Made For Summer Privacy Policy

Effective date: 25 October 2026 Operator: Made For Summer, ABN 24 432 082 466

Made For Summer respects the privacy of members and Try users. This policy explains what personal information we collect, why we collect it, how it is used and protected, when it may be shared, and how you can access, correct or delete it.

In this policy, Made For Summer, we, us and our mean Made For Summer, ABN 24 432 082 466.

1. Scope

This policy applies to the Made For Summer website, Try experience, application, purchases, customer support, account emails, marketing communications and related services.

Made For Summer is intended only for people aged 18 years and over. We do not knowingly provide accounts or programs to children.

Made For Summer is operated from Australia. People who access the service from another country may also have rights under mandatory local privacy laws. Requests concerning those rights can be sent to the contact address in this policy.

2. Information we collect

The information collected depends on how you interact with Made For Summer and which optional features you choose to use.

Identity, account and contact information

We may collect:

• your first name and email address;
• account identifiers, authentication records and sign-in activity;
• age or confirmation that you are at least 18;
• consent records, communication preferences and policy versions accepted; and
• customer-support requests and correspondence.

Purchase and access information

We may collect:

• the product or tier purchased;
• order, checkout, payment and entitlement identifiers;
• payment status, amount, currency, refund and dispute information;
• purchase and access dates; and
• records used to restore or verify purchased access.

Payments are processed by Stripe or another disclosed payment provider. We do not receive or store your complete payment-card number.

Onboarding and personalisation information

We may collect information used to generate or adapt your plan, including:

• age range, sex used for calculation, height, weight and activity level;
• goals, exercise experience, training location, available days, preferred times and session length;
• available exercise equipment;
• calorie pathway and estimated energy needs;
• cooking confidence, household size, meal timing and preparation preferences;
• dietary exclusions, allergy-screening answers and safety-screening answers;
• preferred challenge start date; and
• preferences for imagery and progress focus.

Some of this information may be health information or sensitive information under applicable privacy law. When we ask for sensitive information, we provide a short collection notice at that point and ask for an affirmative consent appropriate to the information and feature. Merely opening the app or reading this policy is not treated as consent to collect sensitive information.

Plan, activity and progress information

When you use the service, we may collect:

• selected and swapped meals, favourites, serving changes and shopping-list activity;
• meal completion, feedback and preparation choices;
• workout scheduling, exercise substitutions, completed workouts, sets, repetitions, loads, duration and workout feedback;
• readiness and safety check responses;
• water, steps and previous-night sleep entries;
• challenge dates, completed weeks and maintenance activity;
• optional journal entries, goals, body measurements and clothing-fit observations;
• optional progress photos and the privacy or marketing permission attached to each photo; and
• recommendations and trends generated from this information.

Try information

For Try access, we may collect your email address, first name, registration source, Try consent, Terms and Privacy Policy acceptance, marketing choice, access activity and conversion status.

Device, website and usage information

We may collect:

• browser, device, operating-system and approximate location information derived from an internet address;
• app and website interactions, page views and feature usage;
• error, security, performance and diagnostic events;
• cookie, local-storage and similar technology identifiers;
• referral, campaign and conversion information; and
• whether an account or marketing email was delivered, opened or interacted with.

We do not intentionally collect precise location through the app unless a feature clearly asks for it and you choose to provide it.

3. How we collect information

We collect information:

• directly from you during registration, onboarding, purchase, use, check-ins, support or communication;
• automatically from the app, website, browser or device when you use the service;
• from Stripe and other payment providers concerning payment and order status;
• from authentication, hosting, storage, email, analytics, security and support providers; and
• where authorised, from a landing page or referral source through which you registered for Try.

If you do not provide information required for eligibility, account access, payment or plan generation, we may be unable to provide the relevant service. Optional information can be omitted unless the feature states otherwise.

