DownSize Me — Privacy Policy

Version 1.0 — effective 17 September 2026

This policy explains what we collect, why, who we share it with, and what you can tell us to do about it.

DownSize Me is operated by Kopfkino Entertainment Pty Ltd (ABN 30 652 854 263), trading as DownSize Me, 271 Brunker Road, Adamstown NSW 2289, Australia.

Privacy contact: support@downsizemejourney.com

If you are in Washington State or Nevada, or you want to know specifically how we handle health information, read our separate Consumer Health Data Privacy Policy. It gives you additional rights, including the right to have health data deleted and to see exactly who we shared it with.

---

1. The short version

• We collect what you give us and what the app needs to work. Nothing else.
• We do not sell your data. We never have and we do not intend to.
• We do not run advertising or tracking pixels on pages where you are logged in.
• Your health data is only collected with your consent, and you can withdraw that consent.
• Your Coach G conversations are private from other users, but we can read them to improve Coach G.
• You can ask us to delete everything, and we will.

2. What we collect

Account information. Your email address, your password (stored hashed by our authentication provider — we never see it), the name you tell us to call you, and your subscription status.

Health and body information you enter. Weight and goal weight, height, age, sex where you provide it, body measurements, blood sugar readings, ketone readings, hunger, energy and motivation ratings, meal times, fasting windows, food preferences, dietary restrictions and allergies, and any health conditions you choose to tell us or Coach G about.

Meals and photos. Descriptions of meals you log, and photos of meals or progress that you upload.

Coach G conversations. The full text of your chats with Coach G, including anything you disclose about your health, your habits, your struggles or your circumstances, plus a short summary "memory" of key facts so Coach G can remember you between sessions.

Community content. Posts, comments, recipes and likes, including whether you chose to post anonymously.

Payment information. Handled by Stripe. We receive a Stripe customer reference, your subscription status, and the billing email. We never receive or store your full card number.

Technical information. IP address, browser and device type, pages viewed, and error logs — used to keep the app working and secure.

How you found us. If you arrive through a campaign link, we may record the source, medium and campaign name.

3. Where it comes from

Almost everything above comes directly from you. Technical information is generated automatically when you use the app. Payment and subscription status comes from Stripe. Login and account-verification information comes from our authentication provider.

4. Why we use it, and what allows us to

You can withdraw consent at any time by emailing support@downsizemejourney.com or using the settings in the app. Withdrawing consent to health-data processing means we can no longer provide a personalised plan, so it effectively ends the service — we will tell you that clearly before acting on it.

5. Artificial intelligence and human review

To make Coach G work, your messages — and the health context needed to answer them — are sent to a third-party AI model provider which generates the response and returns it to us. That provider processes the data on our instructions and is not permitted to use your data to train its own models.

We may also read your conversations ourselves. We do this to fix problems, improve Coach G's answers, check safety, and comply with law. Conversations are never visible to other users.

We do not use your data to make automated decisions with legal or similarly significant effects on you. Coach G suggests; it does not decide anything binding.

6. Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We share it only with service providers who help us run DownSize Me, and only as much as they need:

• Application hosting and database — stores your account and app data
• Authentication provider — manages login, passwords and password resets
• Stripe — payments, subscriptions and receipts
• AI model provider — generates Coach G's responses
• Email delivery provider — sends account, billing and plan emails
• Error and performance monitoring — helps us find and fix faults

We may also disclose information if we are legally required to, to protect someone's safety, to enforce our Terms, or as part of a business sale or restructure — in which case we will tell you and the buyer must honour this policy.

Anything you post publicly in the community is visible to other members. Posting anonymously hides your name from other members; it does not hide it from us.

7. Where your data goes

We are in Australia; our providers and their servers may be in the United States, Australia, or the European Union. That means your information may be stored and processed outside your country. We only use providers that commit to protecting it, and we require them to handle it consistently with this policy.

8. How long we keep it

• While your account is open: for as long as you keep using DownSize Me.
• After you delete your account: we delete or irreversibly anonymise your personal data within 30 days, except where we must keep something by law.
• Backups: deleted data may persist in encrypted backups for up to 30 days before those backups expire.
• Payment and tax records: Stripe and we keep transaction records for the period Australian tax law requires (currently 5 years). These are financial records, not health data.
• Inactive accounts: if an account is inactive for 24 months, we may email you and then delete it.

9. Your rights

Wherever you live, you can ask us to:

• tell you what we hold about you, and give you a copy
• correct anything wrong
• delete your data and close your account
• export your data in a portable format
• withdraw consent to health-data processing, conversation review, community sharing, or marketing
• stop marketing emails — instantly, using the unsubscribe link

How: email support@downsizemejourney.com from the address on your account, or use the settings in the app. We respond within 30 days (and within 45 days where a US state law sets that period). We do not charge for this, and we will not treat you differently for asking.

If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). If you are in another country, you may also complain to your local privacy regulator.

Residents of US states with privacy laws: most US state privacy statutes apply only to businesses above revenue or volume thresholds we do not currently meet, so they may not formally apply to us. We honour the rights listed above for everyone regardless, and if a threshold-based law does begin to apply to us we will publish the additional disclosures it requires.

10. Security

We use encrypted connections (HTTPS), encrypted storage, hashed passwords, access controls that limit who can see member data, and row-level database rules so that one member cannot read another's records. No system is perfectly secure, and we do not claim otherwise.

11. If something goes wrong

If personal information is lost, accessed without authorisation, or disclosed when it should not have been, we will notify you and the relevant regulators where the law requires it. Because we handle health information for users in the United States, this includes obligations under the FTC Health Breach Notification Rule, and in Australia the Notifiable Data Breaches scheme. We will tell you what happened, what data was involved, and what to do about it.

12. Age

DownSize Me is for adults. You must be 18 or older. We do not knowingly collect data from anyone under 18, and if we discover an account belongs to a minor we close it and delete the data.

13. Cookies and similar technologies

We use what the app needs to work: a session cookie to keep you logged in, and local storage on your device to remember your preferences (including your cookie choice) and to carry your plan across from a guest conversation into your new account.

Meta Pixel (public Welcome page only, consent-gated). On our public Welcome page only, and only if you tap Accept on the cookie banner, we load the Meta Pixel (provided by Meta Platforms, Inc., Pixel ID 565599082991756) for website and advertising measurement — specifically a Welcome page view and a single Lead conversion event when a visitor completes signup to start their free week. If you tap Decline (or do not accept), the Meta Pixel never loads.

We do not place advertising or third-party tracking pixels on logged-in pages, and we never send health data (such as weight, goals, plans, meals, or Coach G conversations) to Meta.

14. Changes to this policy

We may update this policy. Each version is numbered and dated, and the version in force when you accepted it is recorded against your account. If a change materially affects how we handle your health data, we will ask you to accept the new version before continuing.

15. Contact

Kopfkino Entertainment Pty Ltd (ABN 30 652 854 263), trading as DownSize Me 271 Brunker Road, Adamstown NSW 2289, Australia support@downsizemejourney.com