Privacy Policy

Last updated 30 October 2026

Apex Lane (apexlane.fit) is a food and fitness tracker run by a small independent team in Australia. This policy explains what we collect, why, who sees it, and the choices you have. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

• Account details: your name, email address and a password. Passwords are stored only as a salted one-way hash, so we can't read them.
• What you log: food and meals, recipes, training plans and ticked-off workouts, body weight, fasting times, daily targets, and the profile details you choose to enter (such as sex, age, height and activity level, used to suggest targets). This is health-related information, so we treat it as sensitive.
• Workouts you share: if you choose to share a workout in the Members area, its name, description and exercises, and your first name, are visible to other signed-in members, who can take their own copy. You can take it back at any time (copies already made stay with the people who made them).
• Invites: each member has a personal invite code. We record how many people joined with it and who invited each new account, so members can see their own count.
• Foods you contribute: if you save a product from a barcode scan for others to use, the product details (not who you are) are shared with other users.
• Technical data: a session cookie that keeps you signed in, and your IP address, which we use briefly for rate-limiting and abuse prevention.
• Google Health data, only if you connect it (see below).

How we use it

Only to run the app for you: to show your diary, trends and targets, sync your data between your devices, send account emails (confirmation and password reset), keep the service secure, and fix problems. We don't sell your information, we don't show ads, and we don't use your data to train AI models.

Connecting Google Health

If you choose to connect Google Health, Apex Lane asks for read-only access to your body weight, daily step counts and recorded workouts. We use it to show steps and workouts on your dashboard and to fill in weigh-ins for days where you haven't logged one. We never write to your Google account.

• Your Google access tokens are stored encrypted on our server. The data we fetch is shown to you; steps and workouts are kept in your own browser, and imported weights are saved into your diary like any other weigh-in.
• You can disconnect at any time in Settings, which revokes our access with Google. You can also remove access from your Google Account permissions page. Weights already imported stay in your diary until you delete them.
• Apex Lane's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features described here, we don't transfer it to others except as needed to run the service or comply with law, and we don't use it for advertising or let humans read it unless you ask for support, we have your consent for specific data, it's needed for security or legal reasons, or it's aggregated and anonymised.

Who else handles your data

• Hosting: Cloudflare hosts the site and edge infrastructure.
• Food search: when you search for a food, your search text (not your identity) is sent to food databases such as fatsecret and Open Food Facts to fetch results. The Australian Food Composition Database is built into the site.
• Google, if you connect Google Health, as described above.
• Legal requirements: we may disclose information if the law requires it.

Barcode scanning and label reading happen on your device. Photos aren't uploaded.

Storage and security

Your diary is kept on your device and, when you're signed in, on our server. We use HTTPS, hashed passwords, encrypted Google tokens, rate limiting, and restrict app pages to signed-in people. No system is perfectly secure, so please use a strong, unique password. If a breach is likely to cause serious harm, we'll notify affected people and the regulator as the law requires.

Your choices

• Export: download your data any time from Settings.
• Correct: edit or remove anything you've logged.
• Delete: delete your account in Settings. This permanently removes your profile, diary and any Google connection from our server (backups age out shortly afterwards). Anonymous food details you contributed may remain.
• Ask us: to access or correct your information, or to make a privacy complaint, email the contact email below. We'll respond within 30 days. If you're unhappy with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Cookies

We use one essential cookie to keep you signed in. We don't use advertising or tracking cookies. Your browser's local storage holds your diary on your device.

Children

Apex Lane isn't designed for people under 18.

Changes

If we change this policy in a way that matters, we'll update the date above and, where appropriate, tell you in the app.

Contact

Questions about privacy: contact email.