Privacy Policy

1. Who we are

StrengthOS is operated by CloudNamaste Pty Ltd (ABN 96 687 581 317), a company incorporated in New South Wales, Australia. References to "we", "us", or "our" in this policy refer to CloudNamaste Pty Ltd.

We operate the StrengthOS web application at strengthos.com.au and the StrengthOS mobile application (collectively, the "Platform").

2. What information we collect

• Account information: Email address, display name, and password (hashed — we never store plaintext passwords). Managed via AWS Cognito.
• Training data: Session logs, sets, reps, weights, RPE ratings, and estimated one-rep maxes (e1RM) you record through the Platform.
• Body metrics: Bodyweight entries you optionally log.
• Competition data: Meet dates and competition details you enter.
• Program data: Programs you enrol in, progress through blocks, and any coach programs you purchase.
• Usage data: Pages visited, features used, and general interaction data collected via server logs.

3. How we use your information

• To provide and operate the Platform — session logging, progress tracking, and program management.
• To generate AI-powered coaching insights from your training data (Pro feature). Insights are produced by Anthropic's Claude AI using your structured training history; no personally identifying information is included in AI prompts beyond your training numbers.
• To authenticate your account and maintain session security.
• To process payments for Pro subscriptions and coach program purchases.
• To send transactional emails (account verification, password reset). We do not send marketing emails without your consent.
• To improve the Platform based on aggregated, anonymised usage patterns.

4. AI and your data

Pro subscribers receive AI coaching insights generated by Anthropic's Claude API. When generating insights, we send your structured training data (sets, reps, weights, e1RM trends, flagged patterns) to Anthropic's API. We do not send your name or email address. Anthropic's data handling is governed by their Privacy Policy.

5. Third-party services

We use the following third-party services to operate the Platform:

• AWS Cognito — authentication and identity management.
• AWS S3 — storage of coach program files (PDF/Word).
• AWS Lambda — server-side computation for plan parsing and insight generation.
• Vercel — web application hosting.
• Anthropic Claude API — AI coaching insights (Pro only).
• Cloudflare Turnstile — bot detection on signup to prevent fraudulent account creation. Collects device and browser signals for fraud-prevention scoring only, not for analytics or advertising.
• Stripe — payment processing for subscriptions and program purchases.

6. Data storage and security

Your data is stored on servers located in Australia and the United States. We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level access controls to protect your information. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your rights

Under the Australian Privacy Act 1988 and Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your account and associated data.
• Opt out of any marketing communications.

To exercise any of these rights, contact us at privacy@cloudnamaste.com.

8. Data retention

We retain your account and training data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g. transaction records).

9. Cookies

The Platform uses a session cookie (strengthos-session) solely to maintain your authenticated session. We do not use advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

11. Contact

If you have questions or complaints about this policy or our privacy practices, contact us at: