Privacy policy

Coastline PT is operated by David Silver trading as Train90 (ABN 54 970 821 702), Queensland ("we", "us", "our"). This policy explains how we handle personal information, including health information, under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Version 1.14 · Effective 28 October 2026

This website and the service on it are run for us by our platform provider, Train90 (David Silver, ABN 54 970 821 702). We're responsible for our relationship with you and for looking after you as our client. Train90 (David Silver, ABN 54 970 821 702) handles your information on our behalf to provide the platform. See "If you train through a personal trainer or gym" below.

Summary

• We collect your health and fitness answers only to screen for safety and build your program, and only with your consent.
• Your information is stored in Australia (Sydney).
• If you're under 18, we need a parent or guardian's consent, and we never send you marketing. Children aged 12 to 15 can only take part through a parent's plan (Coastline PT Family, where offered), and the parent can delete their details with one tap.
• Our AI provider never receives your name, email or screening answers. It receives only de-identified details such as your goal, equipment and limitation codes.
• If you choose to scan your training space, your photos are used only to identify your equipment and are deleted straight away. We keep only the equipment list you confirm.
• Recovery answers, pain reports, habit ticks and body measurements are optional, used only to adjust and support your program, and never sent to our AI provider.
• If your plan includes nutrition and you choose to use it, your nutrition answers (including health conditions, allergies and questions about your relationship with food) are used only to build your nutrition plan, or to suggest you see a health professional first. They're never sent to our AI provider.
• We don't sell your information or share it with advertisers.
• You can ask to see, correct or delete your information at any time.

What we collect

Contact and account details: first name, email address, time zone (state), and the private links we create for your program and calendar.

Health and fitness information: your answers to the pre-exercise safety screening questions, whether you have clearance from a health professional, your age range, goals (including an optional second goal and any event you're training for), your sport if you train for one (the sport, where you are in your season, and your game and team training days, and those of a second sport if you add one), any regular classes you tell us about (the type of class, such as yoga or spin, and the days you go), training experience, schedule, equipment, areas you've told us to work around (such as knees or lower back), your weekly check-ins, including whether you had pain, what got in the way if you missed sessions (for example time, tiredness, soreness or being unwell) and, where your plan includes it, how you've slept and your energy, stress and muscle soreness, the sessions you tick off as done, and the week 1, week 7 (optional halfway check) and week 13 fitness test results you choose to record (with your age and sex, only if you ask us to compare your results with published typical ranges). With your test results you can also choose to record how you feel, how confident you are exercising on your own, and your waist measurement (not offered to people under 18). This is "sensitive information" under the Privacy Act.

"Something hurts?" reports: if you tell us something hurts, the area, how bad it is (0 to 10) and which of our listed warning signs apply. We don't collect a description in your own words.

"Anything else?" note (optional): anything you choose to tell us about your goals in your own words. It's read by your trainer, doesn't change your program automatically and is never sent to our AI provider. Please don't use it for health details. If your note mentions a health matter, we ask you to confirm you have clearance from a health professional, or that it isn't about a current injury or condition, and we keep that answer with your screening answers.

Daily habits (optional): the habits you tick each day (steps, water, protein at meals and bedtime), and the targets you set, such as your step goal and bedtime.

Nutrition questionnaire (optional, where your plan includes nutrition): your exact age, sex, height and weight; your goal and pace, and an optional target weight and waist measurement; how active your day is and roughly how many steps you take; your training days, session length and intensity; when you train, how much you sleep and how you like to eat; how you eat (for example vegetarian or vegan), any cultural or religious food requirements, allergies and intolerances, foods you don't eat, cooking time, budget, alcohol and supplements; and health questions for nutrition: pregnancy or breastfeeding, conditions a doctor has told you about (such as diabetes, kidney disease or coeliac disease), weight-loss medication, any history of an eating disorder, short screening questions about how you feel about food and, if you're 65 or over, recent weight loss and appetite. We also keep your acknowledgement of the "Before you start" points and when you gave it, and the nutrition plan (or referral) we gave you. If you're under 18, your parent or guardian confirms your answers with you. We don't keep the store or the number of people you choose for a shopping list. This is "sensitive information" under the Privacy Act.

Photos of your training space (optional): if you choose to scan your gym or home training space instead of ticking your equipment, the photos you upload, and then the list of equipment you confirm. We don't keep the photos (see "Photos of your training space" below).

Your program: the program we build for you (including a free preview of week 1) and any changes to it.

Payment information: payments are processed by Stripe. We receive confirmation of payment, the amount and a customer reference. We never see or store your full card number.

