1. Who we are
LimiterIQ ("we", "us", "our") is an independent HYROX performance coaching platform operated in Australia. We are the data controller of any personal information you provide while using our website, assessment, member dashboard or community.
For any privacy-related inquiry, contact: hello@limiteriq.com
2. What we collect
We collect the following categories of personal information:
- Account information: name (optional), email address, hashed password, signup date.
- Assessment answers: your responses to the free limiter assessment, including current HYROX times, training history, injury history, age range and goals.
- Subscription information: Stripe customer ID, subscription status, billing period dates, payment method on file (last 4 digits only; full card data is stored by Stripe, not by us).
- Training data: generated plans, session completion logs, weekly check-in responses, perceived effort ratings.
- Community contributions: posts, replies, reactions and reports you submit in The Training Lab community.
- Technical data: IP address, browser type, device type, referring page, pages visited, timestamps. We use this for security and basic site analytics.
3. How we use it
We use your information to:
- Generate and deliver your personalised limiter assessment and training plan.
- Process payments, manage your subscription and send billing receipts.
- Send transactional emails (welcome, trial ending, payment failed, plan ready, weekly summary).
- Improve the product, fix bugs and detect abuse.
- Comply with legal obligations (tax records, lawful requests).
We do not use your information to:
- Sell to third parties or data brokers.
- Send marketing emails you didn't opt into.
- Train external AI models with your personal training data.
- Share with advertising networks for retargeting.
4. Who we share it with
We share specific data with the following processors, each strictly necessary for the service:
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Email, card token, billing address |
| Supabase | Database + authentication hosting | All account and training data (stored, not shared) |
| Anthropic | AI plan generation (Claude) | Anonymised assessment inputs only, no name or email |
| Resend | Transactional email delivery | Email address, email content |
| Sentry | Error monitoring | Technical errors, sanitised, no personal training data |
| Vercel / Render | Website + backend hosting | Standard server logs (IP, request paths) |
We do not share with any other third party. If we ever needed to (e.g. a lawful request), we would tell you unless legally prohibited.
5. Where it's stored
Your data is stored in Supabase's Australia or Singapore region (we use the closest available to keep latency low and data near you). Stripe processes payments globally as required for card networks. Anthropic processes AI generation on US infrastructure.
All transmission is over HTTPS. Passwords are hashed using industry-standard bcrypt. Card data is never seen by our servers, Stripe handles all payment data directly.
6. How long we keep it
- Active accounts: as long as your account is active plus 12 months after cancellation, in case you want to return.
- Deleted accounts: within 30 days of deletion request, except where retention is legally required.
- Payment records: 7 years, as required by Australian tax law.
- Server logs: 90 days.
- Community posts: retained for community continuity unless you specifically request deletion of your contributions.
7. Your rights
Under the Australian Privacy Principles, you have the right to:
- Access: request a copy of all personal information we hold about you.
- Correct: ask us to fix anything that's incorrect.
- Delete: ask us to permanently delete your account and associated data (subject to legal retention obligations).
- Export: receive your data in a machine-readable format.
- Withdraw consent: opt out of any non-essential processing.
- Complain: lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we've mishandled your data.
To exercise any right, email hello@limiteriq.com. We aim to respond within 30 days.
8. Cookies + analytics
We use the minimum cookies needed to keep you logged in (an authentication session cookie) and to remember your preferences. We use a privacy-friendly analytics service (Plausible / Fathom) that does not set tracking cookies and does not share data across sites.
See our cookie policy for details.
9. Children
LimiterIQ is intended for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has signed up, contact us and we'll delete the account.
10. Changes to this policy
If we update this policy in any meaningful way, we'll email all active members at least 14 days before the change takes effect. The current version date is shown at the top of this page.
11. Contact
Privacy questions, data subject requests, complaints, all to hello@limiteriq.com.
Questions about this policy? Contact hello@limiteriq.com and we will respond within a few business days.