BioSensr Privacy Policy

Effective Date: 28 September 2026

1. About this policy

BODY BIOSENSE Pty Ltd (ABN 65 662 642 444) (BioSensr, we, us or our) respects your privacy. This Privacy Policy explains how we collect, hold, use and disclose personal information when you use BioSensr hardware, BioSensr Software, biosensr.com, account.biosensr.com, our Stripe-hosted payment services, or related support and commercial services.

BioSensr Software is designed so that athlete and measurement data remain under the customer's local control. Our online services collect only the information reasonably required to administer accounts, software access, billing, devices, security and optional operational analytics.

2. Information we collect and hold

Depending on how you interact with BioSensr, we may collect and hold:

  • Account and contact information: your name, email address, organisation, role, correspondence and support requests.

  • Authentication and account records: account identifiers, email-verification and password-recovery events, approval status, access status and security records. We do not receive or display your password.

  • Purchase and transaction information: Stripe customer and checkout identifiers, products or access purchased, access dates, permitted seats, invoices, payment status, discounts, tax, refunds and limited transaction records. Payment card or bank details are handled by Stripe or the relevant financial institution and are not stored in full by BioSensr.

  • Device-access information: device identifiers, device labels, operating-system information, registration and revocation status, last validation and last activity time.

  • Optional operational analytics: app-session times and aggregate events such as measurements started, completed or cancelled and exports created. These records do not include athlete names or identifiers, team or exercise details, raw signals, measurement values, results or health information.

  • Website and technical information: IP address, browser and device information, security logs, essential cookies or browser storage, referring pages and information supplied through website forms.

  • Commercial and support information: enquiries, orders, procurement information, warranty or refund requests, complaints and communications with us.

3. Athlete and measurement data remain local

BioSensr Software stores athlete rosters, teams, exercise details, body sides, raw signals, processed measurements, results and measurement history in the local data folder selected by the customer. BioSensr does not upload this athlete or health/measurement data to the BioSensr account, payment or operational-analytics services as part of normal product use.

Customers control the local data folder and are responsible for lawful athlete consent, user access, security, backups, retention, disclosure and deletion. Local exports contain customer-controlled information and should be transferred only through an appropriately secure method.

If a customer deliberately sends local athlete or measurement information to us for support, we will handle it only for the agreed support purpose and may require a separate secure transfer arrangement. Do not submit identifiable athlete information through ordinary email or the public website contact form.

4. How we collect information

We collect personal information:

  • directly from you when you create an account, purchase hardware or software access, contact us or make a request;

  • automatically when BioSensr validates account and device access;

  • from optional operational analytics when that setting is enabled;

  • from Stripe and other payment or procurement providers when they report checkout, invoice, payment, cancellation, refund or dispute events; and

  • from website, security and infrastructure providers where reasonably necessary to operate and protect our services.

Where it is lawful and practicable, you may contact us without identifying yourself. Some information is required where identification is necessary to create or secure an account, process an order or payment, provide software access, fulfil a warranty or refund request, or comply with legal obligations.

5. How we use information

We may use personal information to:

  • create, verify, approve, secure and administer accounts;

  • process one-off hardware purchases and deliveries;

  • provide complimentary, manually granted or paid software access;

  • administer one-time yearly software-access purchases, extensions and cancellations;

  • register devices, enforce seat or device limits and support confirmed device replacement;

  • process invoices, payments, GST, refunds, disputes and chargebacks;

  • provide downloads, updates, technical support and service communications;

  • understand product operation and reliability where optional analytics are enabled;

  • detect, investigate and prevent misuse, fraud and security incidents;

  • maintain business, audit, tax and legal records;

  • send product or service communications where permitted by law, including any choices or unsubscribe options required by law; and

  • comply with legal obligations and enforce applicable agreements.

We do not sell personal information.

6. Operational analytics choices

Basic operational analytics are enabled by default and can be disabled in BioSensr settings. If disabled, BioSensr does not send an operational analytics record, including a de-identified replacement record. Disabling operational analytics does not prevent essential account, entitlement, device-security or billing communications required to provide BioSensr Software.

Operational analytics do not contain athlete or health/measurement data. Operational analytics records are automatically deleted after 12 months.

7. Service providers and disclosures

We may disclose limited personal information to service providers only where reasonably necessary to operate BioSensr, including:

  • Supabase for account authentication, database and server functions;

  • Stripe for hosted Payment Links, invoices, payments, tax and refunds;

  • Cloudflare for website delivery, security and controlled software downloads;

  • Squarespace for the public BioSensr website and forms;

  • email and business-communications providers; and

  • professional advisers, insurers, regulators, courts or authorities where reasonably necessary or required by law.

These providers process information under their own terms and privacy arrangements. Some are global providers and may disclose or make personal information accessible to recipients outside Australia. The United States is a likely overseas location for some of these services. Other provider or subprocessor locations may include countries in the European Union or European Economic Area and other regions in which those providers operate. Because global subprocessor locations can change, it may not be practicable to list every country at all times. You may contact us for further information about the service providers currently used for BioSensr.

We may also disclose information in connection with a proposed or completed business sale, financing, restructuring or transfer, subject to appropriate confidentiality and legal requirements.

8. Storage and security

Online account, entitlement, payment and administrative records are held using access controls and service providers selected to support appropriate security. We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

No system is completely secure. You are responsible for protecting your account credentials, computer, local BioSensr data folder and authorised email account. Notify us promptly if you suspect unauthorised access.

9. Retention and deletion

We retain personal information only for as long as reasonably required for the purposes described in this policy, including:

  • operational analytics for up to 12 months;

  • account and device records while an account or entitlement is active and for a reasonable security and audit period afterwards;

  • revoked-device and administrative audit records where reasonably necessary to investigate access or maintain accountability;

  • software-access, invoice, tax, refund and transaction records for the period required by applicable accounting, tax and legal obligations; and

  • enquiries, complaints, warranty claims and support records for as long as reasonably required to resolve the matter and maintain appropriate records.

Deleting an online account does not automatically delete the customer's separate local athlete and measurement data. Conversely, deleting local data does not automatically close an online account or erase records that we are required or reasonably entitled to retain.

10. Access, correction and deletion requests

You may ask to access personal information we hold about you or request that inaccurate information be corrected. You may also request account deletion or withdraw consent where consent is the relevant basis for the processing. Some information may need to be retained to comply with law, resolve disputes, prevent fraud or maintain necessary transaction and security records.

Submit a request through BioSensr Contact or email jett@biosensr.com. We may need to verify your identity before acting on a request.

11. Privacy complaints

If you believe we have mishandled personal information, contact us and provide sufficient information for us to investigate the concern. We will acknowledge and investigate the complaint and aim to provide a substantive response within 30 days.

If you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner at oaic.gov.au.

12. Children and athlete information

BioSensr accounts are intended for authorised professional or organisational users, not for athletes to create independently. The customer is responsible for determining whether athlete consent, parental or guardian consent, or another lawful basis is required before recording information locally.

13. Changes to this policy

We may update this Privacy Policy when our practices, services or legal obligations change. The current version and effective date will be published on the BioSensr website. We will provide additional notice where a change is material and it is reasonably practicable to do so.

14. Contact

BODY BIOSENSE Pty Ltd
ABN 65 662 642 444
Email: jett@biosensr.com
Contact: https://www.biosensr.com/contact