Ultimate Strength & Nutrition

Privacy Policy

Effective 8 September 2026

Who handles your information

This service is operated by Ultimate Strength and Nutrition Pty Ltd, Melbourne, Australia. Contact info@ultimatestrengthandnutrition.com for privacy questions, correction or deletion requests.

What we collect

We process your uploaded CSV, its filename and launch monitor measurements, selected shots, age, sex, handedness, playing level, goals, coach targets and session context. At report unlock we collect your first name, email, consent and consent time. For users under 18 we record the parent or guardian permission confirmation.

CSV files may contain names or other information added by the launch monitor. Check your file before uploading and avoid unnecessary personal details. The original file is kept privately for a limited period; player names are not used to generate findings.

If you choose to provide information about pain, injury or physical limitations, Ultimate Strength & Nutrition uses it only to help guide relevant assessment and coaching recommendations. For adults, this can include issue location, side, current or previous injury and pain context, a diagnosis you report having received, aggravating activities and movements you avoid. Health context is not collected for users under 18 in this release.

How we use it

We use this information to produce your report, qualify its confidence, troubleshoot unsupported exports, operate the service and understand which campaign links are useful. With the consent given at unlock, your name and email are added to the Ultimate Strength & Nutrition launch monitor group in MailerLite for golf performance and training emails. Your detailed shot history is not sent to MailerLite.

Optional health context may help guide a relevant assessment or coaching conversation. It is not used to diagnose, establish why a launch-monitor pattern occurred, prescribe rehabilitation or provide return-to-golf clearance. Health answers are not included in your report, marketing profile, analytics events, ordinary logs, email content or AI processing.

Service providers

Railway hosts this service and its separate PostgreSQL database. MailerLite handles marketing subscriptions. MailerSend capability is configured for future transactional use; reports are not automatically emailed. These providers operate internationally and may process information outside Australia. Their locations and subprocessors can change; contact us for the current processing details.

The analysis uses deterministic rules and templates. Runtime AI is off. Your raw CSV and personal information are not sent to OpenRouter or another AI model for this report.

Retention and private links

Unclaimed uploads and failed imports are retained for up to one day for processing and troubleshooting. After report unlock, the original CSV and detailed session information are retained for up to 90 days. Private report access expires after 90 days. Automated maintenance removes expired raw files and clears expired detailed report data. If a documented retention hold is applied for an agreed support purpose, detailed information may be kept longer, but an expired private link remains closed.

Optional health context follows the same one-day unclaimed and 90-day unlocked-analysis periods. It is stored separately in encrypted form and has no public or ordinary administrator read endpoint. Maintenance deletes it at expiry unless a documented retention hold applies.

Your contact details, consent record and marketing subscription may remain after report expiry until you unsubscribe or request deletion. Operational analytics are retained for up to 180 days. Limited audit records may be retained to record security and administrative actions. Backup copies follow the hosting provider’s backup lifecycle and may take longer to expire.

Cookies and analytics

Private report links contain an access token. Administrative login uses secure session cookies. The site records first-touch referral and campaign tags plus upload, report and link-click events. Browser storage may keep campaign attribution for this visit. We use short-lived hashed network identifiers for abuse prevention. We do not use advertising pixels or session replay in this service.

Your choices and requests

You can choose not to upload data, not to provide optional health context or not to unlock a report. Omitting health context does not stop the ordinary analysis journey. Marketing emails include an unsubscribe link. Unsubscribing stops marketing but does not automatically delete this service’s analysis record. Contact us to request access, correction or deletion of information held here and any related marketing record. We may need to verify your identity before acting to protect your information.

Complaints and updates

Send a privacy concern to the contact address above and we will investigate. If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner. We may update this policy as the service changes and will publish the effective date here.