219 021), Ulladulla, New South Wales, Australia.
legal@strongohana.com
General enquiries: hello@strongohana.com
We provide our postal address on request for formal legal correspondence.