Privacy Policy

Last updated: 17 September 2026

DRAFT — 17 September 2026. Material update: Arketa legacy-client phone numbers and marketing-opt-in flags imported for studio notifications. Engineering draft pending admitted Australian lawyer review (wbs/COMPLIANCE_REGISTER.md §6 flags [LAWYER #1] and inferred-consent-legacy-import). Bumping this document's version forces every existing member to re-consent at /app/welcome/consents before they can use the member app, including App Review test accounts. [LAWYER REVIEW]

1. WHO WE ARE

evermoves is a movement and wellness platform operated from East Corrimal NSW 2518, Australia. Our address for service of documents is 114k Cawley Street, East Corrimal NSW 2518. We operate the evermoves website, member app and admin services.

Legal entity: Angela Saville as trustee for the G & A Saville Family Trust trading as evermoves (business name EVERMOVES), ABN 85 337 091 524. (A trust does not have an ACN.)

Privacy Officer: Angela Saville — info@evermoves.com.au

This policy explains how we handle your personal information under the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the NSW Health Records and Information Privacy Act 2002 (HRIP Act) and Health Privacy Principles (HPPs).

2. SCOPE

This policy applies to evermoves.com.au, app.evermoves.com.au, our iOS/Android apps, and related services. By creating an account or using our services, you acknowledge this policy.

3. WHAT WE COLLECT

Personal information

Name, email, phone, date of birth, address (if provided), photo (if uploaded), account credentials, payment records, booking and attendance history, video viewing activity (which classes you watch, when you watched, how long you watched, and how far through each class you reached), signed waiver, and communication preferences.

Card details for web purchases are handled by Stripe — we never see or store card numbers. We keep what you bought, amounts, status, and Stripe identifiers needed for receipts, GST and support.

App Store purchases (iOS). When you buy or restore membership in the iOS app, we receive from Apple: subscription status, product identifier, transaction identifiers, environment (Production or Sandbox), signed transaction data, expiry / renewal / revocation dates, and notification type (for example subscribed, renewed, expired, refunded). Apple is the merchant of record; we do not receive your Apple ID email, name, or card number. We store a forensic summary of App Store Server Notifications (apple_iap_event) so we can match access to the right account and investigate disputes.

Health information (sensitive)

We collect health information only where needed to run your practice safely and with your consent:

• Injuries or conditions you choose to tell us
• Exercise screening responses
• Your private movement journal (effort, mood, notes)
• Wearable metrics (steps, active energy in kcal, exercise minutes, resting heart rate, sleep duration, mindful minutes) only if you connect Apple Health or Google Health Connect, and only for the types you approve on the device. The AI concierge and journal insights see these numbers only when Journal insights is also on in Account → AI & privacy. Injury records are never sent to the AI.

Health information is treated as sensitive under Australian law. It is never sent to Apple for App Store billing, to Stripe, to Mux as a viewer identity, or to Twilio.

Technical information

IP address, browser type, device information, session identifiers, and limited app usage data needed to operate the service securely. We do not use advertising trackers or third-party analytics on the marketing site (see Section 12). First-party viewing activity in the member app is described in Section 3 and is stored on our servers, not as an advertising cookie.

4. HOW WE COLLECT IT

• Directly from you (signup, account settings, classes, forms, waiver)
• From your device only after you grant permission (Apple Health / Health Connect)
• From Stripe for web payment confirmations
• From Apple for App Store purchase and subscription-status data (signed transactions and App Store Server Notifications). At purchase we send Apple only an opaque appAccountToken — it is your evermoves member id as a UUID. We do not send Apple your name, email, phone, health information, watch history, or journal. We do not send Apple consumption or usage reports (we log a consumption-request notification if Apple sends one; we do not reply with your activity).
• From the prior booking platform (Arketa) when we migrated the studio: name, email, phone, last visit date, whether you were an active member on that platform, and the marketing email / marketing text opt-in flags recorded there, so Angela can contact existing clients about the new platform. We do not import date of birth, address, or waiver text from that export.
• From embedded third-party content only when you interact (for example Google Maps on our contact page, or Spotify playlist embeds in the member app)

We collect only what is reasonably necessary and tell you at the point of collection why we are asking.

5. HOW WE USE IT

Your information is used to:

• Provide services you request (bookings, content access, programs, live classes)
• Keep classes safe and adapted to you (injuries, accessibility)
• Process web payments (via Stripe) and iOS App Store membership (via Apple as merchant of record), including matching an App Store transaction to your account using the opaque appAccountToken
• Send transactional communications (receipts, reminders, security codes)
• Send marketing communications only if you separately opt in, or — if you were a client of the previous booking platform — under inferred consent as described in Section 13 (unsubscribe any time)
• Improve our services using first-party viewing activity (which classes members watch, for how long, and how far through) so Angela can see what the library is used for. This is in-service analytics on our own servers — not advertising, and we do not send your identity to Mux for viewer analytics
• Improve our services using de-identified analytics where possible
• Meet legal obligations (tax, health-record retention, dispute resolution)

We do not use your health information for a new purpose without asking you first.

