Key points
- We collect only what we need to run your account and support your study.
- When you use our AI practice sessions, we keep a written transcript and your feedback. We no longer record audio.
- Your account data is stored in Sydney, Australia. Some of our service providers are located, or process information, overseas.
- We do not sell your personal information or use it for targeted advertising.
- You can unsubscribe from our study emails at any time, and you can delete your account from your Account page.
1. About this policy
1.1 This Privacy Policy explains how Gday LMS Pty Ltd (ABN 25 693 545 854), trading as GdayPhysiotherapist (we, us, our), collects, holds, uses and discloses personal information when you use our website and learning platform (the Platform).
1.2 We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
1.3 In this policy, personal information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.
2. Personal information we collect
2.1 Information you provide. We collect:
- your account details: name, email address, password (stored only in a secure hashed form), country and exam goal;
- details of your purchases, including what you bought, when, the price paid and any discount code used, and the information on your tax invoice;
- messages you send us, such as support enquiries, and your answers to our study-plan questionnaire; and
- what you type into our chat assistant.
2.2 Information created when you use the Platform. This includes your progress, answers, results and feedback across our lessons, audio lectures, practice questions, mock examinations, brain teasers, the Visual Gallery, Physio Detective and APEP practice, and transcripts of AI practice sessions (see section 3).
2.3 Information collected automatically. This includes device and usage information, such as your IP address, browser and device type, and the pages you visit. We record your IP address when you create your account and when you unsubscribe from our emails, using the link in an email or your Account page, and we keep a record of the devices you are signed in on. Our hosting provider keeps logs of requests to the Platform. We count visits without using cookies.
2.4 Payment cards. Card payments are processed by our payment provider. We do not see or store your full card number.
2.5 Sensitive information. We do not ask for sensitive information, such as health information. Please do not include it in messages, practice sessions or chats.
3. AI practice sessions
3.1 When you practise with our AI assessor:
- your voice is sent from your browser to our AI provider in real time, so that the assessor can respond to you, and our AI provider converts it into a written transcript. Because your browser connects to our AI provider directly, it also receives your IP address;
- we send the transcript to our AI provider to prepare your feedback. We do not add your name or email address to it;
- we keep the transcript and your feedback in your account; and
- we no longer record audio of your session. Recordings made up to 23 September 2026 are kept in our file storage until we delete them, and we will delete yours sooner if you ask us.
3.2 Our chat assistant sends what you type, and the page you are on, to our AI provider to generate a reply. We do not keep chat conversations on our servers. Your browser keeps your recent conversation on your device, and the assistant starts a new conversation if you have not opened a page where it appears for 24 hours.
3.3 Under their terms for business customers, our AI providers do not use this information to train their AI models. They may keep it for a limited time, for example to detect abuse.
3.4 The practice cases are fictional. You do not need to share real patient details or other sensitive information during a session.
3.5 AI-generated feedback is a study aid only. It is not an assessment by the Australian Physiotherapy Council and has no effect on any official assessment or on your registration.
3.6 We do not use automated processes to make decisions that significantly affect you.
4. How we collect personal information
4.1 We collect personal information directly from you, from your use of the Platform, and from our service providers (for example, confirmation of a payment).
4.2 Our sign-up, contact and password-reset pages use a bot-protection service to check that they are being used by a person rather than an automated program. The service collects information about your device and browser.
5. How we use personal information
5.1 We collect, hold and use personal information to:
- create and administer your account, and provide the content and features you have purchased, including AI feedback;
- process payments and issue tax invoices;
- communicate with you about your account and respond to your enquiries;
- protect the security of the Platform and our content, including by limiting simultaneous sign-ins to two devices and showing your email address as a watermark on protected pages;
- improve our content and services; and
- comply with our legal obligations.
5.2 We do not sell personal information, and we do not use it for targeted advertising.
6. Direct marketing
6.1 We may use your contact details to send you study emails, such as the daily question, study tips and information about our courses.
6.2 You can opt out at any time by using the unsubscribe link in any of these emails or from your Account page. If you opt out, we will also stop sending you emails confirming your purchases, but we will still send you messages you need to use your account, such as password-reset emails. Our payment provider may still send you its own receipt.
