Privacy Notice

MAD Training app · updated 3 November 2026

This notice explains what personal information the MAD Training app collects about you, why, who can see it, and how to ask us about it. We handle your information in line with the Privacy Act 1988 (Cth), the Australian Privacy Principles and, where it applies, the Health Records Act 2001 (Vic).

Who we are

The app is run by Melbourne Athletic Development (“MAD”, “we”, “us”). You can contact us about this notice at training@melbourneathleticdevelopment.com.au.

What we collect

• Your account: your name and email address, entered by your coach or physio.
• Your training program: the exercises, sets, reps, loads, goals and coach comments written for you, and the date of your next test.
• What you log: the reps, loads and effort ratings (RPE) you enter for each set, your overall session effort, any notes you choose to type, and when you finish a session.
• Check-in requests: if you or your coach or physio taps the check-in button, we record that it was raised, by whom, when, and what happened next. It carries no message.
• Sign-in and security records: when you last signed in, and a log of actions taken in the app by staff. Your device’s IP address is used briefly to slow down repeated failed sign-in attempts; it is not saved with your records.
• A reference number: the number that links you to your record at our clinic, so your program can be copied across from the clinic. We do not copy clinical notes, diagnoses, scans or appointment details into this app.

Please keep health details out of your session notes. If something hurts, or you are unwell, use the check-in button or speak to your coach or physio. If you do type health details into a note, we will treat them with the same care as the rest of your information.

Why we collect it

• to give you your training program and let you record your sessions;
• so your coaches and physios can follow your progress and adjust your training safely;
• to email you your sign-in links and other messages about the service;
• to keep the app secure and to meet our legal obligations.

We do not sell your information, use it for advertising, or use it to profile you for any purpose other than your training.

Who can see it

• Your coaches and physios at MAD. Their accounts are protected by a password and an authenticator app.
• Our internal clinic tools, which show coaches an overview of your program (program dates, how many sessions you have done, when you last logged, your test date and whether a check-in is open). These run on our own systems.
• The service providers who run the app for us (see “Where it is stored”).

We do not give your information to anyone else unless you ask us to, the law requires it, or it is needed to prevent a serious threat to someone’s life, health or safety.

Where it is stored

The app, its database, its encrypted backups and its email sending all run on Amazon Web Services (AWS) in Sydney, Australia. AWS is headquartered in the United States, so its staff or systems may in some circumstances be able to access information held for us. We choose Sydney and encrypt our backups to keep your information in Australia and protected.

The exercise videos play from YouTube (Google) in its privacy-enhanced mode. When you play a video, Google may receive your IP address and device details. We do not send Google your name or email address.

How we protect it

Everything travels over an encrypted (HTTPS) connection. Sign-in links work once and expire. Staff accounts need a password and a code from an authenticator app. Backups are encrypted. Only staff who need to see your information can see it. No system is perfectly secure; if you think someone else has used your account, tell us straight away. If we ever have a data breach that is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the law requires.

How long we keep it

We keep your training records while you are training with us. When you stop, we deactivate your account and your sign-in stops working. You can ask us to delete your account and training records at any time, and we will do so unless we are required or allowed by law to keep them.

Cookies and what the app stores on your phone

The app uses one essential cookie that keeps you signed in on your device for up to 14 days. It uses no analytics and no advertising cookies. It also remembers on your device whether you have dismissed the “add to home screen” prompt.

So the app works in the gym without a signal, it keeps a copy of your upcoming sessions on your phone, and any sets, notes or completed sessions you log stay on your phone until they have been sent to us. Signing out removes the saved sessions. Anything not yet sent stays on your phone and is sent the next time you sign in.

Your rights and how to complain

You can ask to see the information we hold about you, ask us to correct it, or ask us to delete it. Email training@melbourneathleticdevelopment.com.au. We aim to reply within 30 days. If you are not happy with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, for health information, the Victorian Health Complaints Commissioner (hcc.vic.gov.au).

If you are under 18

If you are under 18, please read this notice and our Terms of use with your parent or guardian.

Changes

If we change this notice in a way that matters, we will update the date above and ask you to read and accept it again the next time you sign in.