4. Why we use information

We may collect, hold, use and disclose personal information to:

• create, authenticate, secure and support your account;
• determine eligibility for a general adult program;
• generate and personalise meal, training and maintenance plans;
• provide swaps, shopping lists, workout progression and progress insights;
• save and synchronise choices and progress across signed-in devices;
• process purchases, upgrades, refunds, disputes and access restoration;
• provide Try access and, with consent where required, relevant offers;
• send sign-in, purchase, security, account, support and limited coaching communications;
• respond to questions, complaints, access requests and correction requests;
• detect fraud, misuse, unauthorised access and technical failures;
• operate, test, maintain and improve the app and website;
• measure service use, communications and marketing effectiveness;
• comply with tax, accounting, consumer, privacy and other legal obligations; and
• establish, exercise or defend legal claims.

We do not sell personal information. We do not use private progress photos for advertising or marketing without separate permission for the specific photo.

5. Health and sensitive information

Some onboarding, readiness, dietary, measurement, journal and progress information may be sensitive because it relates to health, physical characteristics or wellbeing.

We collect sensitive information with consent, ordinarily through an express choice in the app, or where otherwise permitted by law, and only where reasonably necessary to provide the requested feature, personalise the program, protect safety or meet legal obligations. Before collecting health, allergy, safety-screening or similar sensitive information, the app explains the categories collected, why they are needed, the main consequences of not providing them and how to withdraw optional consent. You can choose not to provide optional journal entries, measurements or progress photos.

Made For Summer is not a medical-record system and should not be used to store information needed for urgent or ongoing clinical care.

6. Personalised and automated recommendations

The app uses rules and calculations to personalise calorie pathways, meal options, training pathways, exercise substitutions, progression suggestions, safety responses and progress trends. The inputs may include profile and screening answers, goals, plan selections, meal and workout activity, readiness and habit entries, and previous performance. Software may automatically assign or adjust a suggested pathway, filter an unsafe or incompatible choice, calculate a trend or recommendation, and check purchase and entitlement records to determine which content an account may access.

Made For Summer also uses generative artificial-intelligence tools during the production and refinement of program content, including text, recipes, meal guidance, exercise guidance and visual assets. This content-production use is separate from the app’s rule-based personalisation of an individual member’s plan. Made For Summer does not intentionally submit member names, contact details, private journal entries, progress photos, health information or other sensitive personal information to publicly available generative-AI tools to create program content.

Unless expressly stated otherwise, AI-assisted program content has not been individually reviewed, verified, approved or endorsed by a doctor, Accredited Practising Dietitian, nutritionist, accredited exercise physiologist, physiotherapist or other qualified health or fitness professional. The limitations and safety responsibilities applying to that content are explained in the Terms of Use.

Decisions made solely by software can include entitlement and content-access checks, mathematical calorie-pathway calculations and predefined eligibility or safety gates. Decisions informed by software can include meal, swap, exercise, progression and training suggestions. These processes can significantly affect which plan or content is shown, but they do not make a medical diagnosis or replace professional judgment.

If you believe an automated personalisation, safety or access outcome is incorrect, contact support@madeforsummer.com.au. We can explain the relevant rule or information, correct inaccurate information and arrange human review where appropriate. A user must not attempt to bypass a safety restriction while a review is pending.

7. Cookies, local storage and tracking tools

Made For Summer may use cookies, browser storage, device storage and similar technologies for:

• sign-in, security and essential service operation;
• saving preferences, offline changes and session state;
• remembering consent choices;
• usage analytics and product improvement;
• error, performance and security monitoring;
• campaign and conversion measurement; and
• email-delivery and engagement measurement.

Essential technologies are required for account and app functionality. Non-essential analytics, advertising or marketing technologies will not be activated until any consent required in the user’s location has been obtained. The consent interface will identify the relevant purposes and provide a way to refuse or later withdraw non-essential consent. Browser controls can remove or block some technologies, but doing so may prevent parts of the service from working.

