ONE BODY – PRIVACY POLICY

ONE BODY respects your privacy and complies with the Privacy Act 2020 (NZ).

1. What we collect
We may collect:

Account information

• Name
• Email
• Organisation
• Trade or role

Usage data

• Logins
• Exercises completed
• Programme progress
• Engagement with content

Technical data

• Device type
• App version
• IP address

We do not require medical history, diagnoses, or sensitive health data.

2. Why we collect it
We use your information to:

• Deliver your programme
• Track progress
• Provide reporting
• Improve the platform
• Support enterprise customers

3. Enterprise and organisational users
If your account is provided by an organisation:

That organisation may see:

• Licence status
• Usage and engagement
• Cohort-level statistics

They do not receive:

• Medical data
• Personal notes
• Messages or private content

4. Data sharing
We do not sell your personal data.

We may share data with:

• Hosting and analytics providers
• Support and infrastructure partners
• Your organisation (in aggregated or licence-level form)

5. Data storage
Data is stored in New Zealand and/or Australia using secure cloud infrastructure.

We apply:

• Encryption
• Access controls
• Audit logs
• Regular security monitoring

6. Data retention
We retain data while your account is active and as required for:

• Reporting
• Legal compliance
• Contractual obligations

If your licence ends, your account may be deactivated and data retained in line with contractual and legal requirements.

7. Your rights
You have the right to:

• Access your data
• Correct errors
• Request deletion (where legally allowed)
• Ask how your data is used

Requests can be sent to:
info@one-body.co.nz

8. Data breaches
If a serious privacy breach occurs:

• We will notify affected users
• We will notify the Privacy Commissioner as required

9. Changes
We may update this policy. The current version will always be available in the app or on our website.

10. Contact
For privacy or data questions:
info@one-body.co.nz