1. Who we are
LimiterIQ ("we", "us", "our") is an independent HYROX performance coaching platform operated in Australia. We are the data controller of any personal information you provide while using our website, assessment, member dashboard or community.
For any privacy-related inquiry, contact: hello@limiteriq.com
2. What we collect
We collect the following categories of personal information:
- Account information: name (optional), email address, hashed password, signup date.
- Assessment answers: your responses to the free limiter assessment, including current HYROX times, training history, injury history, age range and goals.
- Subscription information: Stripe customer ID, subscription status, billing period dates, payment method on file (last 4 digits only; full card data is stored by Stripe, not by us).
- Training data: generated plans, session completion logs, weekly check-in responses, perceived effort ratings.
- Coach and imported content: Coach messages, optional saved Coach memory, workout notes, race-result files and screenshots, and sampled form-check video frames that you choose to submit.
- Community activity: Training Lab posts, replies, reactions, follows, searches, reports, blocks and approved photos. New community photo uploads may be paused while safety controls are strengthened.
- Support content: messages and information you provide when requesting help.
- Newsletter information: the email address you submit, where and when consent was requested and confirmed, subscription status, unsubscribe or suppression status, and delivery events needed to operate the opted-in weekly email safely.
- Technical data: IP address, browser type, device type, referring page, pages visited, timestamps. We use this for security and basic site analytics.
3. How we use it
We use your information to:
- Generate and deliver your personalised limiter assessment and training plan.
- Provide connected Coach, Form Check and Race Import features after you explicitly allow third-party AI data sharing.
- Process payments, manage your subscription and send billing receipts.
- Send transactional emails (welcome, trial ending, payment failed, plan ready, weekly summary).
- Send the weekly LimiterIQ newsletter only after you expressly opt in and confirm your email address. You can unsubscribe at any time.
- Improve the product, fix bugs and detect abuse.
- Comply with legal obligations (tax records, lawful requests).
We do not use your information to:
- Sell to third parties or data brokers.
- Send marketing emails you didn't opt into.
- Allow Anthropic to train its models on your LimiterIQ API inputs and outputs.
- Share with advertising networks for retargeting.
4. Who we share it with
We share specific data with the following processors, each strictly necessary for the service:
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Email, card token, billing address |
| Supabase | Database + authentication hosting | All account and training data (stored, not shared) |
| Anthropic | Connected Coach, Form Check and Race Import results, only after consent | Coach messages; selected profile, goals, training, readiness, pain or injury context; optional saved Coach memory; race files; and sampled video frames you choose to analyse. Name may be included when it is part of the selected coaching context. Email and payment data are not sent for these features. |
| Resend | Transactional and expressly opted-in newsletter email delivery, including suppression handling | Email address, email content and delivery or suppression events |
| PostHog | Product analytics and sanitised client error events | Account identifier after sign-in, product interactions, device or browser identifier, and sanitised diagnostic events. Session recording and automatic pageview capture are disabled. |
| Vercel | Website and backend hosting | Requests and standard server logs, including IP address and request paths |
We do not sell personal data or share it with unrelated third parties for advertising. We may disclose limited information when required by law, to protect users, or to investigate abuse.
5. Where it's stored
Your account and app data are stored with Supabase. Stripe processes web payments globally as required for card networks. Anthropic processes connected AI requests on infrastructure that may be outside Australia. PostHog, Resend and Vercel may also process data outside Australia. Cross-border processing is limited to the purposes described above.
All transmission is over HTTPS. Passwords are hashed using industry-standard bcrypt. Card data is never seen by our servers, Stripe handles all payment data directly.
6. How long we keep it
- Active accounts: while your account is active and until you delete it, subject to limited legal and security retention.
- Deleted accounts: the in-app deletion flow removes the LimiterIQ account, cloud training data, community contributions and uploaded photos when deletion is confirmed. Limited records may remain only where retention is legally required or in time-limited processor backups.
- Anthropic API inputs and outputs: deleted by Anthropic within 30 days under its standard commercial API policy, unless a different agreement applies or longer retention is required for safety or law.
- Payment records: 7 years, as required by Australian tax law.
- Server logs: 90 days.
- AI consent record: kept with your profile so LimiterIQ can prove your current choice. Withdrawing consent stops new connected AI sharing. It does not recall a request already processed.
- Newsletter records: consent and delivery records are kept while you are subscribed. After you unsubscribe or a provider suppresses delivery, we retain the minimum status evidence needed to honour that choice, prevent accidental re-enrolment and meet legal obligations. You may request deletion, subject to those limited requirements.
7. Your rights
Under the Australian Privacy Principles, you have the right to:
- Access: request a copy of all personal information we hold about you.
- Correct: ask us to fix anything that's incorrect.
- Delete: ask us to permanently delete your account and associated data (subject to legal retention obligations).
- Export: receive your data in a machine-readable format.
- Withdraw consent: opt out of any non-essential processing.
- Complain: lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we've mishandled your data.
You can withdraw connected AI sharing in Settings, unsubscribe from the weekly newsletter using the link in any newsletter, and permanently delete your account in the app. You can also email hello@limiteriq.com. We aim to respond within 30 days.
8. Cookies + analytics
We use the minimum storage needed to keep you signed in and remember preferences. We use PostHog for product analytics with automatic pageviews, automatic interaction capture, exception capture, surveys and session recording disabled. We do not use the analytics data for cross-app advertising or tracking.
See our cookie policy for details.
9. Children
LimiterIQ is intended for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has signed up, contact us and we'll delete the account.
10. Changes to this policy
If we update this policy in any meaningful way, we'll email all active members at least 14 days before the change takes effect. The current version date is shown at the top of this page.
11. Contact
Privacy questions, data subject requests, complaints, all to hello@limiteriq.com.
Questions about this policy? Contact hello@limiteriq.com and we will respond within a few business days.