Privacy Policy

Effective date: 6 July 2026 This Privacy Policy explains how Marathon State of Mind AI Pty Ltd (ABN 41 698 061 228) collects, uses, stores, discloses and protects your personal information. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where the EU/UK General Data Protection Regulation applies to you, we also respect the rights it gives you. 1. What we collect Account and profile information — Name and email address (collected when you sign in through our identity provider). — Program or race code, and (for some race partnerships) your race registration number. — Optional demographic information you choose to provide: age range and gender. — Your race goal and race date, and the personal foundations you set in the App (such as your purpose, values and strengths). Wellbeing and coaching content (sensitive information — collected only with your consent) — Journal entries, pre- and post-run intentions and reflections. — Check-ins and self-assessment responses about your mindset and wellbeing. — Your conversations with the AI coach, whether typed or spoken (spoken input is stored as a transcript). — Race plans, simulation conversations, and program reflections. This information can reveal things about your psychological wellbeing, which the Privacy Act treats as sensitive information. By using these features you consent to us collecting and handling this information as described in this Policy. You can use much of the App without providing any particular entry — what you share is up to you. Voice recordings When you use voice mode, your speech is sent securely to our transcription provider and converted to text. We do not store the audio recording — only the transcript, which becomes part of your conversation. Usage and technical information Information about how you use the App (for example which sessions you complete, audio you listen to, and feature usage), device and browser information, and logs needed to run and secure the Services. Our sign-in system uses an encrypted, essential session cookie. We do not use advertising cookies. 2. How we use your information We use your information to: — provide the Services — including generating AI coaching conversations, transcribing your voice input, producing spoken replies, and creating summaries of your own entries (such as weekly reviews and your profile reflection); — personalise your experience — for example so the coach and program reflect your goals, values and progress; — operate your account, free access period or subscription, and process payments; — communicate with you about the Services (service messages), and — only if you opt in — send you marketing emails, which you can unsubscribe from at any time; — monitor, secure and improve the Services; and — comply with our legal obligations. We do not sell your personal information, use it for third-party advertising, or allow our AI providers to use it to train their general models. 3. Who we share it with We share personal information only with service providers that help us run the Services, under agreements or terms that restrict their use of it: — Identity and sign-in: your login identity (name, email) — Database hosting: your account and App data — Application hosting: data in transit as the App runs — AI language model provider: conversation and reflection content needed to generate coaching responses and summaries — Speech-to-text provider: your voice audio, transcribed and not retained for training — Text-to-speech provider: the coach's reply text, converted to audio — Video hosting: program video delivery (viewing data) — Email platform: your name, email, cohort and consent status — Payment processor: your payment details (we never store full card numbers) We may also disclose information where required by law, or to protect the safety of a person or the security of the Services. Overseas disclosure (APP 8): some of these providers store or process data outside Australia, principally in the United States. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the APPs. 4. How we protect it — All data is encrypted in transit (HTTPS). — Sessions are protected with encrypted, httpOnly cookies. — Your data is stored in access-controlled databases, and every request for your data is checked against your authenticated account — your entries are never accessible to other users. — AI, transcription and voice requests are made only from our servers; your browser never communicates directly with those providers using our keys. No system is perfectly secure, but we take the protection of your reflections seriously — they are the most personal thing you give us. 5. Retention and deletion We keep your information while your account is active so your coaching history, program progress and reflections remain available to you — including if your paid access lapses and you return later. You may ask us to delete your account and personal information at any time. We will delete or de-identify it within a reasonable period, except where we are required to retain some records by law (for example, transaction records). 6. Your rights You may at any time: — request access to the personal information we hold about you; — request correction of inaccurate information; — withdraw marketing consent (every marketing email has an unsubscribe link); — request deletion of your account and data; and — complain about our handling of your information. To exercise any of these rights, contact rory@marathonstateofmind.com. We will respond within a reasonable time. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au. If the GDPR applies to you, you also have rights to data portability, restriction and objection, and may complain to your local supervisory authority. 7. Children The Services are not directed at children under 16. If you are under 18, please involve a parent or guardian, and only use the Services with their consent. If we learn that we hold personal information of a child under 16 without appropriate consent, we will delete it. 8. Changes to this Policy We may update this Privacy Policy from time to time. We will post updates on this page, and for significant changes we will notify you in the App or by email. 9. Contact Marathon State of Mind AI Pty Ltd (ABN 41 698 061 228) Email: rory@marathonstateofmind.com MARATHON STATE OF MIND ©