Keeping your data private
Last updated: September 2026
Protecting your personal information is a priority for Athletica. We are taking concrete steps to strengthen how we collect, handle, and safeguard your data across every part of our platform.
Access & Authentication
Stronger login and access controls
We are making changes to the way users log in and tightening who can reach sensitive data.
Rethinking how users log in
Strengthening authentication and reducing the risk of unauthorised access to accounts.
Multi-factor authentication
Adding MFA for all accounts, with extra requirements for parents and administrators.
Role-based access control
Staff only see data relevant to their role — nothing broader, nothing unnecessary.
Session timeout
Automatic logout after inactivity to protect accounts left open on shared devices.
Audit logging
Recording who accessed what data and when, so every action is traceable.
Data Minimisation & Retention
Collecting only what is essential
We are limiting the data collected to only what is essential and managing how long we keep it.
Limiting data collection
Collecting only what is essential to provide our services — nothing more, nothing less.
Automatic account deletion
Removing inactive accounts after a defined period so data isn't held indefinitely.
Data retention schedules
Deleting or anonymising data once it is no longer needed for its original purpose.
Granular consent
Letting users opt in or out of specific data uses like marketing and analytics.
Right to be forgotten
A clear account deletion flow so users can request full removal of their data.
Youth & Parental Protections
Extra safeguards for families and minors
We are providing extra security for Parent Connect and strengthening protections for users under 18.
Extra security for Parent Connect
Added protections giving families confidence that their connections are secure.
Verified parental consent
Requiring verified parental consent for under-18s before any data is collected.
Strengthened under-18 access controls
Additional safeguards tailored to younger athletes across the platform.
Age-gated features
Restricting certain data collection for minors based on their age group.
No minor data sharing
Restricting the sharing of any minor's data with third parties.
Encryption & Storage
Protecting data at every layer
We are encrypting sensitive data and securing how it is stored and backed up.
Encrypting sensitive data
Personal information is encrypted both in transit and at rest.
Field-level encryption
Sensitive fields like health, medical, and location data receive additional encryption.
Encrypted backups
Regular automated backups stored with encryption for disaster recovery.
Key management
Encryption keys are rotated periodically and managed through a secure key store.
Monitoring & Incident Response
Watching for threats and responding fast
We are actively managing and monitoring how data is used and preparing for the unexpected.
Real-time monitoring
Monitoring for suspicious access patterns across our apps, systems, and databases.
Automated alerts
Automatic alerts for unusual data exports or bulk downloads.
Incident response plan
A documented plan with clear breach notification timelines.
Security audits
Regular security audits and penetration testing to find and fix weaknesses.
Third-Party & Vendor Controls
Holding our partners to the same standard
We are changing how data is used and handled with third parties, ensuring vendors meet our standards.
Data Processing Agreements
DPAs with every vendor that handles user data on our behalf.
Vendor security reviews
Reviewing vendor certifications like ISO 27001 and SOC 2 before onboarding.
Restricted third-party collection
Restricting what third-party tools are allowed to collect through our platform.
Limited tracking pixels
Limiting third-party tracking and analytics to only what is essential.
User Transparency & Control
Putting you in control of your data
We believe you should always know what data we hold and what you can do with it.
Privacy dashboard
A dashboard where users can see what data is held and export it at any time.
Plain-language notices
Clear, simple privacy explanations — not just dense legal text.
Access notifications
Notifying users when their data is accessed or changed.
Privacy contact
An easy contact path to our privacy team for any data concerns.
Compliance & Governance
Built to meet the standards that matter
We are aligning with Australian privacy law and building privacy into everything we do.
Australian Privacy Principles
Aligning with the APPs and the Notifiable Data Breaches scheme.
Staff training
Regular training for all staff on data handling and privacy best practice.
Privacy Impact Assessments
Assessing privacy impact before launching any new feature.
Designated privacy officer
A appointed privacy officer responsible for data protection across Athletica.
More changes ahead
We are planning to make more changes in the future to keep your data safe, secure, and private. As our platform grows, so does our commitment to protecting the people who use it. This page will be updated whenever we introduce new measures.
Questions about your data?
If you have any questions about how we handle your data or want to exercise your privacy rights, we are here to help.