1. Who We Are
Fitness Tests (“the Service”) is operated by ConnectedPE Pty Ltd (“we”, “us”, or “our”), ABN registered in Australia.
Contact: jarrod@connectedpe.com
The Service is available as a web application at fitnesstests.app, a native iOS app (App Store), and a native Android app (Google Play). This policy applies to all three platforms.
2. What Data We Collect
2.1 Data you provide directly
- Account information: email address and password (or third-party authentication token via Google or Apple Sign-In)
- Profile data: name, gender, date of birth, height, weight, unit preference (metric/imperial), avatar colour, and optional tagline. Gender and date of birth are used to provide age- and gender-specific normative fitness ratings — they are not used for any other purpose.
- Fitness test results: numeric values, optional notes, and the date/time of recording
- Goals: target test, target value, and target date
- Custom tests: test name, description, category, unit type, scoring direction, and optional normative data thresholds
- Teams: team name and join code. When you join a team, your profile name and profile ID are shared with the team coach.
- School information: school name, admin email, and teacher email addresses (school plan only)
2.2 Data collected automatically
- Usage analytics: we use Firebase Analytics (Google) to collect anonymised usage data such as which features are used, session duration, and app version. This data is not linked to your identity and is used solely to improve the Service.
- Device information: platform (iOS, Android, web), operating system version, and app version — collected automatically by Firebase for crash reporting and compatibility purposes
- Purchase information: subscription status and entitlement data is managed by RevenueCat (for in-app purchases) and Stripe (for school plan billing). We do not store credit card numbers or payment method details — these are handled entirely by Apple, Google Play, or Stripe.
2.3 Data we do NOT collect
- We do not access your camera, microphone, contacts, or location
- We do not use Facebook authentication or any social media login other than Google and Apple
- We do not sell or share your data with advertisers
- We do not use your data for targeted advertising or profiling
3. How We Use Your Data
- To provide the Service: storing your profiles, test results, goals, templates, and team memberships so they sync across all your devices
- To calculate fitness ratings using age- and gender-based normative data tables
- To generate progress reports, certificates, and data exports (PDF, CSV) that you request
- To manage your subscription status and premium features
- To improve the Service based on anonymised usage analytics
- To communicate with you about your account (e.g. password reset emails)
4. How We Store Your Data
All user data is stored in Google Firebase (Cloud Firestore), hosted on Google Cloud Platform infrastructure. Data is encrypted in transit (TLS) and at rest. Firebase servers are located in the United States.
The web application is hosted on Vercel. Vercel does not store your user data — it serves the application code only.
We retain your data for as long as your account is active. If you delete your account (available in the app under Profile → Delete My Account), all associated data is permanently deleted from our servers, including profiles, test results, goals, templates, sessions, custom tests, and team memberships.
5. Third-Party Services
We use the following third-party services:
- Firebase Authentication, Firestore, and Analytics (Google LLC) — user authentication, data storage, and anonymised usage analytics. Firebase Privacy Policy
- RevenueCat, Inc. — in-app purchase and subscription management for iOS and Android. RevenueCat Privacy Policy
- Stripe, Inc. — payment processing for school plan subscriptions (web only). We do not store card details. Stripe Privacy Policy
- Google Sign-In and Sign in with Apple — third-party authentication. We receive only your email address and display name from these providers.
- Vercel, Inc. — web application hosting. Vercel Privacy Policy
6. Children's Privacy
Fitness Tests is used in educational settings by students of all ages, typically under the supervision of a PE teacher or coach. When a teacher creates student accounts via CSV import or team join codes, the teacher is responsible for obtaining any required parental consent in their jurisdiction.
We collect only the minimum data necessary to provide fitness testing functionality (name, gender, date of birth for normative ratings, and test results). We do not collect data from children for advertising or profiling purposes.
If you are a parent and believe your child's data has been collected without appropriate consent, please contact us at jarrod@connectedpe.com and we will promptly delete it.
7. Data Sharing
We do not sell, rent, or trade your personal data to third parties.
Your data may be shared in the following limited cases:
- Within a team: when you join a team, your profile name and test results are visible to the team coach (and to school administrators if the team is part of a school plan). This is the core functionality of the team feature.
- With third-party service providers: as described in Section 5, solely for the purpose of operating the Service
- Legal requirements: if required by law, regulation, or legal process
8. Your Rights
Depending on your jurisdiction (including under GDPR, CCPA, and the Australian Privacy Act), you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data (you can edit your profile directly in the app)
- Deleteyour account and all associated data (available in the app under Profile → Delete My Account, or by emailing us)
- Export your data (available via the CSV export feature in the app)
- Withdraw consent at any time by deleting your account
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at jarrod@connectedpe.com.
9. Data Security
We implement industry-standard security measures including encryption in transit (TLS/HTTPS), encryption at rest (Firebase), secure authentication (Firebase Auth with bcrypt-hashed passwords), and Firestore security rules that restrict data access to authenticated users and their own data.
No system is 100% secure. If you discover a security vulnerability, please report it to jarrod@connectedpe.com.
10. Cookies and Tracking
The web application uses Firebase Analytics, which may use cookies or local storage to distinguish unique users and sessions. We do not use advertising cookies or third-party tracking pixels.
The iOS and Android apps do not use cookies. Firebase Analytics on mobile uses device identifiers that Apple and Google provide for analytics purposes.
11. International Data Transfers
Your data is stored on Google Cloud Platform servers in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. Google maintains appropriate safeguards for international data transfers, including Standard Contractual Clauses where required.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. For significant changes, we will notify you via email or an in-app notification.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact:
ConnectedPE Pty Ltd
Email: jarrod@connectedpe.com
Website: fitnesstests.app