Technical information: basic information needed to run the website securely, such as IP address, browser type and error logs, and where you found us (for example, a campaign code in the link you clicked).

Communications: emails and messages you send us.

Waitlist: if you join our waitlist, your email, optional first name and the goal you selected.

If you're 16 or 17: the name and email address of the parent or guardian who gives consent, and their confirmation, stored with your consent record.

Children aged 12 to 15 (Coastline PT Family): see "Children's information" below.

How we collect it

Almost everything comes directly from you (or, for Coastline PT Family, from the child's parent or guardian), through our questionnaire, check-ins, emails and forms. We receive payment confirmations from Stripe. Some technical information is collected automatically when you use the website.

Why we collect, use and hold it

• To check it's reasonably safe for you to start exercising, using the Adult Pre-Exercise Screening System developed by Exercise & Sports Science Australia, AUSactive and Sports Medicine Australia.
• To build, deliver, adjust and support your program, including your calendar feed and, on the Coached plan, your trainer's personal review of your program, check-ins and messages.
• If you use nutrition: to check it's suitable for you, build your nutrition plan and shopping list, or point you to a GP or Accredited Practising Dietitian instead, and to keep a record of what we gave you and your acknowledgement.
• To process payments and manage your plan.
• To contact you about your program, your account and any safety or service issues.
• To improve our programs and service, using de-identified or aggregated information wherever possible.
• To send you marketing, but only if you've agreed. You can unsubscribe at any time.
• To meet our legal obligations and handle complaints or claims.

We won't use your health information for any other purpose unless you consent or the law allows it.

Your health information and your consent

We only collect health information with your consent, which you give in the questionnaire (and, if you use nutrition, separately in the nutrition questionnaire). You don't have to provide it, but we can't safely build a program without it. If your screening answers suggest exercise may carry extra risk for you, we will ask you to confirm you have clearance from your GP or another health professional before we build a program. We don't use your health information for marketing.

Dealing with us without identifying yourself

You can use a nickname instead of your real first name. We need a working email address to deliver your program and a payment to supply it, so we can't provide the service anonymously.

Artificial intelligence and automated decisions

Parts of our service are automated. We think you should know exactly which parts.

Decisions made by our software, without a person involved at the time:

• Safety screening: if you answer "yes" to a screening question and haven't confirmed clearance from a health professional, or you tell us you're under 16 (children aged 12 to 15 can only be added by a parent through Coastline PT Family), or you're 16 or 17 and a parent or guardian hasn't given consent, or you're pregnant or have given birth in the last six months, our software won't build a program. This uses your screening answers.
• Building your program: our software selects exercises, sets and schedule from our reviewed exercise library, using your goals, experience, schedule, equipment and the areas you've asked us to work around.
• Weekly adjustments (Adaptive and Coached plans): our software may make the next week lighter, or hold it at the same level instead of progressing, based on your check-in, including if you report pain, low scores for sleep, energy, stress or soreness, or that tiredness, soreness or being unwell got in the way. If you choose, it can also shorten your sessions or drop a day for two weeks. It may also show you general tips about sleep or where to find support for stress.
• "Something hurts?": based on your answers, our software tells you to stop and get medical help, to see a GP or physiotherapist first, or how to train around it. Unless you've told us about a warning sign that needs urgent care, it also swaps exercises that load the sore area for gentler ones for the next 7 days. We always let a trainer know, and they may contact you. This is general guidance, not a diagnosis.
• Your next 90 days: our software suggests an experience level for your next program from your sessions, check-ins and test results. You can change it, and we always ask the safety questions again.

How AI is used: after our rules have built your program, we send de-identified details (your goal and any second goal or event type, experience level, session length, days per week, age range, equipment codes and limitation codes) to an AI provider, OpenAI, which writes coaching notes and may suggest swapping an exercise for another one from our reviewed library. Every suggestion is checked by our software against safety rules before it's used. The AI provider does not receive your name, email, screening answers, check-in details (including recovery answers), "Something hurts?" reports, "Anything else?" note, habits, measurements or test results.

Photos of your training space: if you choose to scan your training space, the photos you upload are sent to our AI provider, OpenAI, in the United States only to identify exercise equipment. We don't store the photos: they're deleted as soon as the equipment list is returned, and they're never saved to our database or kept in your browser. Before upload, your browser shrinks each photo, which also removes location (GPS) information stored in the image. The photos are sent on their own, without your name, email, age or health answers. We keep only the list of equipment you confirm, and you check and can change that list before your program is built. Please don't include other people in your photos, and follow your gym's rules about taking photos. Scanning is optional: you can always tick your equipment instead.

