01About this policy
This Privacy Policy explains how LMBR Pty Ltd (ABN 44 672 926 126) (“LMBR”, “we”, “us” or “our”) collects, holds, uses and discloses your personal information when you use the LMBR mobile application for iOS and Android (the “App”), our website at www.getlmbr.com(the “Website”) and any related content, programs, features and services (together, the “Services”).
We are bound by the Privacy Act 1988(Cth) (the “Privacy Act”) and the Australian Privacy Principles (“APPs”). Where you are located outside Australia, we will also take reasonable steps to handle your information in accordance with any privacy laws that apply to you.
By downloading the App, creating an account, or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy. This policy should be read together with our Terms & Conditions.
02Information we collect
We only collect personal information that is reasonably necessary for us to provide and improve the Services. The types of information we collect include:
Information you provide to us
- Account information — your name, email address, password (stored in hashed form), date of birth or age range, and profile photo if you choose to add one.
- Athlete profile information — your sport or discipline, training experience, training frequency, goals, height, weight, gender and similar details you enter to personalise your program.
- Health and fitness information — results of mobility assessments, range-of-motion measurements, your LMBR mobility score, self-reported injuries, pain levels, limitations, and your workout and program history.
- Content you submit — photos, videos, notes, feedback, survey responses and messages you send to us or through the App.
- Support communications — information you provide when you contact us for help, report a problem or request account deletion.
Information collected automatically
- Device and technical data — device model, operating system and version, app version, language, time zone, IP address, and unique device or advertising identifiers.
- Usage data — the screens and features you use, sessions started and completed, time spent in the App, crash logs and performance diagnostics.
- Website data — pages visited, referring pages, browser type, and information collected through cookies and similar technologies (see Cookies below).
Information from third parties
- App stores — Apple and Google provide us with limited purchase and subscription information (such as subscription status, product purchased and transaction identifiers). We do not receive your full payment card details.
- Sign-in providers — if you sign in with Apple, Google or another provider, we receive the information you authorise that provider to share, such as your name and email address.
- Health platforms — if you choose to connect Apple Health, Google Health Connect or a similar service, we receive only the data types you explicitly permit. You can revoke this access at any time in your device settings.
03Health information
Some of the information you provide — such as injuries, pain levels, physical limitations and assessment results — may be “health information”, which is a type of sensitive information under the Privacy Act.
We only collect health information with your consent, and only to the extent it is needed to personalise your mobility programs and provide the Services. You can choose not to provide it, but some features (such as personalised programs and your mobility score) may not work properly without it.
We do not sell your health information, and we do not use it for third-party advertising.
04How we use your information
We use your personal information to:
- create, maintain and secure your account;
- deliver the Services, including assessments, personalised mobility programs, video coaching content and progress tracking;
- calculate and display your mobility score and progress;
- process and verify subscriptions and in-app purchases through the Apple App Store or Google Play;
- send you service messages, such as account notices, security alerts, workout reminders and changes to our terms;
- send you marketing communications where you have agreed to receive them (you can opt out at any time);
- respond to your enquiries and provide customer support;
- analyse usage, diagnose crashes and improve the content, features and performance of the Services;
- create aggregated or de-identified insights that do not identify you;
- detect, prevent and investigate fraud, abuse, unauthorised downloading or copying of content, and breaches of our Terms; and
- comply with our legal and regulatory obligations.
We will not use your personal information for a purpose unrelated to those above without your consent, unless permitted or required by law.
05How we share your information
We do not sell your personal information. We may disclose personal information to:
- Service providers who help us operate the Services, such as cloud hosting and storage, databases, authentication, video delivery, analytics, crash reporting, customer support and email providers. These providers may only use your information to perform services for us and must protect it.
- App store operators (Apple and Google) to the extent necessary to process purchases, subscriptions and refunds.
- Professional advisers such as lawyers, accountants, auditors and insurers.
