Privacy policy
ZEAL FITNESS PRIVACY POLICY
Last updated: 30 May 2026
Effective from: 30 May 2026
1. About this policyZeal Fitness Pty Ltd (ACN 689 264 604, trading as Zeal) (“Zeal”, “we”, “us”, “our”) is committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).- This policy explains what personal information we collect, why we collect it, how we use and disclose it, how we keep it secure, and the rights and choices you have. It applies to:- The Zeal mobile application available on iOS and Android (the App)- The Zeal Engage web-based dashboard used by gyms and personal trainers (the Dashboard)Our websites, including zeal.fit- Any related services, communications, and interactions with Zeal (together, the Services)By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.
2. Who we areZeal Fitness Pty Ltd is an Australian company registered in Victoria. We operate a fitness engagement and retention platform with two interconnected products: a consumer mobile application for gym members, and a B2B platform for commercial gyms and personal trainers known as Zeal Engage.You can contact us at:Email: [email protected]Address: 3 Railway Street, Northcote, VICOur Privacy Officer can be reached at [email protected] for any privacy-related queries or complaints.
3. The personal information we collectWe collect personal information from gym members who use the App, from gym staff and personal trainers who use the Dashboard, and from people who interact with our website and marketing.
3.1 Information you provide directlyWhen you register for and use the App, you provide:- Account information: name, email address, password, date of birth, gender- Profile information: height, weight, your committed weekly training days, fitness goals, and an optional profile photo- Gym membership information: which gym you attend- Personal trainer information: if you designate a personal trainer as your PT through the App- Communications: the content of messages, posts, comments, ratings, or feedback you submit through the Services- Support requests: any information you provide when contacting our support teamWhen you use the Dashboard as a gym operator or personal trainer, you provide:- Account and contact information: name, role, business email, gym affiliation- Personal trainer profile information: specialty areas, qualifications you choose to display, availability, profile photo- Business information relating to your gym or personal training services
3.2 Information we collect automaticallyWhen you use the App, we automatically collect:- Session attendance data: the date, time, and duration of your gym visits, triggered by geofencing or near-field communication tap-in- Outdoor activity data: when you choose to record an outdoor activity such as a walk, we collect the GPS route, distance, duration, pace, and any rating or note you add- Engagement data: app usage patterns, features accessed, time spent in different areas of the App- Activity data: streaks, challenge participation, badges earned, rewards points accumulated and redeemed- Social engagement data: posts you create, likes, comments, posts you view, and members you follow- Session feedback data: your ratings of session intensity, workout quality, and gym environment- Device and technical information: device type, operating system version, App version, language preferences, time zone, IP address, mobile network information, and unique device identifiers- Log data: actions taken, error reports, and crash data
3.3 Information we infer or deriveZeal generates derived information from the data we collect, including:- Member Engagement Score: a score out of 100 summarising your engagement with your gym- Churn Risk Category: a predictive classification (Dormant, At Risk, Stable, Highly Engaged) generated using machine learning- Community Influence Score: a measure of your social influence within the gym community- Trainer Influence Score (for personal trainers): a measure of engagement generated with members- Attendance trend analysis and pattern recognitionThese derived data points are personal information when linked to your identity.
3.4 Sensitive information, including health informationSome of the information we collect is sensitive information under the Privacy Act, which receives a higher level of protection. We collect sensitive information only with your explicit consent. This includes:- Health information: data you provide through wellness questionnaires, self-reported injuries, health conditions you choose to disclose, and information that can be used to infer your physical condition- Biometric measurements: the height and weight you provide on registration- You provide explicit consent to collection of health information when you complete a wellness questionnaire, log an injury, or otherwise voluntarily submit health data through the App. You can withdraw consent at any time through the App settings. If you withdraw consent, certain features that rely on this information may no longer be available to you.
3.5 Location informationThe App uses location information for two distinct purposes: geofencing to log gym sessions, and GPS tracking when you choose to record an outdoor activity.Geofencing for gym session logging:- We use your device location to detect when you enter the geographic boundary of your registered gym- Location used for geofencing is not stored as a continuous trail of your movements; the resulting data point is a session log, not a route- Geofencing may require background location permission on your device, used only to detect arrival at your registered gym- GPS tracking for outdoor activities such as walks:- If you choose to start a recorded activity, the App will continuously record your location during that activity to produce a route- We store the route, distance, duration, and pace as part of your activity history- Recorded activities are private to you by default. You can choose to share an individual activity to your gym community or global community feed in the App. You can set privacy zones (such as your home or workplace address) to hide the start and end of your routes within a defined radius around those locations when sharingDisabling location:- You can disable location access at any time in your device settings- If you disable location, automatic session logging will fall back to manual entry or NFC tap-in where available, and you will not be able to record outdoor activities- We do not sell location data or share precise location data with any third party other than the service providers reasonably required to operate the Services (see section 5).
