This policy applies to Prestige Success Pty Ltd (ABN 95 518 756 560), trading as Prestige-Fit, operating ZeroZeroDays at zerozerodays.com. In this policy "we", "us" and "our" mean that company.
Small businesses under $3 million turnover are usually exempt from the Privacy Act 1988 (Cth). That exemption does not apply to us, because section 6D(4)(b) removes it for any organisation that provides a health service and holds health information. Running a coached program built around exercise, nutrition, sleep and body composition is a health service, and the information we collect to do it is health information. We are therefore bound by the Australian Privacy Principles, and this policy is written to comply with APP 1.
We would rather say that plainly than lean on a technicality. You are handing us information about your body and your health. The obligations should be the strict ones.
Almost everything we hold about you is sensitive information under the Privacy Act, which carries the highest level of protection. Here is the complete list.
| Category | What that means | Why we need it |
|---|---|---|
| Identity and contact | Name, email, mobile, date of birth, profile photo if you add one, emergency contact name and number. | To run your account, contact you about your climb, and reach someone if something happens to you while training. |
| Health screening | Your answers to our pre-exercise screening, based on the Adult Pre-Exercise Screening System used across the Australian fitness industry. Injuries, conditions, medications you tell us about, pregnancy status. | To decide whether you can start safely, whether you need medical clearance first, and how your coach should train you. |
| Body composition and wellbeing ratings | Weight, body fat percentage, measurements, and scan or smart scale readings at day 1, check-ins, and day 42. At each check-in you can also rate your energy, sleep, mood and pain from 1 to 10. Those ratings are optional. | To track progress, to assess the 90% Guarantee if you claim it, and to tell you honestly whether what you are doing is working. |
| Progress photos | The day-1 and day-42 photo sets, if you choose to upload them. These are optional. | To let you and your coach see change that numbers miss, and to verify a guarantee claim if you make one. |
| Daily logs | Which targets you completed each day. Depending on the targets you pick, this can include training, food, protein, alcohol, water, sleep, sun, screen time and your daily win note. | This is the program. Your compliance score, your coach's view and the scoreboard all run on it. |
| Goals and coach notes | Your stated goal, training background, and notes your coach makes about your progress. | To coach you as a person rather than a row in a table. |
| Reward details | Shirt cut, size and colour preference. | To order the right Tee when you earn it. |
| Account records | Payment record (amount, date, product), the terms version you accepted, and when you accepted it. | To give you access to what you paid for, and to have a record of your agreement. |
| Waitlist | If you ask us to hold a place on a climb without paying yet: your name, your email, which climb, and the referral code you arrived on if a member sent you. Nothing else, and no health information. | To keep you a seat, to tell you when that climb's crew finishes so you can see real results before deciding, and to know which member to thank. |
| Referral codes | Every member has a short code. If you join or hold a place on someone's link, we record that code against your signup. | So the member who sent you gets the credit. It tells us who introduced whom, and nothing about either of you beyond that. |
| Technical | Login session data and basic error logs. | To keep you logged in and to fix things when they break. |
We do not collect or store your card number. Payments run through Stripe, who handle card details directly. We receive only the fact that a payment succeeded, the amount, and the email used.
We do not run advertising trackers or third-party analytics on this site.
Directly from you in almost every case: at sign-up, in the intake and health screening form, when you log a day, when you record check-in numbers, and when you talk to your coach. Some comes from your device if you connect a smart scale. If your employer has bought a team package, we may receive your name and work email from them so we can create your account, and we will tell you that when we do.
You can also give us your name and email on a public page, without an account, by asking us to hold a place on a climb. That is the only information we collect from someone who is not a member, we only use it to talk to you about that climb, and you can ask us to delete it at any time by replying to any email we send you.
If we ever receive information about you from someone other than you, and you would not reasonably expect it, we will tell you.
We do not use your health information for marketing. Marketing messages are sent only if you gave the separate optional consent at sign-up, and never on the basis of your health data or your results. Every marketing message has an unsubscribe link. You can withdraw that consent at any time by emailing us.
We never sell your personal information, and we never disclose it for anyone else's marketing.
Sensitive information is collected with your consent, given at intake. Consent is separated so you can choose: the health screening and daily logging are required to take part, because we cannot coach you safely without them, while progress photos, media consent and marketing consent are each optional and each ticked separately. Declining the optional ones does not affect your access, your score, or your eligibility for anything.
You can withdraw any optional consent at any time by emailing [email protected]. If you withdraw consent to the collection we need in order to coach you safely, we will not be able to keep you on the climb, and we will talk to you about that rather than simply cutting you off.
We disclose personal information outside those groups only where the law requires it, or in an emergency where it is necessary to prevent a serious threat to your life, health or safety.
We use third-party service providers to run the platform. Some of them, or their infrastructure, are located outside Australia. Under Australian privacy law we remain accountable for how they handle your information.
| Provider | What they hold | Where |
|---|---|---|
| Supabase | The database and file storage: your account, logs, numbers, notes and photos | Sydney, Australia (ap-southeast-2). Your records, your logs and your photos stay onshore. |
| Stripe | Payment processing. Your card details, which we never see; your email and payment record | United States, Ireland and Australia |
| Resend | Sends your login codes and service emails. Your email address and message content | United States |
| Cloudflare | Serves the website. Technical request data only, no member records | Global network, United States company |
Your member records are hosted in Australia. The database and file storage that hold your account, logs, numbers, notes and photos are in Supabase's Sydney region. The remaining providers handle narrower slices: payment processing, email delivery and website serving. By using ZeroZeroDays you acknowledge that those parts may be processed overseas. We take reasonable steps to ensure each provider handles it consistently with the Australian Privacy Principles, and we will tell you if that list changes materially.
No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
Your compliance score is calculated automatically by the app from the days you log against the plan you set. It is not a judgement about you and no human overrides it, but it does affect real things: your scoreboard position, whether you earn a Tee, and whether the 90% Guarantee applies. The method is published in full at clause 6A of the terms so you can check the arithmetic yourself. If you think your score is wrong, tell your coach and a human will look at it.
ZeroZeroDays is for people aged 18 and over. We do not knowingly collect personal or health information from anyone under 18. If we learn that someone under 18 has signed up, we will close the account and delete their information. This is a deliberate decision: we do not think a platform built around measuring bodies is the right environment for teenagers.
You can ask us for a copy of everything we hold about you, and you can ask us to correct anything that is wrong. Email [email protected]. We will respond within 30 days, and there is no charge. If we refuse access or correction, we will tell you why in writing and how to complain about it.
Most of your information is visible to you in the app already, and you can change your goals, targets, numbers and profile photo yourself at any time.
If you think we have mishandled your personal information, tell us first at [email protected]. We will acknowledge your complaint within 5 business days, investigate it, and respond in writing within 30 days with what we found and what we are doing about it.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992, or GPO Box 5218, Sydney NSW 2001. You do not need our permission to do that.
We will update this policy when what we do changes. The current version is always at this address, and we will tell members directly before any change that materially affects how we handle their information.
Questions about your privacy? [email protected] · Terms & Conditions