Privacy Policy

1. About this policy

1.1 This Privacy Policy explains how Gday LMS Pty Ltd (ABN 25 693 545 854), trading as GdayPhysiotherapist (we, us, our), collects, holds, uses and discloses personal information when you use our website and learning platform (the Platform).

1.2 We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

1.3 In this policy, personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.

2. Personal information we collect

2.1 Information you provide. We collect:

1. your account details: name, email address, password (stored only in a secure hashed form), country and exam goal;
2. details of your purchases, including what you bought, when, and the information on your tax invoice; and
3. anything you send us, such as support messages, feedback and questionnaire responses.

2.2 Information created when you use the Platform. This includes your progress, answers, results and feedback across our lessons, audio lectures, practice questions, mock examinations, brain teasers and Physio Detective, and transcripts of AI practice sessions (see section 3).

2.3 Information collected automatically. This includes device and usage information, such as your IP address, browser and device type, and the pages you visit. We measure visits without using cookies.

2.4 Payment cards. Card payments are processed by our payment provider. We do not see or store your full card number.

2.5 Sensitive information. We do not ask for sensitive information, such as health information. Please do not include it in messages, practice sessions or chats.

3. AI practice sessions

3.1 When you practise with our AI assessor:

1. your voice is processed in real time by our AI service provider so that the assessor can respond to you, and is converted into a written transcript;
2. we keep the transcript, and the feedback generated from it, in your account; and
3. we do not keep an audio recording of your session.

3.2 Our AI service providers process this information only to provide their services to us, and they do not use it to train their models.

3.3 The practice cases are fictional. You do not need to share real patient details or other sensitive information during a session.

3.4 If you use our chat assistant, we keep the conversation, without your name or email address, for up to 90 days to improve the assistant.

3.5 AI-generated feedback is a study aid only. It is not an assessment by the Australian Physiotherapy Council and has no effect on any official assessment or on your registration.

4. How we collect personal information

4.1 We collect personal information directly from you, from your use of the Platform, and from our service providers (for example, confirmation of a payment).

4.2 Our sign-up form uses Google reCAPTCHA to prevent automated sign-ups. Google's Privacy Policy and Terms of Service apply to that service.

5. How we use personal information

5.1 We collect, hold and use personal information to:

1. create and administer your account, and provide the content and features you have purchased, including AI feedback;
2. process payments and issue tax invoices;
3. communicate with you about your account and respond to your enquiries;
4. protect the security of the Platform and our content, including by limiting simultaneous sign-ins to two devices and showing your email address as a watermark on protected pages;
5. improve our content and services; and
6. comply with our legal obligations.

5.2 We do not sell personal information, and we do not use it for targeted advertising.

6. Direct marketing

6.1 We may use your contact details to send you study emails, such as the daily question and information about our courses.

6.2 You can opt out at any time by using the unsubscribe link in any of these emails or under Account → Email preferences. We will continue to send you essential service messages, such as receipts.

7. Disclosure of personal information

7.1 We disclose personal information only:

1. to service providers that help us operate the Platform, such as hosting, data storage, payment, email, AI and security providers, which may use it only to provide their services to us;
2. to other users, to a limited extent: the Physio Detective leaderboard shows your initials and score;
3. where required or authorised by law, or to protect the safety of any person or our legal rights; and
4. to a buyer of our business, who must continue to protect it in accordance with this policy.

8. Overseas disclosure

8.1 The Platform and your account data are hosted in Sydney, Australia.

8.2 Some of our service providers, including our AI, payment and email providers, are located in the United States. Your personal information may be disclosed to them and processed there.

8.3 We take reasonable steps to ensure that overseas recipients handle personal information consistently with the Australian Privacy Principles.

9. Retention and deletion

9.1 We keep personal information only for as long as we need it:

9.2 When you delete your account, we delete your account details, study history, results and practice-session transcripts, except records we are required by law to keep. Deleted information may remain in our backups for up to 30 days.

10. Access and correction

10.1 You may ask for access to, or correction of, the personal information we hold about you by contacting us. There is no charge, and we will respond within 30 days.

10.2 We may need to verify your identity before we respond. If we refuse a request, we will tell you why in writing.

11. Security and data breaches

11.1 We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, including encryption, secure password storage and access controls.

11.2 If a data breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) where the Notifiable Data Breaches scheme requires.

12. Cookies

12.1 Our Cookie Policy explains the cookies we use and how you can manage them.

13. Children

13.1 The Platform is intended for adults. We do not knowingly collect personal information from anyone under 18.

14. Users in the United Kingdom and European Union

14.1 If the UK or EU General Data Protection Regulation applies to you, you also have the right to object to or restrict certain processing, to data portability, and to complain to your local supervisory authority.

14.2 We process your information to perform our contract with you, for our legitimate interests in operating and improving a secure service, to comply with our legal obligations, and with your consent where we ask for it. You may withdraw consent at any time.

15. Changes to this policy

15.1 We publish each version of this policy with its effective date, and we keep previous versions in our archive.

15.2 We will notify you of significant changes before they take effect, through a notice in your account and, if you hold a paid plan, by email. We will not reduce your rights under this policy without your consent.

16. Questions and complaints

16.1 If you have a question or complaint about how we handle your personal information, please contact us at info@gdayphysiotherapist.com.au. We will respond within 30 days.

16.2 If you are not satisfied with our response, you may complain to the OAIC at oaic.gov.au.

Gday LMS Pty Ltd, trading as GdayPhysiotherapist · ABN 25 693 545 854 · ACN 693 545 854 · Victoria, Australia