THE FINE PRINT

Privacy notice.

Taylah grace Russell trading as hacked · ABN 72 266 901 661
Effective 9 October 2026

Who handles your information

Taylah grace Russell, trading as hacked, ABN 72 266 901 661, is responsible for your personal information and acts as the data controller where that term applies. Contact us through our contact page with privacy questions or requests.

What we collect and why

• Account information, such as your name, email, profile settings and authentication details, to create and secure your account and provide purchased services. Passwords are handled by our authentication provider, not stored in plain text by us.
• Purchase records and product access information to deliver your purchase, respond to billing queries and meet accounting obligations. Paddle handles payment card details.
• Workout completions, logged weights and reps, goals, habit ticks and step entries to provide your training history, progress charts and planner.
• Optional profile details, measurements, check-ins, photos and journals to provide features you choose. Private information is not shared publicly by default; community audiences and coach check-in sharing depend on your settings and consent.
• Community posts, comments and interactions to display your chosen shared content and moderate misuse.
• Contact messages and newsletter signup details to answer enquiries and send updates you request. You can withdraw marketing consent at any time through the contact page or an unsubscribe option provided in an email.
• Device and browser information, IP addresses, usage and error logs to operate the site, understand performance and prevent fraud or abuse.
• AI prompts and relevant training history when you request AI insights or exercise alternatives, to generate the requested response. This information is sent to our AI service provider for processing; do not include unnecessary sensitive information in prompts.

Our grounds for using data

Where a legal basis is required, we rely on contract performance for accounts, purchases and requested services; legitimate interests for security, moderation, support and service improvement; legal obligations for financial records; and consent for marketing and optional sensitive information or sharing. Where consent is required for health-related information, you choose whether to provide it and may withdraw consent by contacting us or changing sharing settings. You can use purchased workouts without posting private photos or journals.

Who receives information

We share only what is needed with service providers for hosting, storage, authentication, AI processing, site performance and support, including Lovable Cloud and its infrastructure providers. Paddle receives information needed for product sales, subscription management where applicable, payments, tax compliance and invoicing, and handles its own processing under its privacy notice. Information may also be shared with legal and accounting advisers or authorities when legally required. Other members receive only content you choose to share with their audience. We do not sell your personal information.

Storage, retention and security

Account and training records are retained while your account is active and needed to provide the service. We retain enquiry records only as needed to resolve the enquiry and related issues, and transaction records for applicable accounting and legal retention periods (generally five years for Australian tax records). When information is no longer required, we delete or anonymise it, subject to legal obligations and routine backup retention.

We use appropriate technical and organisational safeguards, including encrypted connections, access controls, protected private media and time-limited download links. No online service is completely risk-free. Keep your account credentials private.

International processing

Our providers may process information outside Australia. We take reasonable steps to select providers with appropriate privacy and security safeguards. Where UK or EEA transfer rules apply, required safeguards include adequacy decisions or standard contractual clauses, as appropriate. Contact us for information about safeguards relevant to your data.

Cookies and similar storage

Essential cookies and browser storage maintain sign-in, security and checkout. These are needed for account and purchasing features. You can clear or block them through your browser, but some features may stop working. Non-essential analytics or marketing cookies, if introduced, will be described and offered with consent choices where required before use.

Your choices and rights

You can update your profile and sharing settings in the members’ area. Contact us to request access, correction or deletion of personal information, withdraw consent, or make a privacy complaint. Where applicable, you may also request restriction or portability, or object to processing. We may need to verify your identity and retain records required by law. We respond within applicable legal timeframes, including within one month for UK/EEA rights requests where required.

You can complain to the Office of the Australian Information Commissioner, or your relevant local supervisory authority, if you believe your privacy rights have been breached. We encourage you to contact us first so we can address your concern. Material privacy changes will be communicated on this page or through your account.