Attuna · ABN 45 522 377 429 · Perth, Western Australia · Last updated 25 August 2026
Attuna is run by one person as a sole trader. There is no company, no data team and nobody buying access to you. This is written in plain English on purpose. If anything here is unclear, email me and I’ll answer it directly.
What I collect
If you fill in the form: your email address, your answers to the questions, and basic technical information about how you arrived: which version of the page you saw, and which link brought you here.
If you’re offered a place and accept: training data from whichever sources you connect, anything you choose to tell me or the system in reply to a daily email, and, only if you send it, a rehabilitation protocol from your physiotherapist.
How much you have to tell me
Coaching can’t really be anonymous — the recommendations are built from your data. But the only identifying thing I actually need is an email address. A first name or a nickname is fine for everything else, and I’d rather you gave me too little than more than you’re comfortable with.
Information about injuries and health
Some of what I collect is health information, which is treated as sensitive and needs your clear agreement. That’s what the tick box on the form is for. I collect it for one reason: guidance that ignores your injury is worse than no guidance. It isn’t shared with anyone, it isn’t used for advertising, and you can ask me to delete it at any time without giving a reason.
Attuna does not diagnose anything and is not a health service. If you’re in pain, see a physiotherapist or doctor.
Why I collect it
- To decide who gets a place in the cohort, and to contact you about it.
- To generate your daily recommendation.
- To work out whether this idea is worth continuing, using combined, de-identified answers, never anything that points at you.
AI processing, and where your data goes
The recommendations are produced by sending your training context to a large language model through a commercial API. I currently use Anthropic’s Claude, which processes this in the United States. If I move to a provider that processes elsewhere, I’ll update this page and email you.
I’m not in a position to police another company’s servers, so I won’t pretend otherwise. What I rely on is their published commitment: Anthropic’s terms state that inputs and outputs from their commercial API are not used to train their models by default. What is genuinely in my hands is how little leaves here — only the training context needed for that day’s recommendation, never your name, your email, or your contact details.
I also rely on a small number of ordinary services to operate: a form provider, an email provider, and cloud storage. They process data on my behalf and nothing more.
Who I share it with
Nobody buys it. I don’t sell, rent or swap your information.
Two ordinary exceptions. I use basic visitor analytics to see how many people reach the page and where they came from. And if you arrived from an ad, the advertising platform records that a visit happened, and that an application happened, so I can tell which ad was worth running. Those are counts.
The only other exception would be if I were legally compelled, which I’d tell you about unless I were prohibited from doing so.
Emails
You’ll get one email when places are allocated. After that, occasional notes about how the project is going. Every one has a working unsubscribe link and I’ll action it straight away. If you’d rather not wait for an email, just reply and say stop.
How it’s kept safe
Your answers live with the form provider and in my cloud storage, behind two-factor login, and I’m the only person with access. If something ever goes wrong with your data — a breach, a mistake on my end — I’ll tell you promptly and plainly, and tell the regulator where that’s required, rather than hoping nobody notices.
How long I keep it
If you don’t get a place, your form answers are deleted within twelve months unless you’ve asked to stay on the list. If you join and later leave, you can export everything, and I’ll delete the rest on request. Nothing is kept because it might be useful someday.
Seeing, fixing or deleting your data
Email me and ask. You can have a copy of everything I hold about you, have anything corrected, or have the lot deleted. No form to fill in and no reason required. I’ll respond within 30 days, and usually much sooner; if I need longer for some reason, I’ll tell you why. Contact: [email protected].
If something I hold about you is wrong — a stale injury note, an out-of-date goal — tell me and I’ll fix it. Recommendations built on wrong information are worse than none.
If I’ve handled something badly, tell me first. I’ll acknowledge it, tell you what I think went wrong and what I’m doing about it, within the same 30 days. If that doesn’t resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, and you don’t need my agreement to do so.
The standard I hold myself to
I follow the Australian Privacy Principles as a matter of practice, including the stricter rules that apply to health information. This is written by me in plain English rather than by a lawyer, but I mean every line of it.
Changes
If this changes in a way that affects what I do with your information, I’ll email you rather than quietly editing the page.
