How IDP handles your information

1. Who is responsible for your information

Invisible Diet Project is operated by Travel Spark Pty Ltd. We handle personal information in accordance with applicable Australian privacy law and apply additional care to health and other sensitive information.

2. Information we collect and hold

Depending on how you use IDP, we may collect account and contact details; date of birth and other eligibility details; coaching goals and routine information; meal photographs and descriptions; estimated calories and protein; weight records; activity and training information such as strength sessions, cardio or walking minutes and optional step counts; messages with your coach; plan-ahead information; notification preferences; subscription and billing status; support and privacy-request records; device and security information; and limited health information you choose to provide for suitability and safety review.

IDP also derives service-personalisation information from your use of the membership. This can include recurring meal patterns, typical timing, repeatable routines, goal-relative energy or protein patterns, activity adherence, preferences, planned-event context, and learning about whether a prior coaching approach appeared useful or difficult. Derived observations retain confidence and supporting evidence so they can be reviewed rather than treated as unsupported facts about you.

3. How we collect information

Most information is collected directly from you when you create an account, complete onboarding, log meals, weight or activity, message a coach, configure preferences or contact support. We also receive limited information from authentication providers and Stripe, collect technical or acquisition information through the website and app when analytics or advertising measurement is enabled, record limited in-app interaction events used to diagnose product friction, and derive coaching patterns from information already held in your IDP account.

4. Why we use information

We use information to provide and personalise the membership; analyse food records; maintain coaching history; understand whether agreed activity expectations were followed; learn recurring meals and routines; show progress; adapt guidance to your current goal; support your assigned coach; prepare private AI-assisted coach drafts; plan around real-life events; deliver reminders and service communications; manage subscriptions; prevent abuse and protect accounts; respond to support and privacy requests; investigate incidents; and improve product reliability and the coaching experience.

We may also create appropriately de-identified or aggregated statistics to understand product usage, member cohorts, recurring behaviour patterns, coaching effectiveness and business performance. These analytical outputs are intended to avoid identifying individual members. Identifiable coaching and health profiles are not repurposed as unrelated marketing profiles merely because the data may be commercially useful.

5. Health and sensitive information

Weight records, health disclosures and some other information used in coaching may be health or sensitive information. IDP asks for consent where required and limits collection to information reasonably needed for coaching suitability, safety and the service you request. Relevant health disclosures can trigger human review and may restrict automated or personalised guidance.

6. AI-supported processing

Meal photographs, meal descriptions and relevant coaching context may be sent to configured AI providers to create approximate food estimates or other in-scope assistance. Relevant goal, routine, activity-adherence and Personal Intelligence context may be supplied where needed to make an in-scope result consistent with your current programme. Member messages and relevant history may be processed to prepare a private draft for an assigned coach. AI output is not treated as a medical diagnosis and private coach drafts are not sent to members without human action.

7. Payments

Stripe processes payment-card information and hosts secure checkout and subscription-management functions. IDP stores billing identifiers, subscription status, billing period, payment-state and related records needed to control access and support billing. IDP does not store your full payment-card number.

8. Product usage, website analytics and acquisition measurement

Inside the signed-in product, IDP records limited interaction mechanics such as route views, navigation duration, repeat clicks, failed actions and which logging method was selected. This telemetry is used to identify slow or confusing workflows and to create aggregate product-improvement metrics. The product-usage ledger is deliberately separated from meal content and should not contain meal descriptions, photographs, weight values, health disclosures or message content. Raw product-usage events are intended to be short-lived and the application removes records older than approximately 90 days during the improvement-review cycle while retaining aggregate review outputs.

IDP keeps limited first-party acquisition information so we can understand which public campaigns and referrals lead to sign-up and purchase. On public acquisition pages you can separately choose whether to allow optional analytics and advertising measurement services such as Google Analytics and Meta. Optional third-party marketing scripts are kept off signed-in coaching pages, meal details, weight records and private messages. Meta server-side advertising measurement is also gated by the recorded marketing-measurement choice.

Where optional measurement is allowed, those services may use cookies, browser storage, device information and campaign identifiers such as UTM parameters, gclid or fbclid to measure visits and conversion outcomes. Member coaching and health profiles are not supplied to advertising platforms for campaign targeting.

9. When information is disclosed

We disclose information only where reasonably required to provide, secure or administer the service, or where disclosure is otherwise authorised or required by law. Recipients can include contracted providers for hosting, authentication, database and file storage, billing, email, web push, analytics and AI processing; assigned coaches and authorised administrators; and professional advisers or authorities where appropriate. We apply purpose and access limits so providers and staff receive the information relevant to their role.

10. Overseas processing

Some technology providers and their subprocessors may process or store information outside Australia. Likely overseas locations include the United States, together with other locations used by the configured provider or its subprocessors. We use provider contracts, access controls and data minimisation to reduce the information disclosed and manage cross-border processing where applicable.

11. Security

IDP uses technical and organisational safeguards intended to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. These include role-based access, private storage for meal images, server-side credentials, audit records and security monitoring. No internet service can guarantee absolute security.

12. Retention, learning history and deletion

We keep information for as long as reasonably needed to provide the service and for legitimate legal, billing, safety, security, dispute and record-keeping purposes. Personalisation signals can remain attached to the account while they are useful to the coaching service so IDP can remember recurring routines and prior coaching outcomes. Signals can be superseded or deactivated when the supporting evidence changes. Short-lived product telemetry follows a shorter retention approach as described above. When information is no longer required, we aim to delete or appropriately de-identify it where practical and lawful. Some billing, agreement, security and coaching-history records may need to be retained after membership ends.

13. Access and correction

You can update some account information directly in IDP. You can also request access to or correction of personal information through the privacy controls in your account or by contacting us. We may need to verify your identity before providing sensitive records and may refuse or limit a request where permitted by law, with an explanation where required. If a derived coaching pattern is based on incorrect source information, correcting the source information can also change the personalisation model.

14. Privacy complaints

Send a privacy complaint to support@invisiblediet.com.au and describe what happened and the outcome you are seeking. We will review the complaint, may ask for information needed to verify the issue, and will respond through an appropriate channel. If applicable privacy law gives you a right to escalate a complaint to a regulator, that right is not affected by this process.

15. Notifications and marketing

Service messages can be necessary to operate your membership, for example billing, security and coaching notifications. Optional push or marketing preferences can be managed through available controls. You can also unsubscribe from marketing messages using the method provided in the message where applicable. IDP does not use sensitive coaching information for unrelated direct marketing unless a lawful basis and any required consent or notice have been established for that specific use.

16. Children

IDP is currently intended for adults aged 18 and over and the onboarding process rejects under-18 enrolment.

17. Changes to this policy

We may update this policy as the service, providers or legal requirements change. The current version and update date are published here. Where a change materially affects how existing member information is handled, IDP will use an appropriate notice or consent process.

18. Contact

Privacy enquiries can be sent to support@invisiblediet.com.au. General support details are on the Contact page.