Privacy Policy

Last Updated: October 2026

1. Introduction

Metconic Training Pty Ltd (“Metconic”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy details how we collect, use, store, and protect your information when you use the Metconic mobile application and website. We adhere strictly to the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

2. Data We Collect

To provide our elite analytics and execution engine, we collect the following categories of data:

  • Account Information: Name, email address, and authentication credentials.
  • Performance Data: Workout logs, load metrics, estimated 1-rep maximums (E1RM), and historical macrocycle data.
  • Biometric Telemetry: Heart rate, heart rate zones, calories burned, stroke rate, and wattage. This data is only collected with your explicit opt-in consent via connected third-party APIs.

3. Third-Party Hardware & API Integrations

Metconic integrates with third-party platforms to synchronize your training data. By authorizing these connections, you consent to the ingestion of data from:

  • Garmin Connect API: For cardiovascular telemetry, daily activity metrics, and workout synchronization.
  • Concept2 Logbook API: For precise ergometer split tracking, drag factors, and stroke rates.
  • Health Connect / Apple HealthKit: For localized on-device biometric synchronization and deduplication.

When you use the Text Importer, workout finder or program generator, the workout text or program preferences you enter, along with a summary of which library workouts you have recently completed, are sent to Google’s Gemini AI service to produce the result; your biometric data is never sent.

Strict Biometric Guarantee: Metconic uses your biometric and telemetry data exclusively to generate your personal athletic analytics (such as EWMA and Fatigue Mapping). We do not, and will never, sell, lease, or transfer your biometric health data to third-party data brokers, advertising networks, or unauthorized entities.

4. Gyms and Coaches

You can join a gym using a join code provided by your coach. By joining a gym, you agree that the gym’s owner (your coach) can see your training data for coaching purposes, including:

  • Your name alongside your workout results, lifts and scores, including where you rank against other members of the gym.
  • Your training detail, such as progress over time, splits, workload and time in heart-rate zones.

Coaches see this information only for gyms they own or coach at, and only for members of those gyms. Other members do not see your detailed training data. You can stop sharing at any time by leaving the gym.

Military units: if you join a unit’s platoon or troop with its join code, you also become part of the sub-unit and unit above it. The same training data listed above can then be seen by the unit’s Physical Training Instructors (PTIs), across the whole unit, and by the ADF Fitness Leaders appointed to your sub-unit or to your platoon or troop. Members of your platoon or troop, sub-unit and unit can see your name and headline scores on their leaderboards, as described below. Leaving the platoon or troop stops all of this.

Gym leaderboards: other members of your gym can see your name and headline scores (workout times, rounds and reps, and tested lift weights) on the gym’s leaderboards. They never see your heart rate, splits, workload or other training detail. You can hide yourself at any time by turning off “Show me on gym leaderboards” in your profile.

Anonymous global comparison (“How you compare”): once a night, your best as-prescribed (Rx) result for each workout is pooled with other athletes’ results to show where scores sit, for example “better than 64% of men aged 30–39”. Only counts, percentiles and score ranges are kept, never your name, account or individual scores, and a group (by sex and age band, which comes from your date of birth if you’ve given it) is shown only once at least 20 athletes are in it. Scaled results and team scores aren’t included. You can leave it out at any time by turning off “Include my scores in anonymous global stats” in your profile; your scores are removed from the next nightly update.

5. Data Storage and Security

Your data is secured using enterprise-grade encryption both in transit and at rest. Our backend infrastructure is hosted on Google Cloud (Firebase), maintaining strict ISO 27001 and SOC 2 compliance. OAuth 2.0 access tokens for third-party integrations are securely encrypted within your isolated user profile.

Where your data is kept: your account data and training data are stored in, and processed by our servers in, Google Cloud’s Sydney region (Australia). The exceptions are the AI features described above, whose requests are handled by Google’s Gemini service, which may process them outside Australia, and crash reports (below).

Crash reports: if the mobile app crashes, it sends a crash report to Google’s Firebase Crashlytics so we can fix the problem. A report contains the error and where in the app it happened, your device model, operating system and app version, and your Metconic account ID; it never contains your name, email, workouts or health data. You can turn crash reports off at any time with “Send crash reports” in your profile.

6. Data Retention and Deletion

We retain your data only for as long as necessary to provide our services. You can delete your account at any time in the Metconic app or web app under Profile & Gym → Delete account, or by contacting our support team. Deleting your account permanently removes your profile, workouts, training history, biometric telemetry and connected-service tokens from our active servers, along with any gyms you own.

7. Contact Us

If you have questions about this Privacy Policy, your biometric data, or our integration practices, please contact our Data Protection Officer at:
privacy@metconictraining.com