3.6 Information we collect from third partiesWe may receive information about you from:- Authentication providers, if you choose to sign in using Apple, Google, or other supported third-party accounts (we receive your name, email, and a unique identifier from these services)- Your gym, if your gym is a Zeal Engage customer (this may include confirmation of active membership and basic membership details)- Personal trainers, when they associate you with their client list through the App- Service providers we work with, who may provide us with analytics, fraud detection, or support information
4. How we use your personal informationWe use personal information for the following purposes:- To provide and operate the Services- Authenticate you and manage your account- Log gym sessions, calculate streaks, award points and badges- Record outdoor activities such as walks, store the routes and stats you generate, and credit any associated points- Deliver push notifications and reminders aligned with your committed training days- Power community features such as posts, comments, and challenges- Enable personal trainer discovery and the my-PT relationship- Process reward redemptions and track your points balance- To personalise your experience- Generate engagement scores, churn risk categories, and other insights to tailor your experience- Send timely notifications, prompts, and content based on your patterns- Recommend challenges, rewards, training partners, and personal trainers- Provide a more relevant community feed- To support gyms and personal trainers- Provide gyms with aggregated and individual engagement insights through the Dashboard, in respect of their own members- Surface churn risk indicators to gym operators so they can intervene appropriately- Provide personal trainers with information about their clients and referrals- Generate Trainer Influence and Community Influence scores
Section 5 below explains what information is disclosed to gyms and how.- To improve and develop Zeal- Conduct analytics and research to understand how the Services are used- Train, test, and improve our machine learning models, including the engagement scoring and churn prediction models, using aggregated and individual data- Develop new features and functionality- Detect and fix bugs and errors- To communicate with you- Respond to your support requests- Send service messages, such as notifications about important changes, security alerts, and policy updates- Send marketing communications about Zeal features, partner rewards, and offers, where you have opted in or where allowed under the Spam Act 2003 (Cth)- To meet legal and safety obligations- Verify your age and confirm you meet our minimum age requirements- Detect and prevent fraud, abuse, or violations of our Terms of Service- Comply with court orders, legal process, or regulatory obligations
5. How we share your personal informationWe share personal information only as described in this policy. We do not sell your personal information.
5.1 With your gym (Zeal Engage customers)If you are an App user attending a gym that uses Zeal Engage, your gym will have access to the following information about you through the Dashboard:- Your name and profile information- Your attendance and session logging data at that gym- Your Member Engagement Score and Churn Risk Category- Your session feedback, including ratings of intensity, quality, and environment- Your engagement with gym-specific challenges and rewards- Aggregated information about your community participation at that gymThis information is provided to your gym so they can support your engagement, manage their community, and operate their business. Your gym is responsible for handling this information in accordance with its own privacy obligations. We do not share your activity at one Zeal Engage gym with any other gym.Your gym does not have access to outdoor activities you record (such as walks), including the routes, unless you choose to share that activity into your gym community feed.
5.2 With personal trainersIf you designate a personal trainer as your PT through the App, that personal trainer will have access to information relevant to that relationship, including your name, your gym attendance pattern, and your training preferences. You can remove this designation at any time through the App.
5.3 With reward partnersWhen you redeem a reward from a partner in our Rewards Marketplace, we share with that partner the minimum information necessary to fulfil the redemption, typically a unique redemption code and, where required, your email address. The partner's own privacy policy will apply to your relationship with them.We do not share your activity data, location data, or health information with reward partners except where strictly necessary to fulfil a specific redemption you have requested.
5.4 With service providersWe use trusted third-party service providers to operate the Services, including for:- Cloud hosting and infrastructure (Amazon Web Services)- Authentication and identity providers (such as Apple and Google)- Payment processing- Email delivery and push notifications- Analytics and product telemetry- Customer support tooling- Machine learning infrastructure- Service providers are contractually bound to use your information only for the purposes we engage them for, to keep it secure, and to handle it consistent with this policy.
