Privacy policy · Kuehs Fitness & Massage

This explains what the Kuehs Fitness app (app.kuehs.com.au) keeps about you, why, who can see it and what you can ask us to do. The app is run by Kuehs Fitness & Massage, a sole-trader business in Perth, Western Australia. It is used by the owner and by invited clients only.

What we keep

Your name, email address and sign-in details (your password is stored scrambled, never in plain text).
Health and fitness information you give us: forms and waivers you sign (we keep the exact wording you signed), injuries, goals, measurements, photos if you add them, and your training and session records.
Your bookings, messages with your coach and weekly check-ins.
Basic technical records, such as when you signed in and errors, to keep the app secure and working.

Why we keep it

To coach and treat you safely: to build your plan, track your progress, take your bookings, send reminders and keep a record of the advice and treatment you were given. We do not sell your information, use it for advertising or share it for marketing.

Who can see it

You can see your own information. The business owner (your coach) can see the records of the clients they work with. No other client can see anything about you. Changes to health and client records are logged, and records are not permanently deleted straight away.

Where it is kept, and the services we use

Your information is stored on the business's own server in Perth, Western Australia. We use a small number of outside services to run the app:

Cloudflare carries traffic between your phone and our server securely.
Resend sends the emails from the app (invites, booking confirmations and reminders). It receives the email address, name and message text for each email it sends.
Google Calendar, only if the owner connects it (see below).
Your phone's notification service (Google or Apple), only if you switch phone notifications on.

We do not send your health information to any other third party.

Google Calendar

The business owner can connect their own Google Calendar to the app. The app then asks Google for two permissions: to add, change and remove calendar events for appointments booked in the app, and to read when the owner is busy so clients are only offered free times. Each event shows the service, time and place, and the client's name. The app does not read the owner's other calendar events, and it does not ask for any Google information about clients.

The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The information is used only to show and manage appointments, and is not used for advertising or shared with anyone else. The owner can disconnect Google Calendar in the app at any time, or remove the app's access from their Google Account settings.

This website

This website (kuehs.com.au) has no cookies, analytics or tracking. The only information it passes on is what you choose to send with the contact form (see below). If you message us on Instagram or Facebook instead, those services handle the message under their own privacy policies, and we use what you send only to reply to you.

Messages sent with the contact form

If you send us a message with the form on the Contact page, we receive your name, how to reply (email or phone), the service you're interested in and your message. We use them only to reply to you.

They are stored in the Kuehs Fitness app on the business's own server in Perth, Western Australia.
When a message arrives, the owner gets a phone notification and, if it hasn't been read within 15 minutes, an email sent through Resend. The notification and email show only your name and the service, not your message or contact details.
Messages are deleted automatically 12 months after they arrive (messages that look like spam after 30 days), or sooner if you ask.
To protect the form from abuse, your IP address is checked against a short-term limit in the server's memory. It isn't stored.

Please don't send health or injury details with the form. We'll go through those privately at your consult.

How long we keep it

We keep client and health records for as long as needed to look after you and to meet our professional record-keeping duties (usually several years after your last visit), then delete them.

Your choices

You can ask to see the information we hold about you, and to have mistakes corrected.
You can ask us to stop emailing you reminders, or turn off phone notifications on your phone at any time.
You can ask us to delete your account. We may need to keep some health records for the period the law requires, and will tell you if so.

To do any of these, message your coach in the app, or reply to any email we have sent you. If you don't have an account, contact us through our contact page. If you are not happy with how we handled a request, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

If we change how we handle your information, we will update this page and the date at the top.