Shared gym equipment lists: if you train at a commercial gym, you can choose to share its equipment list so other members can skip the scan. We add only the gym's name, suburb and the equipment you confirmed to the shared list, never your name, email or photos. To count how many members agree, we keep a one-way coded reference instead of your details, so the list can't be used to tell who trains where. Home training spaces are never shared. Trainers may also publish an official list for a gym, and can correct or hide any list.

Human review: if our automatic checks flag a program, a person reviews it before it's released. On the Coached plan, a qualified trainer reviews every program before it's released. You can ask for a person to review any automated decision about you by emailing david@train90.com.au.

Who we share it with

We share personal information only with service providers who help us run Coastline PT, and only what they need:

• Supabase: database hosting. Stored in Sydney, Australia.
• Netlify: website hosting. Website pages are delivered through a global network. The server code that handles the information you send us (such as questionnaire answers, check-ins and test results) runs in Australia (Sydney), next to our Sydney database. Netlify may keep short-lived technical logs.
• Stripe: payment processing. Australia and the United States.
• OpenAI: AI-written coaching notes (de-identified program details only) and, if you choose to scan your training space or workspace, identifying equipment in your photos (photos are not stored). United States.
• Resend: sending emails (your name, email and program links). United States.
• Train90 (David Silver, ABN 54 970 821 702): our platform provider. Train90 runs this website, the program engine and the services listed here on our behalf, and handles your information only to provide, support, secure and maintain the service for us. It doesn't use your information for its own purposes, never markets to you and never sells your information. Stored in Australia (Sydney).
• Our trainers: the trainers in our business can see your program, check-ins, recovery answers, test results, habit totals and "Something hurts?" reports, and are emailed about pain or low recovery scores, so they can look after your safety. See "If you train through a personal trainer or gym" below.
• Professional advisers (such as lawyers, accountants and insurers) where necessary, and government or law enforcement bodies where the law requires it.

We don't sell personal information, and we don't share it with advertisers. We'll update this list before we start using a new provider that receives personal information.

If you train through a personal trainer or gym (Train90 Partner)

• We're responsible for you. We're responsible for our relationship with you and for your care as our client, and this privacy policy applies. Questions or requests about your information can come to us at david@train90.com.au.
• Train90 (David Silver, ABN 54 970 821 702) runs the platform for us. It hosts this website and the program engine and handles your information on our behalf, only to provide, support, secure and maintain the platform. It doesn't use your information for its own purposes, never markets to you and never sells it. It may use de-identified or aggregated information, which doesn't identify you, to improve the platform.
• What our trainers see: your program, your check-ins and your safety reports (such as "Something hurts?" reports and pain or falls reported at check-ins). Trainers see the clients assigned to them; head trainers and the owner see every client.
• Daily client summary: our business owner is emailed a client summary spreadsheet each morning. It includes your first name, email, state and age band; your plan, goals, schedule and equipment; your screening outcome (not your detailed screening answers); any injury or limitation areas and whether you avoid running and jumping; any Active Ageing cautions (walking aid, no floor work, bone-health caution); the exercises in or left out of your plan; a summary of your check-ins, including whether you've reported pain or a fall or dizziness; and your marketing choice. We store it securely, use it only for your care and safety, don't forward it outside our business, and delete old copies when we no longer need them.
• If this site closes, you can still open your current program, read only, for 30 days, and you'll be told by email. We can export a list of our clients (the same details as the daily summary) during that time, so we can keep looking after you.

Children's information (Coastline PT Family)

Where offered, Coastline PT Family lets a parent or guardian add a child aged 12 to 15 to their plan. We collect only what we need to build and deliver the child's program safely, and we collect it from the parent.

What we collect about your child: their first name, month and year of birth, and whether you're their parent or guardian; your answers to the health check about them (from the Pre-Exercise Screening System for Young People) and, if needed, your declaration that they've been cleared by a health professional; their goals from a fixed list; how many days they were active last week; how much organised sport they do, and their sport and game and team training days if you choose a sport goal; any areas you've asked us to go easy on (such as knees); whether you have a resistance band and access to a playground bar; their training days and times; their program; the time they agreed to take part; and your consent, including the date and the version of the wording you agreed to.

What we don't collect: their surname, photo, school, height, weight, email address, phone number or location. Your child doesn't have an account or login.

Consent and your child's agreement: you give consent on your child's behalf by ticking the parent or guardian declaration. Your child is then asked, on your device, whether they want to take part. If they say "Not right now", setup ends and nothing is saved.

