Privacy Policy

Effective Date: 27 October 2026

Icarus Project respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Icarus Project, referred to as “Icarus Project”, “we”, “us” or “our”, collects, uses, stores, protects and discloses personal information when you use our website, applications, coaching services and integrations, including our integration with fitness wearables.

We aim to handle personal information in accordance with applicable privacy laws, including the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles where applicable.

1. Information We Collect

Depending on how you use Icarus Project, we may collect the following categories of information.

Personal and Account Information

This may include:

  • Name
  • Email address
  • Telephone number
  • Date of birth or age
  • Account information
  • Information you provide when registering for or using our services

Health, Fitness and Performance Information

As part of providing health, performance, fitness, recovery and longevity related services, we may collect information you voluntarily provide to us, including:

  • Body weight and body measurements
  • Training and exercise information
  • Sleep information
  • Recovery information
  • Nutrition and lifestyle information
  • Health and performance goals
  • Blood test information where voluntarily provided
  • Other health or performance information you choose to provide

Some of this information may constitute sensitive information or health information under applicable privacy laws.

We only collect health and sensitive information where you have provided consent or where otherwise permitted by law.

2. Information We Receive From Your Fitness Wearable, Such as WHOOP, Garmin, Apple Watch, etc.

If you choose to connect your WHOOP account to Icarus Project, you will be asked to authorise access through WHOOP's OAuth authorisation process.

We only request access to WHOOP information that is reasonably necessary to provide the features and services you have chosen to use.

Depending on the permissions you grant, information obtained through the WHOOP API may include:

  • WHOOP profile information, such as your name and email address
  • Recovery information, including Recovery Score, resting heart rate and heart rate variability
  • Sleep information, including sleep duration, sleep performance and sleep stages
  • Physiological cycle information, including Strain and heart rate information
  • Workout and activity information
  • Body measurement information, such as height, weight and maximum heart rate
  • Other WHOOP information specifically authorised by you through the WHOOP consent screen

Connecting WHOOP is optional.

Icarus Project will not access WHOOP information until you have expressly authorised the connection.

3. How We Use Fitness Wearable Information

Information received from your fitness wearable may be used to:

  • Provide you with personalised health and performance information
  • Display your recovery, sleep, activity and performance information within Icarus Project
  • Help track changes in your health and performance over time
  • Assist with training, recovery, sleep, nutrition and lifestyle recommendations
  • Support coaching services provided to you
  • Identify trends and patterns within your own health and performance data
  • Improve the functionality and reliability of the services provided to you
  • Provide features that you have specifically requested or authorised

We will only use fitness wearable information for purposes consistent with the permissions you have granted and the services we provide to you.

4. What We Do Not Do With Fitness Wearable Information

Icarus Project does not sell, rent, lease, license or otherwise commercially distribute fitness wearable information to third parties.

We do not use fitness wearable information for third party advertising.

We do not allow advertisers to access your fitness wearable information.

We do not disclose your fitness wearable information to another user or third party without your permission unless disclosure is necessary to provide the service you have requested, is required by law, or is otherwise permitted under the fitness wearable provider's API terms of use.

Fitness wearable information is used to provide functionality and services directly related to Icarus Project and your health and performance experience.

5. Your Authorisation and Control

You remain in control of whether Icarus Project can access your fitness wearable information.

Before accessing fitness wearable information, we require you to authorise the connection through fitness wearable.

You may disconnect your fitness wearable account from Icarus Project at any time.

Once your fitness wearable integration has been disconnected, Icarus Project will stop requesting new information from your fitness wearable account unless you subsequently reconnect and authorise the integration again.

You may also contact us at ceo@icarus-project.com if you would like assistance disconnecting the integration or deleting fitness wearable information associated with your Icarus Project account.

6. Accessing Your Information

You may request access to personal information that Icarus Project holds about you, including personal information collected through the fitness wearable API.

You may also request that inaccurate or incomplete information be corrected.

Requests can be submitted to:

ceo@icarus-project.com

We may need to verify your identity before providing access to personal or health information.

7. Data Retention and Deletion

We retain personal information only for as long as reasonably necessary to provide our services, comply with our legal obligations, resolve disputes and protect our legitimate business interests.

Fitness wearable information is handled in accordance with fitness wearable API requirements, including any restrictions relating to the caching, storage or retention of fitness wearable information.

We do not intentionally create unnecessary permanent copies of fitness wearable information.

