Privacy Policy
Effective 13 October 2026
This policy explains how VPT (listed on the App Store as “Virtual PT”) handles your personal information. “VPT”, “we” and “us” mean the provider named at the end of this page. It covers the VPT iPhone app, its widgets and the services behind them.
We comply with the Australian Privacy Principles in the Privacy Act 1988 (Cth). Where other privacy laws apply to you, such as the GDPR in the EU or UK, we comply with those as well.
The short version
- We collect what we need to coach you: your profile, your training, your goals and your body measurements, plus anything you choose to share from Apple Health.
- Some of it is sent to our AI provider to plan your training. Images are analysed and not kept on our servers.
- We don’t sell your data, show ads, track you across apps or websites, or use third-party analytics.
- Health data is never used for advertising or marketing.
- You can delete your account at any time in the app.
What we collect
Information you give us
| Information | Examples |
|---|---|
| Profile | First and family name (optional), gender, birth year, height, weight, units, time zone, preferred week start |
| Training preferences | Activity interests and exclusions, training focus, days per week, availability, questionnaire answers, favourite and disliked movements |
| Injuries | Affected body area, side, type and severity, and any notes you write |
| Goals and plans | Goals, milestones (including dates and notes), your weekly schedule |
| Workouts | Sessions, exercises, sets, weights, reps, durations, and how you felt before and after |
| Body measurements | Weight, body-fat percentage, lean mass, skinfold (caliper) readings, and the values from any body-scan report you add (for example DEXA) |
| Locations | The names you give your gyms and the equipment available at each. We don’t collect your geographic location. |
| Feedback | Messages you send through the app, and your answers to in-app polls |
| Coach code | If you redeem a coach’s code, the fact that you joined through that coach |
Information from Apple Health
If you connect Apple Health, VPT reads the following (you choose which types to allow): date of birth, biological sex, height, body mass, body-fat percentage, lean body mass, heart rate, steps, active and resting energy, walking/running, cycling and swimming distance, sleep, workouts, workout routes and activity rings. VPT doesn’t write anything to Apple Health.
Most of it stays on your device. It is used to show your activity, progress and widgets. Only the following leaves your device:
- Copied to your profile: birth year, sex, height and weight, when you choose to use them during setup.
- Stored as measurements: weight, body-fat percentage and lean mass readings.
- Stored as workout records: for workouts recorded by other apps, the activity type, start and end time, duration, energy and distance. Routes and heart-rate data are not uploaded.
- Sent for planning: a summary of your recent workout history (how often, how long and how far, per activity type). It is sent to our AI provider when you ask VPT to suggest goals or a weekly schedule. The summary is not stored in your account.
We never use Health data for advertising, marketing or data mining. We never sell it, and we only share it with the service providers listed below so they can run VPT for you.
Photos and documents
You can use the camera or your photo library to:
- photograph your gym so VPT can identify its equipment;
- photograph a meal to estimate its calories; or
- add the pages of a body-scan report (photo or PDF) so VPT can read its values.
Each image is sent to our AI provider for analysis and is not stored on our servers. We keep the result: the equipment list, the meal estimate or the scan values. Meal photos and meal logs stay on your device. They are kept in the app’s Documents folder, which you can see in the Files app.
Information collected automatically
- Account identifier. Sign-in is handled by Auth0 (see below). We store the identifier Auth0 gives your account so we can link your data to you.
- Diagnostics. Crash, hang and performance reports from Apple’s MetricKit, and errors the app runs into. Each report includes the app, build and iOS version. We keep them for 30 days.
- Service logs. Our servers log requests to run and troubleshoot the service. This includes each request sent to our AI provider and its response, recorded with your account identifier. These logs currently have no fixed expiry. We are introducing a limited retention period and will update this policy when it is in place.
Purchases
Subscriptions are sold and billed by Apple. We never see your payment details. We receive and keep a record of your subscription from Apple: the transaction identifier, product, expiry and renewal status, and any refund or revocation. When you subscribe, VPT gives Apple your VPT account identifier so the purchase can be linked to your account.
How we use it
We use your information to:
- provide VPT: plan and adapt your training, suggest weights and reps, track your workouts and show your progress;
- generate AI suggestions, as described below;
- keep your data in sync across the app and our servers;
- run, secure, troubleshoot and improve the service; and
- respond to you and meet our legal obligations.
We don’t sell your information, use it for advertising, or build profiles to market to you.
AI processing
VPT uses Anthropic’s Claude models to generate routines, weight and rep targets, daily recommendations, goals and weekly schedules, and to analyse the photos described above. To do this we send Anthropic the information each feature needs, which can include:
- your profile (gender, age, height, weight);
- your training preferences and questionnaire answers;
- any injuries and the notes you wrote about them;
- your goals and milestones;
- your recent workouts;
- your gym’s equipment; and
- the Apple Health summary described above.
We don’t send your name or your account identifier.
Anthropic processes this data on our behalf. Under its commercial terms, it does not use it to train its models.
AI suggestions can be wrong. Please read our safety information.
Who we share it with
We share personal information only with the service providers that run VPT for us, and only so they can do so:
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Hosting, database and service logs | United States |
| Auth0 (Okta) | Sign-in and account security | United States |
| Anthropic | AI suggestions and image analysis | United States |
| Apple | App distribution, subscriptions and Apple Health | Per Apple’s own policy |
We may also disclose information if the law requires it, or to protect the safety of any person.
Coaches whose code you redeem have no access to your account or your training data.
Storage outside Australia
Your information is stored and processed in the United States by the providers above. We choose providers that protect personal information to a standard comparable to the Australian Privacy Principles, and we require them to use it only to provide their service to us.
How long we keep it
We keep your information while you have an account. When you delete your account:
- Database: everything held in your account is deleted immediately. This includes your profile, workouts, measurements, goals, schedule, locations, injuries, feedback, subscription records and diagnostics.
- Backups: database backups are kept for up to 7 days before they expire.
- Sign-in identity: your identity at Auth0 is not yet removed automatically. Email us and we will delete it.
- Service logs: these are kept as described above.
Data stored only on your device, such as meal logs and photos, is removed when you delete the app.
Your choices and rights
- Apple Health: change what VPT can read at any time in the iOS Settings app (Privacy & Security → Health → VPT).
- Camera and photos: you can withhold or withdraw access in iOS Settings. The features that need it won’t work without it.
- Access and correction: you can view and edit most of your information in the app. Email us for a copy of the rest, or to correct anything you can’t edit.
- Deletion: delete your account in the app’s settings (Delete Account), or email us.
- Notifications: VPT’s reminders are scheduled on your device. Turn them off in iOS Settings.
We respond to requests within 30 days. If you are in the EU or UK, you also have the right to:
- object to or restrict how we process your information;
- receive it in a portable format; and
- complain to your local data-protection authority.
We process your information to provide the service you signed up for, and process Health data and injury notes on the basis of your consent. You can withdraw that consent at any time by disconnecting Apple Health or removing the information.
Security
Data is encrypted in transit between the app and our servers. Access to our systems is restricted to the people who run VPT. No system is perfectly secure. If a data breach is likely to cause you serious harm, we will notify you and the regulator as the law requires.
Children
VPT is not intended for anyone under 16, and we don’t knowingly collect information from them. If you believe a child has given us information, email us and we will delete it.
Changes to this policy
When we change this policy we will update the effective date above. If a change materially affects how we use your information, we will tell you in the app before it takes effect.
Contact and complaints
Email support@vpt.info with any question, request or complaint about your privacy. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.