How we use it: only to check it's reasonably safe for your child to start, to build and show their program on your private program page, and to add their sessions to your calendar feed. We never use your child's information for marketing, we never contact your child directly, and we don't send them notifications.

No AI: Family programs are built by our rules only. Nothing about your child is sent to our AI provider.

Automated decisions: our software checks your child's age from their month and year of birth (12 to 15 only), won't build a program if a health check answer needs clearance and you haven't confirmed it, keeps their organised sport plus their sessions with you within the recommended weekly hours for their age (no more hours than their age, and 16 at most), and won't build a program if they're already at that limit, builds the program from our reviewed exercise library, and won't save a program that fails our safety checks. You can ask for a person to review any of these by emailing david@train90.com.au.

Who can see it: you, through your private program link, and us. It's stored in Sydney, Australia, by our database provider. Our alert to the business owner when a family member is added doesn't include your child's name, date of birth or health check answers. Your child isn't included in the daily client summary spreadsheet.

How long consent lasts: your consent covers your child's current 13-week program and never lasts longer than 12 months. A new program means a fresh health check and fresh consent.

Deleting and correcting: you can delete your child's details and program at any time, with one tap, from their program page. This is permanent and removes everything we hold about your child, including the health check and consent record. If we delete your own program at your request, your child's details are deleted with it. You can also email us to see or correct anything we hold about your child.

How long we keep it: until you delete it. If you don't, we keep it on the same basis as your own records (see "How we store and protect it" below) and then delete it.

Overseas disclosure

Some of our service providers are located, or store information, outside Australia, mainly in the United States. Before disclosing information overseas we take reasonable steps to make sure the recipient handles it consistently with the APPs, including through contracts and by sending the minimum information needed. For our AI provider, we send only de-identified program details and, if you choose to scan your training space, the photos you upload for equipment identification. We remain accountable for how these providers handle your information.

How we store and protect it

Your information is stored in a database in Sydney, encrypted in transit and at rest. Access is restricted to the people and systems that need it. Your program and calendar links are long, random and private; treat them like a password and don't share them.

We keep your information only as long as we need it:

• Account, program and screening information (including check-ins, test results, habits, "Something hurts?" reports and, if you use it, your nutrition answers and plan): while your account is active, then for 7 years after your last program ends, to deal with any questions or claims. After that it is deleted or de-identified.
• Payment and tax records: at least 5 years, as required by tax law.
• Free previews you don't buy: deleted, together with your screening and questionnaire answers, 30 days after you create them.
• Coastline PT Family records: until the parent deletes them, and otherwise as for the parent's account above.
• Waitlist details: until you unsubscribe or ask us to delete them.

We keep screening, consent and program records for this period because they may be needed to answer questions or claims about your training. You can ask us to delete your information sooner; we'll do so unless we need to keep it to meet a legal obligation or deal with a claim, and we'll tell you if that's the case.

Marketing

We only send marketing emails, including a reminder about an unbought preview, if you've opted in, and we never send marketing to anyone under 18 or about a child in Coastline PT Family. Every marketing email includes an unsubscribe link, and we action unsubscribes promptly. We'll still send essential service messages about your program, payments or safety, and short reminders during your program (such as the start of each block). You can turn those reminders off with the link in each one.

Cookies and analytics

We use only the cookies and local storage needed to run the website, such as remembering which link brought you to us for the current visit. We don't use advertising cookies or cross-site tracking.

To understand how the website is used, we count page views ourselves, without cookies or third-party analytics tools. For each page view we record the page, the website or campaign link that brought you to us, the type of device (mobile, tablet or desktop) and a code that changes every day. That code is created one way from your IP address and browser, so we can count daily visitors without storing your IP address or recognising you on another day. If you build a plan, we also note which link or website brought you to us. We keep page-view records for up to 13 months.

Accessing and correcting your information

You can ask for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing david@train90.com.au. We'll respond within 30 days, and there's no charge. If we can't do what you ask, we'll explain why in writing.

Data breaches

If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

Our platform provider will tell us promptly about any breach affecting your information and work with us on any notification.

Complaints

If you have a concern about how we've handled your information, email david@train90.com.au. We'll acknowledge it within 5 business days and aim to resolve it within 30 days. If you're not satisfied, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.

Changes to this policy

We'll update this policy when our practices change, and post the new version here with its effective date. If a change significantly affects how we use your health information, we'll tell you by email first.

Contact us

Privacy Officer, David Silver trading as Train90 trading as Coastline PT · david@train90.com.au