Privacy policy

Your information stays under your control.

This policy explains what Big Rich collects, why it is used, the choices available to you and how to request export or deletion.

Last updated 14 October 2026

Effective date: 7 October 2026.

Who this policy covers

This policy applies to the Big Rich mobile app, web app and public website. Big Rich provides fitness planning, logging, coaching and progress-review tools. It is not an emergency or medical-diagnosis service.

Information you provide

  • Account and profile: email address, display name, age, birth year and optional birthday day/month, sex, timezone, preferences, goals and membership status. These demographic fields support age-appropriate functionality and personalised coaching and planning; they are not used for advertising.
  • Training and nutrition: plans, workouts, sets, repetitions, loads, tempo, meals, recipes, calorie and macro targets, supplements and adherence records.
  • Health and progress: weight, body composition, measurements, sleep, heart and workout signals, blood-result context and other records you choose to add or connect.
  • Content: chats, voice or text instructions, photos, videos, documents, links, form-review media, feedback and support requests.
  • Purchase evidence: product, transaction and subscription status received from Apple or Google. Big Rich does not receive your complete card details.

Information collected when the service runs

Big Rich may collect app activity, feature use, device and app version, notification token, crash and diagnostic information, referral attribution and security records. If you enable optional analytics, analytics providers may derive an approximate region from a masked IP address and measure app and subscription lifecycle events, such as subscription starts, renewals, cancellations, product or plan, price and status. Big Rich does not request precise device location for these analytics. Optional product analytics is off until you enable it in Privacy & AI settings. Connected-health imports use separate consent and device permissions. Advertising identifiers and advertising consent are disabled in the mobile app.

How information is used

  • Provide accounts, plans, logging, progress reports, sharing, subscriptions and support.
  • Personalise coaching from the records and permissions you choose to provide.
  • Process AI-assisted requests, speech, media analysis and other selected features.
  • Verify store purchases, prevent fraud, secure the service and keep an auditable transaction history.
  • Measure reliability and improve features using privacy-controlled analytics and diagnostics.
  • Meet legal, safety, tax, accounting and store-platform obligations.

AI and service providers

Big Rich uses Google Cloud for hosting, account services and storage; Apple and Google for app-store purchases; and service providers for messages, media and diagnostics. AI-assisted coaching uses OpenAI, ElevenLabs and Tavus according to the selected feature. HeyGen is used for approved video production. Before enabling AI processing, you see the recipients and data categories and must explicitly allow sharing. You can decline and continue manual logging, access saved records, export data and manage your account.

  • OpenAI: selected messages, documents, photos or speech, and relevant profile, goals, training, nutrition and progress context for AI-assisted features. Health connections have an additional coaching-sharing choice.
  • ElevenLabs: audio and relevant coaching context for supported voice sessions, or text for generated speech.
  • Tavus: audio, video and relevant coaching context during live avatar sessions.
  • HeyGen: approved audio and video-production details for generated videos. The current app does not automatically submit your private coaching records to HeyGen.
  • Google Firebase, PostHog and Adjust: optional app analytics, including static screen names, product interactions and app/device diagnostics. Health records, private media and chat text are excluded from product analytics.

Providers may process information outside Australia, including the United States. They are required to protect information under applicable law and the service agreements for their processing, with protections equal to those described in this policy. Big Rich does not sell health information or private media, use it for advertising, or permit AI processing without your selected permission. OpenAI Responses requests use storage disabled. Other provider retention depends on the selected service and its applicable terms; withdrawing permission stops future processing and does not recall information already processed.

Connected health information

Apple Health and other supported health connections are optional. Big Rich requests only the categories shown in the connection screen, reads them only after the platform permission and Big Rich import consent are granted, and does not write records to Apple Health. A separate choice controls whether imported records may be used as context for personal coaching. Connected health and fitness information is not used for advertising, marketing or general-purpose profiling, and is not shared for those purposes. Disconnecting a provider stops future imports; the provider-data removal control also removes its imported records and derived Big Rich workout records.

Sharing

Records are private unless you use a sharing feature or grant another Big Rich member access. Shared links and account permissions can be managed in the app. If you join a group or collaborate on a plan, we store the member and collaborator relationships, display names, messages and other content needed to provide those features. Member-only group messages are available to eligible members and can be reported or deleted through the app. Community photos you deliberately choose to share are held private for review by Big Rich moderators before publication. We store moderation reports and blocked-member preferences to operate community safety controls. Information may also be disclosed to service providers, Apple or Google for billing, or authorities where legally required. Big Rich does not sell personal information.

Storage, security and retention

Big Rich uses access controls, encryption in transit, restricted service credentials, audit records and backups. No system can guarantee absolute security. Account records are kept while your account is active and for the period needed to provide the service. Limited billing, security, backup and legal records may be retained after deletion where required, then removed or de-identified under the applicable retention schedule. Privacy-safe raw app-activity audit metadata is retained for up to 30 days and compact daily trend totals for up to 365 days, unless you delete the account sooner. Public share links expire on the date you choose, no later than 365 days after publication, and are removed when the account is deleted. Store transaction, tax and fraud-prevention records are retained only for the period required to meet accounting, platform, security or legal obligations. Operational backups age out under the hosting provider's restricted backup lifecycle and are not restored as an active personal profile after deletion.

Your choices and rights

Privacy & AI settings let you withdraw AI-processing permission and disable optional analytics. You can also manage device permissions, health connections, notifications and sharing in the app. Withdrawing AI permission stops future personal AI generation, including background analysis. Previously saved records remain available. Account settings provide data export and permanent account deletion. You can also use the public account-deletion instructions or contact support. Deleting Big Rich does not automatically cancel an Apple App Store or Google Play subscription; manage that subscription in the same store.

Children

Big Rich is intended for adults and is not directed to people under 18. If you believe a child has provided personal information, contact support so it can be reviewed and removed.

Contact

Send privacy and data requests through the support form. We save your reply contact details and message so the team can review your request. Account ownership must be verified before access, export or deletion. Do not send passwords or authentication codes.