Where you consent, our public sales and Try pages use Google Analytics to measure visits and interactions, and Meta Pixel and related conversion-measurement tools to understand whether advertising leads to visits, registrations or purchases. These providers may receive online identifiers, device and browser information, page and campaign details, and event information. Made For Summer does not send health, nutrition, workout, onboarding-answer or journal content to these advertising or website-analytics tools. You can refuse or withdraw non-essential consent at any time through Privacy choices in the website footer.

We will update this policy and any applicable consent interface when material new tracking providers or purposes are introduced.

8. Who we share information with

We may disclose or make information available to:

• Supabase and related infrastructure providers for authentication, database, storage and server functions;
• Stripe and related payment providers for checkout, payment, fraud prevention, refunds and disputes;
• Vercel and related website and application hosting, content-delivery and security providers;
• Resend and related email-delivery providers, and any customer-support or communication provider we later disclose;
• Google Analytics, Meta and other disclosed analytics, performance, error-monitoring and conversion-measurement providers, where permitted by your consent choices;
• professional advisers, insurers, auditors and contractors who need the information for their work;
• regulators, courts, law-enforcement agencies or other parties where required or authorised by law; and
• a genuine purchaser or successor if Made For Summer or its relevant assets are sold or reorganised, subject to appropriate confidentiality and privacy protections.

Service providers may handle information only for authorised purposes under their contracts, terms and applicable law. We do not disclose private journal entries or progress photos to advertisers for their independent use.

9. Progress photos and marketing permission

Progress photos are optional and private by default. A photo may be stored securely in your signed-in account or, where secure upload is unavailable, on the device used to add it. Device-only photos may not be available on another device.

Made For Summer does not use progress photos for facial recognition, biometric identification or automated analysis of a person’s face or body. If that position changes, we will provide a new notice and obtain any consent required before the new processing begins.

Saving a photo does not grant marketing permission. If you actively permit a specific photo to be used, Made For Summer may use it for the purposes described in the permission shown to you, such as the website, social media or paid advertising. Your name is not included unless you agree separately.

You may withdraw permission for future use through the available control or by contacting support. We will stop new use within a reasonable period. Withdrawal may not require recall of material lawfully produced or published before withdrawal.

10. Marketing communications

We send marketing communications only where permitted, including where you have actively opted in. You may unsubscribe using the link in a message, an available account preference or support@madeforsummer.com.au.

A one-time purchase does not by itself constitute marketing consent. Marketing consent is recorded separately, including the source, date, scope and applicable wording or consent version. Every marketing email identifies Made For Summer, contains current contact information and provides an unsubscribe method that does not require account login. We action unsubscribe requests promptly and no later than five working days after receipt.

Withdrawing marketing consent does not stop essential messages concerning sign-in, purchases, account security, support, legal changes or service operation.

We retain a record of consent and withdrawal so that preferences can be respected and compliance demonstrated.

11. Overseas processing

We prefer Australian hosting regions for primary member data where they are reasonably available. Some providers, their related entities or subprocessors may nevertheless process or access information outside Australia.

Likely processing locations currently include Australia and the United States. Website delivery, payment, authentication and email providers may also use personnel, infrastructure or subprocessors in other countries in their current service networks. Provider locations may change as services evolve, and we review material new overseas arrangements before enabling them where practicable.

Before using providers that handle personal information overseas, we take reasonable steps appropriate to the circumstances, which may include reviewing security and privacy terms, using contractual protections, restricting access and purpose, and selecting Australian regions where available. Overseas laws may in some circumstances require a provider to disclose information to an overseas authority.

An up-to-date list of material providers, their purpose and likely processing locations is maintained in the Made For Summer provider register and is available by contacting support@madeforsummer.com.au.

12. Storage and security

Information may be stored in secure cloud systems and on the device used to access the app. We use safeguards appropriate to the information, including authenticated access, row-level account restrictions, private storage, limited-duration media links, encryption provided by our service providers, access controls, logging, backups and separation of protected commercial content from public assets.

No online service can guarantee absolute security. You should protect access to your email account and devices and notify us promptly if you suspect unauthorised account access.