- Law enforcement, regulators or courts where we are required or authorised by law, or where we believe disclosure is necessary to protect the rights, property or safety of LMBR, our users or others.
- A purchaser or successor in connection with a merger, acquisition, restructure or sale of all or part of our business, subject to confidentiality obligations.
- Anyone else with your consent, for example if you choose to share your progress publicly or with a coach.
06Overseas disclosure and storage
Some of our service providers store or process information outside Australia, including in the United States, the European Union, Singapore and other countries where their data centres are located.
Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it in a manner consistent with the APPs, including through contractual protections. By using the Services, you consent to this overseas transfer and acknowledge that APP 8.1 will not apply where we rely on that consent, to the extent permitted by law.
08Marketing and notifications
With your consent, we may send you news, tips, offers and updates about LMBR by email or push notification. Every marketing email includes an unsubscribe link, and you can turn off push notifications at any time in the App or your device settings. We comply with the Spam Act 2003 (Cth).
Even if you opt out of marketing, we may still send you non-promotional service messages about your account, subscription or changes to our terms.
09How we protect your information
We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These measures include encryption in transit (TLS), encryption at rest where supported by our providers, hashed passwords, access controls limited to personnel who need it, and monitoring of our systems.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your password confidential and for notifying us promptly if you believe your account has been compromised.
If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (“OAIC”) in accordance with the Notifiable Data Breaches scheme.
10How long we keep your information
We keep personal information only for as long as it is needed for the purposes described in this policy, or as required by law. When it is no longer needed, we take reasonable steps to securely delete or de-identify it.
If your account is inactive for an extended period, we may contact you and then delete your account and associated data.
11Deleting your account
You can request deletion of your account at any time, and we will remove all of your account information.
You can request deletion by either:
- using the Delete Accountoption in the App’s settings; or
- emailing us at support@getlmbr.comfrom the email address linked to your account, with the subject line “Delete my account”.
When we receive a verified deletion request, we will:
- permanently delete your account, profile, assessment results, mobility score history, health and fitness information, program progress and any content you uploaded;
- complete the deletion from our active systems within 30 days; and
- allow residual copies in encrypted backups to expire on their normal cycle (no later than 90 days), during which they are not used or accessed.
We may retain a minimal record that a deletion was requested, and any information we are legally required to keep (for example, tax or transaction records), or that is reasonably necessary to resolve disputes or enforce our agreements. Aggregated or de-identified data that cannot identify you may also be retained.
Important: deleting your account does not cancel a subscription purchased through the Apple App Store or Google Play. You must cancel the subscription through your app store account settings to stop future charges. Account deletion is permanent and cannot be undone.
12Access, correction and your rights
You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. Much of your information can be viewed and updated directly in the App.
To make a request, contact us using the details below. We will respond within a reasonable period (usually within 30 days). We may need to verify your identity before acting on a request. We will not charge you for making a request, but may charge a reasonable fee for providing access where permitted by law. If we refuse a request, we will tell you why in writing and how to complain.
If you are located in the European Economic Area, the United Kingdom or another jurisdiction with similar laws, you may also have rights to data portability, to restrict or object to certain processing, and to withdraw consent at any time. You can exercise these rights by contacting us.
13Children
The Services are not directed to children under 16. We do not knowingly collect personal information from children under 16 without the consent of a parent or guardian. If you believe a child has provided us with personal information without that consent, please contact us and we will delete it.
14Third-party links and services
The Services may contain links to, or integrations with, third-party websites and services (such as app stores, social media platforms and health platforms). We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies.
15Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be available on this page, with the “Last updated” date shown above. If we make material changes, we will notify you through the App or by email before they take effect.
16Contact and complaints
If you have any questions about this policy, wish to make a request, or want to make a complaint about how we have handled your personal information, please contact us:
LMBR Pty Ltd
ABN 44 672 926 126
Australia
Email: support@getlmbr.com
We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.