MyBodyLab Privacy Policy
Last updated: 30/01/2026
This Privacy Policy is governed by the laws of New South Wales and the Commonwealth of Australia, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
MyBodyLab Technologies Pty Ltd ACN 694 740 602 ("MyBodyLab", "we", "us", "our") operates the MyBodyLab mobile application, website, and related services (collectively, the "Services").
We are committed to managing personal and health information in accordance with applicable privacy laws and recognised industry standards for health technology platforms.
By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described below.
1. Scope and Definitions
"Personal information" has the meaning given in the Privacy Act 1988 (Cth) and includes information or an opinion about an identified individual or an individual who is reasonably identifiable.
"Sensitive information" includes health information and biometric data, including body composition data derived from DEXA scans.
2. Categories of Information Collected (APP 3)
2.1 Personal Information
We may collect personal information including, but not limited to:
- Name, email address, username and account credentials
- Demographic information (age, sex)
- Contact details and profile information
2.2 Sensitive and Health Information
We may collect sensitive information with your consent, including:
- DEXA scan data and body composition metrics (e.g. body fat %, lean mass, bone density, visceral fat)
- Health, fitness, and lifestyle data you provide or synchronise
- Data imported from connected devices, platforms, or clinics
2.3 Technical and Usage Data
We may collect technical and usage information including:
- Device identifiers and system information
- Application usage patterns and interaction data
- IP address, log data, and diagnostic information
- Cookies and similar technologies (website)
2.4 Third-Party Data Sources
We may receive information from:
- Independent clinics or service providers
- Technology partners and integration providers you choose to connect
- Analytics, infrastructure, and payment providers
3. Purposes of Collection and Use (APP 5 & 6)
We collect and use personal and sensitive information for the following purposes:
- Providing, maintaining, and improving the Services
- Generating reports, insights, and longitudinal health analytics
- Enabling interoperability between MyBodyLab and external clinics or platforms
- Personalising user experience and functionality
- Conducting research, analytics, and product development using aggregated or de-identified data
- Communicating with users, including service notifications and support
- Ensuring platform security, fraud prevention, and regulatory compliance
We do not sell personal information.
4. Data Sharing with Clinics and Third Parties
4.1 Sharing with Precision Body Lab and Other Clinics
MyBodyLab may receive health data from independent clinics where you have undergone assessments or testing. Such data may be used to:
- Populate and update your MyBodyLab account
- Enable longitudinal tracking and analytics
- Enhance the accuracy and functionality of the Services
This data sharing occurs only with your consent or where otherwise permitted by law.
4.2 Disclosure to Service Providers and Partners (APP 6 & 8)
We may disclose personal information to trusted third parties, including:
- Cloud infrastructure providers
- Analytics and technology service providers
- Professional advisers and regulators where required by law
Where personal information is disclosed overseas, we take reasonable steps to ensure recipients comply with privacy obligations equivalent to Australian standards.
We may use aggregated or de-identified data for research, commercial, and strategic purposes.
5. Consent and Control
You may control the collection and sharing of your information through account settings and permissions. Where required, we will obtain explicit consent before collecting or using sensitive information.
You may withdraw consent at any time, subject to legal and operational constraints.
6. Data Security and Governance (APP 11)
We implement administrative, technical, and physical safeguards designed to protect personal and sensitive information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include:
- Encryption and secure data storage
- Role-based access controls
- Continuous monitoring and security practices
While we take reasonable steps to safeguard information, no system can be guaranteed to be completely secure.
7. Data Retention and De-identification (APP 11)
We retain personal information only for as long as reasonably necessary to fulfil the purposes outlined in this Privacy Policy or to comply with legal obligations.
We may de-identify personal information and retain it for research, analytics, and business purposes.
8. Access, Correction, and Complaints (APP 12 & 13)
You may request access to, correction of, or information about the handling of your personal information by contacting us.
If you believe we have breached the APPs, you may lodge a complaint with us. We will investigate and respond within a reasonable timeframe. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
9. AI and Medical Disclaimer
The Services may incorporate algorithms, machine learning models, and artificial intelligence to generate insights, recommendations, predictions, simulations, or visualisations.
You acknowledge and agree that:
- Outputs generated by the Services are provided for informational and educational purposes only
- The Services do not provide medical advice, diagnosis, or treatment
- AI-generated outputs may be incomplete, inaccurate, or unsuitable for your individual circumstances
- You remain solely responsible for decisions made based on information provided by the Services
- You must seek advice from a qualified healthcare professional before making any health, medical, or fitness decisions. To the maximum extent permitted by law, MyBodyLab disclaims all liability arising from reliance on AI-generated outputs or analytical insights.
10. Children and Minors
The Services are not intended for use by individuals under 18 years of age without parental or guardian consent. We do not knowingly collect sensitive information from minors without appropriate consent.
11. Cookies and Tracking Technologies
We use cookies and similar technologies on our website to enhance functionality and analyse usage. You can manage cookies through your browser settings.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any updates will be published within the Services or on our website and take effect from the date of publication.
13. Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of New South Wales and the Commonwealth of Australia. You agree to submit to the exclusive jurisdiction of the courts of New South Wales in relation to any dispute arising from this Privacy Policy or the Services.
14. Contact Information
For questions, requests, or complaints regarding this Privacy Policy or your personal information, contact:
MyBodyLab Technologies Pty LtdEmail: hello@mybodylab.ai
Website: www.mybodylab.ai