Privacy Policy

Last updated: April 10, 2026

XL Fitness AU Pty Ltd ("XL Fitness", "we", "us", or "our") operates the XL Fitness mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use the App.

1. Information We Collect

We collect only limited personal information through the App. The primary information we collect is your email address, which you provide when requesting a one-time passcode or one-time login code so that we can authenticate your access to the App.

We do not collect your camera data, microphone data, photo library content, contacts, precise or approximate location, messages, call history, or other device data through the App. We also do not use the App to collect advertising identifiers or tracking data for marketing purposes.

2. Information Displayed in the App

The App displays information that already exists in XL Fitness's gym management system. This may include your name, gamertag, avatar, workout sessions, exercises, sets, weights, and personal bests. This information is generally created and maintained by gym staff as part of your membership and training records. The App acts as a viewer for that information and does not create that workout data itself.

3. How We Use Your Information

We use your email address solely to verify your identity and send you a one-time login code so that you can securely access your account in the App. We use the information shown in the App to provide you with access to your membership-related training records and profile information.

We do not use your personal information for advertising, behavioural profiling, cross-app tracking, or marketing. We do not sell your personal information.

4. App Permissions and Device Access

The App is designed to operate without accessing sensitive device permissions such as your camera, microphone, contacts, photo library, or location services. If this changes in a future version of the App, we will update this Privacy Policy and any required in-app disclosures before or at the time the change is introduced.

5. Data Storage and Security

Your data is stored securely on servers located in Australia. We use encryption in transit to protect communications between the App and our systems. Authentication information stored on your device is kept using secure storage mechanisms provided by your mobile operating system.

While we take reasonable steps to protect personal information, no method of electronic transmission or storage is completely secure. However, we maintain safeguards designed to reduce the risk of unauthorised access, loss, misuse, or disclosure.

6. Data Sharing

We do not sell, rent, or share your personal information with third parties for advertising, marketing, or independent commercial use. We do not disclose your personal information to data brokers.

We may disclose information where required to do so by law, regulation, court order, or lawful government request, or where disclosure is reasonably necessary to protect our legal rights or the safety of our members, staff, or services.

7. Data Retention

We retain your information for as long as you remain a member of XL Fitness, or for as long as reasonably necessary to maintain your training records, meet operational requirements, and comply with applicable legal obligations. If you would like your information deleted, you may contact us using the details below and we will review your request in accordance with applicable law and our record-keeping obligations.

8. Your Choices and Requests

You may contact us at any time to request access to your personal information, request correction of inaccurate information, or request deletion of your data. If you no longer wish to use the App, you may stop using it at any time. If you request deletion, some information may need to be retained where required for legal, administrative, or legitimate business record-keeping purposes.

9. Children's Privacy

The App is intended for XL Fitness gym members. We do not knowingly collect personal information directly from children under the age of 16 through the App. If you believe that a child under 16 has provided personal information to us in a manner not intended by this Policy, please contact us and we will take reasonable steps to investigate and address the issue.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the App, our business practices, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. Your continued use of the App after an updated Privacy Policy is published will be subject to the revised Policy.

11. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or your personal information, please contact us using the details below.

XL Fitness AU Pty Ltd
Email: reception@xlfitness.com.au
Website: https://xlfitness.com.au