7. Who we disclose personal information to
7.1 We do not sell or rent personal information. We disclose it only as set out in this section.
7.2 Service providers. We use service providers to run the Platform. They may use personal information only to provide their services to us, except that our payment and bot-protection providers may also use it for their own security and fraud-prevention purposes, under their own privacy policies:
| Type of provider | What they do for us | Where information is processed |
|---|---|---|
| AI providers | Run our AI practice sessions (the live voice conversation and its transcript), prepare your feedback and power our chat assistant | United States |
| Payment provider | Processes payments | Australia, the United States and other countries where it operates |
| Application hosting provider | Hosts the Platform and counts visits without using cookies | Sydney, Australia, with pages delivered through its global network (provider based in the United States) |
| Database hosting provider | Hosts our database | Sydney, Australia (provider based in the United States) |
| File storage provider | Stores and delivers our course files, and keeps copies of practice-session transcripts and of recordings made up to 23 September 2026 | Sydney, Australia (provider based in the United States) |
| Email delivery provider | Sends our emails, including account emails, receipts and study emails | Japan and the United States (provider based in the United States) |
| Business email provider | Hosts our email inboxes, including messages you send us and notices about new accounts and purchases | United States and other countries where it operates |
| Bot-protection provider | Checks that our sign-up, contact and password-reset pages are used by people, not automated programs | United States |
| Content delivery providers | Deliver some of the fonts and images on our pages. Your browser connects to them directly, so they receive your IP address and browser details | United States and other countries where they operate |
7.3 Other users. If you play Physio Detective, its leaderboard shows other signed-in users your initials, your score, the number of clues you used and your time.
7.4 Legal and safety reasons. We may disclose personal information where the law requires or authorises it, or where it is reasonably necessary to protect the safety of any person or our legal rights.
7.5 Sale of our business. If our business, or part of it, is sold or restructured, personal information may pass to the new owner, who must continue to protect it in accordance with this policy.
8. Overseas disclosure
8.1 The Platform and your account data are hosted in Sydney, Australia.
8.2 Some of our service providers are located in the United States, and some process information in other countries, including Japan (see clause 7.2). Your personal information may be disclosed to them and processed there. Providers that host information for us in Sydney may also access it from overseas to support and maintain their services.
8.3 We take reasonable steps to ensure that overseas recipients handle personal information consistently with the Australian Privacy Principles.
9. Retention and deletion
9.1 We keep personal information only for as long as we need it:
| Information | Retention period |
|---|---|
| Account details, study history and results, and practice-session transcripts and feedback | While your account is open |
| Recordings of practice sessions made up to 23 September 2026 | Until we delete them, or sooner if you ask us |
| Chat assistant conversations | Not kept on our servers. Your browser keeps your recent conversation on your device. |
| Messages you send us | As long as we need them to deal with your request and keep a record of it |
| Payment records | As long as the law requires (usually five years). Our payment provider holds these records. |
| Records of requests to unsubscribe from our emails | Kept as a record of your request |
| Technical logs | Kept by our hosting provider for a short period |
9.2 You can delete your account at any time from your Account page. If that does not work, or you would rather we did it, contact us and we will delete it for you.
9.3 When your account is deleted, we delete from our database your account details, study history, results, practice-session transcripts and feedback, and your purchase records and tax invoices. We keep:
- a record of any request you made to unsubscribe from our emails;
- records of the email campaigns we sent you;
- a record of any checkout you started but did not complete;
- if you used a discount code shared with other customers, a record that you used it;
- records of support our staff gave you, such as a record that they viewed your account to help you;
- records of the practice questions you answered, which are no longer linked to your account;
- any password-reset link you asked for but did not use;
- recordings of practice sessions made up to 23 September 2026, until we delete them or you ask us to;
- records of any action we took because of misuse of the Platform, such as a record that an account was blocked; and
- copies of messages you sent us, and of notices about your account, in our email inbox.
Our payment provider keeps its own records of your payments. Deleted information may remain in our database backups for up to 30 days.
10. Access and correction
10.1 You may ask for access to, or correction of, the personal information we hold about you by contacting us. There is no charge, and we will respond within 30 days.
10.2 We may need to verify your identity before we respond. If we refuse a request, we will tell you why in writing.
11. Security and data breaches
11.1 We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, including encryption, secure password storage and access controls.
11.2 If a data breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) where the Notifiable Data Breaches scheme requires.
12. Cookies
12.1 We use cookies to keep you signed in, keep your account secure and run some features, such as timed practice exams. We count visits without using cookies, and we do not use advertising cookies. Our Cookie Policy explains the cookies we use and how you can manage them.
13. Children
13.1 The Platform is intended for adults. We do not knowingly collect personal information from anyone under 18, and if we learn that we have, we will delete it.
14. Users in the United Kingdom and European Union
14.1 If the UK or EU General Data Protection Regulation applies to you, you also have the right to object to or restrict certain processing, to data portability, and to complain to your local supervisory authority.
14.2 We process your information to perform our contract with you, for our legitimate interests in operating and improving a secure service, to comply with our legal obligations, and with your consent where we ask for it. You may withdraw consent at any time.
15. Changes to this policy
15.1 We publish each version of this policy with its effective date, and we keep previous versions in our archive.
15.2 We will notify you of significant changes before they take effect, through a notice in your account and, if you hold a paid plan, by email. We will not reduce your rights under this policy without your consent.
16. Questions and complaints
16.1 If you have a question or complaint about how we handle your personal information, please contact us at info@gdayphysiotherapist.com.au. We will acknowledge a complaint within 7 days and respond within 30 days.
16.2 If you are not satisfied with our response, you may complain to the OAIC at oaic.gov.au.
Gday LMS Pty Ltd, trading as GdayPhysiotherapist · ABN 25 693 545 854 · ACN 693 545 854 · Victoria, Australia