Legal

Privacy
Policy

Plus Ultra Health Pty Ltd · Last updated 19 January 2026

01

Introduction

Plus Ultra Health Pty Ltd (“Plus Ultra Health”, “we”, “us”, or “our”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (“Eliya”), web platform, and related services (collectively, the “Services”).

We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), as well as the Singapore Personal Data Protection Act 2012 (PDPA) where applicable.

Questions? Contact us at admin@plusultrahealth.com

02

Information We Collect

Information you provide directly

  • NameAccount identification, personalisation
  • Email addressAccount creation, communications, support
  • Date of birthAge verification (18+ requirement), program suitability
  • CountryData residency compliance, content localisation
  • State / ProvinceRegional compliance where applicable
  • Fitness archetype / goalsContent personalisation, program recommendations

Information collected automatically

  • Device informationDevice type, operating system, unique device identifiers
  • Usage dataFeatures accessed, time spent, interaction patterns
  • Log dataIP address, browser type, access times, referring URLs
  • Performance dataApp crashes, diagnostics, performance metrics

Information from third parties

  • Health and fitness dataFrom Apple Health, Google Fit, Strava, or Garmin — only with your explicit consent
  • Authentication dataFrom Google or Apple Sign-In — limited to name and email

Sensitive information

We do not collect sensitive information (as defined under the Privacy Act 1988) without your explicit consent. This includes health information beyond basic fitness metrics, racial or ethnic origin, political opinions, religious beliefs, and sexual orientation.

03

How We Use Your Information

  • Service deliveryCreating and managing your account, providing personalised fitness and rehabilitation programs, enabling communication with healthcare practitioners
  • PersonalisationRecommending exercises and programs based on your fitness archetype, customising content to your goals and experience level
  • CommunicationSending service-related notifications, responding to enquiries and support requests
  • Improvement and analyticsAnalysing usage patterns to improve our Services, conducting research and development
  • Safety and complianceDetecting and preventing fraud or abuse, complying with legal obligations
04

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • With your consent
  • With trusted service providers (cloud hosting, authentication, analytics, email)
  • With healthcare practitioners you are connected to
  • As required by law
05

International Data Transfers

Your information is primarily stored in Sydney, Australia. Where transfers occur to other jurisdictions, we ensure appropriate safeguards are in place including contractual protections equivalent to the Australian Privacy Principles and Singapore PDPA.

06

Data Retention

  • Account informationDuration of account + 2 years after deletion
  • Workout historyDuration of account + 2 years after deletion
  • Communication records7 years (regulatory compliance)
  • Analytics dataAnonymised after 2 years

You may request deletion of your account and associated data at any time.

07

Data Security

  • Encryption in transitTLS 1.3
  • Encryption at restAES-256
  • AuthenticationSecure login with optional multi-factor authentication
  • Access controlsLeast-privilege principles and regular security assessments
  • Incident responseDocumented procedures for security incidents
08

Your Rights

  • AccessRequest a copy of your personal information
  • CorrectionRequest correction of inaccurate or incomplete information
  • DeletionRequest deletion of your account and personal information
  • Withdraw consentWithdraw consent for optional processing
  • Data portabilityExport your data in a machine-readable format
  • ComplaintLodge a complaint with the relevant supervisory authority

Australia

Office of the Australian Information Commissioner

www.oaic.gov.au

1300 363 992

Singapore

Personal Data Protection Commission

www.pdpc.gov.sg
09

Children's Privacy

Our Services are intended for users aged 18 years and older. We do not knowingly collect personal information from individuals under 18 years of age.

10

Contact Us

Plus Ultra Health Pty Ltd

Privacy: admin@plusultrahealth.com

This Privacy Policy complies with the Australian Privacy Act 1988 and Singapore PDPA 2012.