If an eligible data breach occurs, we will assess and respond to it in accordance with applicable law, including notification obligations where required.

13. Retention and inactive accounts

We retain personal information only for as long as reasonably required for the purposes described in this policy or to comply with legal obligations.

Our intended retention approach is:

• active account, plan, progress and optional sensitive information is retained while the account is in use;
• after 24 months without a login, we may remove or de-identify the account’s personal plan and progress information after ordinarily sending notices approximately 60 days and 30 days before removal; signing in before the stated date cancels the inactivity-removal process;
• information deleted from active systems may remain in restricted backups for up to 90 days before being removed or put beyond use;
• payment, tax, accounting, consent, fraud, security and dispute records may be retained for up to seven years where legally or reasonably required;
• an inactive Try registration is removed or de-identified 24 months after the last Try interaction unless the person has an active paid account, has separately maintained marketing consent, or a longer period is reasonably required by law;
• routine support correspondence is ordinarily retained for up to three years after the matter closes, while records relevant to a purchase, dispute, safety issue or legal claim may be retained for up to seven years where necessary;
• marketing-consent evidence is retained while consent remains active and for up to seven years after withdrawal where reasonably necessary to demonstrate compliance;
• a minimal suppression record may be retained after unsubscribe for as long as reasonably required to ensure marketing is not restarted;
• device-only information is not received by Made For Summer until it is synchronised or uploaded, and clearing browser or device storage may permanently remove it; and
• de-identified or aggregated information that no longer identifies an individual may be retained for research, security, reporting and service improvement.

Deleting personal information does not cancel verified purchased access. If an inactive purchaser returns after their personal information has been removed, we may restore the purchased tier after verifying the purchase, but the previous plan and progress may not be recoverable.

14. Access, correction and export

You may request access to personal information we hold about you, ask us to correct it or request an available data export by contacting support@madeforsummer.com.au. Some information can be viewed or changed directly in the app. An export may include account and profile information, plan settings, activity and progress records, purchase and entitlement information, and recorded permissions or consent history, subject to lawful exceptions and the rights of other people.

We may need to verify your identity before responding. We will respond within a reasonable period and will explain if an exception under applicable law prevents us from providing particular information. We do not charge for making a request, although the law may permit a reasonable charge for giving access in limited circumstances.

15. Deletion

You may request account deletion through the app where available or by contacting support@madeforsummer.com.au. Deletion removes or de-identifies account information from active systems, subject to technical processing time, restricted backup periods and information that must or may lawfully be retained.

We may retain limited transaction, purchase-access, consent, marketing-suppression, fraud, dispute and legal records without retaining the information used for everyday app personalisation. Retaining a purchase-access record allows us to restore a previously purchased tier without retaining the deleted plan or progress history. Payment providers may retain transaction information under their own legal obligations and policies.

Deleting an account may permanently remove plan history, logs, journals, photos and preferences. That information may not be recoverable if access is later restored.

16. Anonymity and pseudonyms

You may browse general public information without identifying yourself where the website permits. An account, Try access, purchase fulfilment and access restoration require an email address and sufficient information to provide and secure the service. It may therefore be impracticable to use those functions anonymously.

17. Privacy complaints

Send privacy questions or complaints to support@madeforsummer.com.au. Include enough information for us to identify the issue, but do not email unnecessary health information or payment-card details.

We will acknowledge and investigate a complaint and aim to provide a substantive response within 30 days. If you are not satisfied, you may be able to complain to the Office of the Australian Information Commissioner.

18. Changes to this policy

We may update this policy when laws, providers, technology or information-handling practices change. The current version and effective date will be published on the Made For Summer website. If a change materially affects how existing personal information is handled, we will provide reasonable notice and obtain additional consent where required.

19. Contact

For privacy questions, access, correction, deletion, export or complaints, contact:

Made For Summer ABN 24 432 082 466 Queensland, Australia support@madeforsummer.com.au madeforsummer.com.au