Privacy Policy
Last updated: August 24th, 2026
Vco App Pty Ltd (ACN 669 976 112) - "we", "us", "our" - is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.
It applies to information we collect through our website at www.vcoapp.com, the Vco App, and in the course of providing coaching.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Where you are located in the United Kingdom or the European Economic Area, we also handle it in accordance with the UK GDPR and EU GDPR, and additional rights apply to you - see "If you are in the UK or EU" below.
By using our services, you consent to us handling your personal information as described in this policy.
Definitions
Application means the mobile and web application we make available under the name Vco App, provided using third-party software licensed to us.
Health Information means information about your physical or mental health, medical history, injuries, medications, body composition, dietary intake or training history.
Personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.
Sensitive information means the categories given a higher level of protection under the Australian Privacy Principles, including health information.
Service means the Application, the website, and the coaching services we provide.
What we collect
Information you give us:
your name, email address, phone number and postal address
your date of birth
Health Information you provide in our health screening questionnaire and during coaching
progress photos and body measurements you submit
your training and nutrition logs
your dietary preferences, restrictions and goals
messages you send us through the Application, email or social media
your responses to surveys and feedback
Information we collect automatically:
usage data from the Application and website, including pages viewed, session duration and device type
IP address, browser type and operating system
approximate location derived from your IP address
Information from third parties:
payment confirmation from our payment processor (we do not receive or store your full card details)
data from fitness trackers and apps you choose to connect, such as Apple Health, Fitbit, Garmin or MyFitnessPal
information from your healthcare providers, where you have asked them to provide it or consented to us requesting it
Sensitive information
Most of what we collect to deliver coaching is Health Information, which is sensitive information. This includes:
height, weight and body composition
medical history, diagnosed conditions, and past or current injuries
medications and supplements you take
mental health conditions relevant to dietary change or structured exercise
history of disordered eating, where you disclose it
pregnancy and breastfeeding status
food allergies and intolerances
dietary intake and training history
progress photos, to the extent they reveal information about your health or body
We only collect sensitive information with your consent, which you give when you complete our health screening questionnaire. You are not obliged to provide it, but we cannot program safely for you without it, and we may be unable to work with you.
We use sensitive information only for the purpose it was collected - designing and adjusting your training and nutrition, and assessing whether coaching is appropriate for you - and for directly related purposes you would reasonably expect. We use or disclose it for any other purpose only with your consent, or where required or authorised by law.
Progress photos are used solely to assess your progress and adjust your programming. They are not published, shared with other clients, or used in any marketing without your separate, express written consent, which is optional and which you can withdraw at any time. Declining does not affect your coaching, your pricing, or how we work with you.
How we use your information
to provide coaching, including designing and adjusting your training and nutrition
to assess whether coaching is appropriate and safe for you
to create and manage your account
to communicate with you about your coaching
to take payment and manage your subscription
to schedule and conduct calls
to send you marketing about our services, where you have opted in - you can unsubscribe at any time
to improve our services
to meet our legal obligations and resolve disputes
We do not sell your personal information, and we do not disclose it to third parties for their own marketing purposes.
Who we share it with
We use the following service providers, each of which handles some of your information on our behalf:
Provider & what they handle
ABC Trainerize (The Vco App) - your programming, logs, messages, progress photos and Health Information
Stripe - Subscription payments and billing
Typeform - Your health screening questionnaire responses
Calendly - Call scheduling
Mailchimp - Email marketing, where you have opted in
We may also disclose personal information to:
our professional advisers, including accountants, lawyers and insurers, where necessary
courts, tribunals, regulators and law enforcement, where required by law or to establish or defend a legal claim
a purchaser, in the event our business is sold or transferred - in which case we will tell you
Overseas disclosure
Our service providers store and process data outside Australia. The countries this is likely to involve include the United States, Canada, and countries in the European Union.
Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles. Those countries may not have data protection laws equivalent to Australia's, and where a third party is not subject to the Privacy Act it would not be accountable under that Act.
Where you are in the UK or EEA, transfers of your data outside those areas are made under the safeguards required by the UK GDPR or EU GDPR, including standard contractual clauses where applicable.
How long we keep it
We keep personal information only as long as needed for the purposes we collected it, and to meet legal, accounting and insurance requirements.
Health Information is kept for as long as we are providing coaching to you, and for two years afterwards, then deleted or de-identified.
Progress photos are deleted on request at any time, unless we are required to keep them by law or need them to resolve a dispute.
Content stored within the Application may persist in our software provider's backups for a limited period after deletion.
Where we de-identify information so it can no longer be associated with you, we may keep and use it indefinitely for analysis and improvement.
Security
We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes access controls, encryption in transit, and selecting service providers with appropriate security practices.
No system is completely secure. We cannot guarantee the security of information transmitted over the internet, and transmission is at your own risk.
Data breaches
If we become aware of a data breach that is likely to result in serious harm to you, we will assess it promptly and, where the Privacy Act 1988 (Cth) requires it, notify you and the Office of the Australian Information Commissioner as soon as practicable. Where you are in the UK or EEA, we will also comply with the notification requirements of the applicable GDPR.
Your rights
Access. You can ask for a copy of the personal information we hold about you. We will respond within 30 days. There is no charge, though we may charge a reasonable fee for a substantial request.
Correction. If anything we hold is inaccurate, out of date, incomplete or misleading, tell us and we will correct it.
Deletion. You can ask us to delete personal information we hold about you. We will do so unless we are required to keep it by law or need it to resolve a dispute.
Marketing. You can opt out of marketing at any time using the unsubscribe link in any email, or by contacting us.
Anonymity. Where practicable, you can deal with us anonymously or under a pseudonym - though we cannot provide coaching without knowing who you are.
Withdrawing consent. You can withdraw consent to our handling of your sensitive information at any time. If you do, we may be unable to continue providing coaching.
To exercise any of these, email contact@vcoapp.com.
If you are in the UK or EU
Where the UK GDPR or EU GDPR applies to you, we are the data controller and you have additional rights: to object to processing, to restrict processing, to data portability, and to lodge a complaint with your local supervisory authority.
Our lawful bases for processing are:
Contract - to provide the coaching you have signed up for, take payment, and manage your account
Explicit consent - for Health Information and other special category data, and for any marketing use of your progress photos or testimonials. You can withdraw consent at any time
Legitimate interests - to improve our services and secure our systems, where those interests are not overridden by your rights
Legal obligation - to meet tax, accounting and other legal requirement
You can withdraw consent or object to processing at any time by emailing contact@vcoapp.com.
Cookies and analytics
We use cookies on our website. Cookies are small files stored by your browser that help the site function and help us understand how it is used.
We use:
Essential cookies, which are needed for the site to work
Analytics cookies, which tell us how visitors use the site
You can control cookies through your browser settings. Blocking some cookies may affect how the site works.
Links to other websites
Our website and Application may contain links to other sites. We do not control those sites and are not responsible for their privacy practices. This policy does not apply to them.
Complaints
If you have a concern about how we have handled your personal information, email contact@vcoapp.com with the details. We will acknowledge your complaint within two business days, investigate, and respond in writing within 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. If you are in the UK or EU, you can also complain to your local data protection authority.
Changes to this policy
We may update this policy from time to time. Where a change materially affects how we handle your personal information, we will give you at least 30 days' notice by email or through the Application before it takes effect. The current version is always available on this page.
Contact
Privacy Officer Vco App Pty Ltd ACN 669 976 112 Email: contact@vcoapp.com