6. WHO WE SHARE IT WITH

We never sell your data. We share it only with processors that run the service, under agreements requiring protection to Australian standards:

7. OVERSEAS DISCLOSURE

Because these providers may store or process information outside Australia, this is a cross-border disclosure under APP 8 and HPP 14. There is no ministerial country whitelist published as of August 2026 — we use contractual data-processing protections with our processors and remain accountable to you. Apple Pty Limited operates the Australian App Store; Apple Inc. processes App Store billing in the United States.

8. HEALTH RECORDS & RETENTION

Because we are a NSW health service provider, records containing your health information are kept for at least 7 years from the last entry (or until your 25th birthday if collected while you were under 18), as required by section 25 of the HRIP Act. When information is no longer needed, we delete or de-identify it.

Account deletion de-identifies your personal details; health records we must retain are segregated and explained in the deletion flow. Deleting your evermoves account does not cancel an App Store subscription. Apple may keep billing your Apple Account until you cancel in iOS Settings. We keep enough de-identified payment identifiers to recognise a later Apple notification and to meet tax retention. See /legal/subscription and the deletion summary in Account → Privacy.

9. HOW WE PROTECT IT

Encryption in transit (TLS) and at rest, multi-factor authentication for staff, role-based access (health information visible only to staff who need it), audit logging of access to member records, and regular security review. Web payment card data is handled by Stripe (PCI-DSS Level 1). App Store payment card data is handled by Apple; we never see it.

10. ACCESS, CORRECTION & DELETION

Under APPs 12 & 13 and HPPs 6–8 you can:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account (we de-identify anything we must legally retain)
• Withdraw consent (marketing and health imports) at any time

Email info@evermoves.com.au — we respond within 30 days.

If you have a live App Store membership, we will ask you to acknowledge that Apple keeps billing until you cancel in Settings before we complete deletion. That acknowledgment is required so we do not silently delete an account Apple will keep charging.

11. COMPLAINTS

If you are unhappy with how we have handled your information, contact us first — we respond within 30 days. You may also complain to:

• Office of the Australian Information Commissioner (OAIC): oaic.gov.au · 1300 363 992
• Information and Privacy Commission NSW (IPC) (health information): ipc.nsw.gov.au · 1800 IPC NSW (1800 472 679)

12. COOKIES & EMBEDDED CONTENT

We use essential cookies for sign-in, security, and site delivery. We do not use advertising cookies or third-party analytics cookies that identify you.

Separately, when you watch a class in the member app we record first-party in-service viewing activity on our own servers (which class, when, how long, how far through, and whether playback reached the end). That is not a cookie, is not shared with advertising networks, and is not sent to Mux as a viewer identity. Watch-session rows are hard-deleted when you delete your account, and any leftover rows older than 400 days are deleted automatically. See our Cookie Notice at /legal/cookies.

If you interact with embedded content (Google Maps on our contact page, Instagram on our home page, or Spotify playlists in the member app), those providers may set their own cookies under their own policies.

13. DIRECT MARKETING

Marketing email for new members requires a separate opt-in at signup (unchecked by default). Marketing SMS requires separate SMS consent — email opt-in does not cover SMS.

If you were a client of the previous booking platform (Arketa), we imported your name, email, phone, last visit date, membership status on that platform, and the marketing-email / marketing-text opt-in flags recorded there. Angela may email that list under inferred consent from the existing customer relationship (Spam Act s16(2)), or under the marketing-email opt-in recorded on Arketa. Those emails always include a one-click unsubscribe that works without signing in, and we stop as soon as you opt out. Marketing SMS to that list is sent only if Arketa recorded a marketing-text opt-in; every such text ends with Reply STOP to opt out. If you later create a member account with the same email and turn marketing email or SMS off, we honour that opt-out even on the imported list.

Every marketing message includes a functional unsubscribe honoured within 5 working days.

14. PHOTOGRAPHY & RECORDING

Classes and events may be photographed or recorded. We collect your image, voice and likeness only with your consent via our Photography & Recording Consent form before marketing use or before your first live-stream class where you may appear on camera.

15. DATA BREACHES

If a data breach is likely to cause serious harm, we will notify affected individuals and the OAIC as soon as practicable under the Notifiable Data Breaches scheme.

16. CHILDREN & AGE

evermoves is for people aged 16 and over. Participants aged 16–17 may join only with verified guardian consent; under-16 signups are blocked outright. We collect date of birth to enforce this standard.

17. UPDATES

We may update this policy. Material changes will be emailed to active members and, where a required consent version changes, you will be asked to re-accept before using the member app. Last updated: 14 September 2026.

18. CONTACT

Privacy Officer · Angela Saville · info@evermoves.com.au
114k Cawley Street, East Corrimal NSW 2518

Related policies

• Terms of Use
• Participant Waiver
• Subscription Terms
• Cookie Notice
• Refunds & Credits Policy
• Accessibility Statement