5.5 In the communityWhen you post, comment, or otherwise engage on the App's community feed (gym-specific or global), the content you share will be visible to other members of the same community. Your name and profile photo will be displayed alongside this content. Use the App's privacy controls to manage what you share.
5.6 For legal, safety, and corporate reasonsWe may disclose personal information where we believe in good faith that it is necessary to:- Comply with applicable law, legal process, or a binding request from a government or regulator- Enforce our Terms of Service or this policy- Detect, prevent, or address fraud, security, or technical issues- Protect the rights, property, or safety of Zeal, our users, or the public- If Zeal is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred to the relevant party. We will notify users in advance where required by law.
6. Cross-border disclosure of personal informationZeal stores and processes personal information primarily in Australia. However, some of our service providers may store or process information outside Australia, including in:- The United States, for example certain analytics, push notification, and AI/ML infrastructure providers- Other countries where reputable cloud and software providers operateWhere personal information is disclosed overseas, we take reasonable steps to ensure the overseas recipient handles it consistent with the Australian Privacy Principles. By using the - Services, you consent to this cross-border disclosure for the purposes described in this policy.
7. Storing and securing your informationWe take the security of your personal information seriously and use a range of measures to protect it, including:- Encryption of data in transit and at rest- Access controls and authentication for staff and contractors- Secure cloud infrastructure- Logging and monitoring- Regular review of our security practicesNo system is perfectly secure, however, and we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme.
8. How long we keep your informationWe keep your personal information only for as long as we need it for the purposes described in this policy, or as required by law.- Account information: for as long as your account is active, plus a reasonable period after closure to handle requests, disputes, or legal obligations- Session and engagement data: as long as needed to provide the Services and for legitimate analytical purposes, after which we de-identify or delete it- Derived insights such as engagement scores: refreshed continuously and superseded by current data- Marketing data: until you opt out, plus a short suppression list to ensure we honour your opt-out- Records required to be kept by law: for the period required by the relevant lawWhen personal information is no longer needed, we either delete it or de-identify it.
9. Your rights and choicesUnder Australian privacy law, you have a number of rights and choices.
9.1 Access and correctionYou can request access to the personal information we hold about you, and request that we correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. To make a request, email [email protected]. We will respond within a reasonable period, usually within 30 days. We do not charge a fee to access your information, although we may charge a reasonable cost-recovery fee for unusually large or complex requests, which we will tell you about in advance.
9.2 Withdraw consent and delete your accountYou can withdraw consent to collection of sensitive information at any time through the App settings. You can also close your account at any time, which will result in deletion or de-identification of your personal information, subject to any retention obligations we have under law.
9.3 Manage notifications and marketingYou can manage your notification preferences in the App settings. You can unsubscribe from marketing emails using the unsubscribe link in any marketing email, or by contacting [email protected].
9.4 Manage location and device permissionsYou can grant or revoke location access through your device settings at any time. Revoking location access may limit core features of the App.
9.5 Make a complaintIf you believe we have not handled your personal information in accordance with the Privacy Act or this policy, please contact us first at [email protected]. We take complaints seriously and will respond within a reasonable period.If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC):Website: oaic.gov.auPhone: 1300 363 992Post: GPO Box 5288, Sydney NSW 2001
10. Children and minorsThe Services are not intended for children under 18 years of age. If you believe we have collected personal information from a child without appropriate consent, please contact [email protected] and we will take steps to remove that information.
11. Cookies and tracking technologiesOur website uses cookies and similar technologies to enable site functionality, remember your preferences, and understand how visitors use our site. You can manage cookie preferences through your browser settings. Disabling cookies may affect site functionality.The App does not use traditional browser cookies, but we use mobile equivalents, such as device identifiers and SDK-based analytics, for similar purposes.
12. Third-party links and servicesThe Services may include links to third-party websites or services, for example reward partner websites. This policy does not apply to those third parties. We encourage you to read their privacy policies.
13. Changes to this policyWe may update this policy from time to time. If we make significant changes, we will notify you through the App, by email, or by other reasonable means. The Last updated date at the top of this policy indicates when it was most recently revised.Continuing to use the Services after a change to this policy indicates your acceptance of the updated policy.
14. Contact usFor any questions about this policy or our handling of your personal information, contact:Zeal Fitness Pty LtdPrivacy OfficerEmail: [email protected]Phone: 0430 222 797Address: 3 Railway Street, Northcote, VIC