If you disconnect your fitness wearable or request deletion of your information, we will stop collecting new fitness wearable information and delete or de identify information that we are no longer required or permitted to retain.

Deletion requests will be processed without undue delay and in accordance with applicable law and fitness wearable API requirements.

Some information may need to be retained where required by law, for legitimate record keeping obligations, or for the establishment, exercise or defence of legal claims.

8. How We Protect Your Information

We take reasonable administrative, technical and physical measures to protect personal information from loss, misuse, unauthorised access, disclosure, alteration and destruction.

Measures used to protect fitness wearable and other personal information include, where appropriate:

  • Encryption of information in transit using secure protocols such as HTTPS
  • Encryption of sensitive information at rest
  • Restricted access to personal information
  • Authentication and access control systems
  • Limiting access to authorised personnel who require the information to perform their responsibilities
  • Secure management of API credentials, access tokens and other authentication information
  • Monitoring and maintaining the systems used to provide our services

No electronic system can be guaranteed to be completely secure. However, we take reasonable steps appropriate to the sensitivity of the information we handle.

If we become aware of a security incident involving your personal information, we will take appropriate steps to investigate and respond to the incident and will provide notifications where required by applicable law.

Where a security incident affects information obtained through the fitness wearable API, we will also notify the fitness wearable provider where required under the fitness wearable provider's API terms of use.

9. Sharing Personal Information

We may disclose personal information where reasonably necessary to operate Icarus Project.

Recipients may include:

  • Icarus Project coaches and authorised team members involved in providing services to you
  • Technology, hosting, database, analytics and infrastructure providers that assist us in operating our services
  • Professional advisers such as accountants, lawyers or insurers where reasonably necessary
  • Government authorities, regulators, courts or law enforcement where required or authorised by law
  • Fitness wearable providers where necessary to establish, maintain or manage your fitness wearable integration

Service providers that process personal information on our behalf are only provided with information reasonably necessary to perform their services and are expected to protect that information appropriately.

We do not authorise service providers to sell your fitness wearable information or use it for their own advertising purposes.

10. Overseas Processing and Disclosure

Some of the services and technology providers we use may operate or store information outside Australia.

This may include recipients or service providers located in the United States and other jurisdictions in which our technology providers operate.

Fitness wearable providers may be based in the United States or other countries.

Where personal information is disclosed to overseas recipients, we take reasonable steps to ensure that the information is handled appropriately and in accordance with applicable privacy obligations.

11. Technical and Usage Information

When you use our application or website, we may automatically collect limited technical information such as:

  • IP address
  • Device type
  • Browser type
  • Operating system
  • Application activity
  • Error and diagnostic information
  • Login and authentication information

This information may be used for security, troubleshooting, service delivery, analytics and improving the reliability of Icarus Project.

12. Consent

Where consent is required for the collection, use or disclosure of health information, fitness wearable information or other sensitive information, we will seek that consent before collecting or using the information.

You may withdraw your consent to future collection or use where legally permitted.

Withdrawing consent may prevent certain features from functioning, including features that depend on your fitness wearable connection.

13. Children

Icarus Project services are intended for adults.

We do not knowingly collect personal information from children under 18 through the fitness wearable integration.

If we become aware that information has been collected from a child without appropriate authorisation, we will take reasonable steps to delete that information.

14. Third Party Services

Icarus Project may integrate with third party services such as fitness wearables.

Those third parties operate independently and maintain their own privacy policies, terms and security practices.

Your use of your fitness wearable itself remains subject to your fitness wearable provider's own Privacy Policy and Terms of Use.

The connection between Icarus Project and your fitness wearable mean that the fitness wearable provider endorses Icarus Project or the services provided by Icarus Project.

15. Privacy Complaints

If you believe we have mishandled your personal information or breached an applicable privacy obligation, please contact us at:

ceo@icarus-project.com

Please provide enough information for us to understand and investigate your concern.

We will review privacy complaints and respond within a reasonable period.

Where Australian privacy law applies, you may also have the right to make a complaint to the Office of the Australian Information Commissioner.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations or third party integrations.

The latest version will be published on our website or application together with its effective date.

If we make material changes to the way sensitive information or fitness wearable information is used, we may provide additional notice where appropriate.

17. Contact Us

For questions about this Privacy Policy, your personal information, your fitness wearable integration, or requests to access, correct or delete information, please contact:

Icarus Project
Email: ceo@icarus-project.com

Australia