Privacy policy

This policy explains how Burnly (“we”, “us”) handles your information when you use burnly.com.au and the Burnly app. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). If you have a question, email hello@burnly.com.au.

The short version

• You don't need an account. We link your data to a random ID stored in your browser, not to your name.
• We only ask for your name and contact details when you choose to book a session or contact us.
• Some features send information to AI providers to work. Photos and “how I feel” text aren't stored.
• We don't sell your information or use it for advertising.
• You can delete what you've saved from inside the app.

What we collect

Things you save in Burnly

• Your food log (foods, portions, calories and nutrients, dates and meals), favourites and daily goal.
• If you set up My plan: sex, age, height, weight, goal, activity, diet, foods you avoid, favourite cuisines, whether you're pregnant or breastfeeding, your answers to the exercise health check, your fitness preferences and injuries, and your cooking habits. This includes health information, which we treat as sensitive.
• The meal and exercise plans and recipes made for you.

Things you send us

• Session requests: your name, email, optional phone number and best time to call, session preferences, your message and, if you tick the box, a summary of your plan.
• Contact-form messages: your name, email, topic and message.

Technical information

• A random visitor ID in a cookie (kept for up to a year) so Burnly can show you your own data.
• A one-way code made from your IP address, used to stop spam and abuse and kept for no more than 2 days. We don't store your IP address itself.
• Preferences saved in your browser, such as your country or chosen supermarket.

How we use it

• To show your log, work out your targets, and make your meal plan, recipes and exercise plan.
• To arrange a one-to-one session you ask for, and to reply to your messages.
• To keep Burnly secure and working, including limits that prevent misuse.

We don't use your information for advertising, and we don't sell it.

Who we share it with

We use trusted service providers to run Burnly. They process information for us under their own privacy and security terms:

• Vercel (hosting the website and app).
• Turso (our database).
• Google (Gemini AI) and Perplexity: to recognise foods in photos, estimate nutrition, search for foods and professionals, and make plans, recipes and supportive suggestions. We send only what the feature needs, such as the photo, the words you typed, or your plan details.
• Resend (sending email notifications about session requests and messages).
• Instacart (United States and Canada only): if you choose “Add all to a cart with Instacart”, we send the ingredient list to Instacart to build your cart.
• Voice search uses your browser's built-in speech recognition, which may be processed by your browser or device provider.

When you book a session, we share your request with the professional we arrange for you. When you open a supermarket or delivery link, the store receives only the search in that link. These providers may store or process information outside Australia, including in the United States.

How long we keep it

• Your food log, favourites, goal, plan details and plans: until you delete them.
• Session requests and contact messages: up to 12 months.
• Saved recipes: up to 90 days. They're shared between people with the same meal and preferences and don't identify you.
• Anti-abuse records, including IP codes: up to 2 days.

Your choices and rights

• Delete food entries from Today, remove your plan details in My plan, and delete session requests in the booking form.
• Because Burnly has no accounts, we usually can't tell which data is yours. To ask about, correct or delete information, email us from the browser you use Burnly in, and we'll work with you to find it.
• Clearing your browser's cookies disconnects you from your saved data.

Children

Burnly is for people aged 13 and over. If you're under 18, please use it with a parent or guardian, and talk to a doctor before changing how you eat or exercise.

Security

We use encrypted connections (HTTPS), keep access to data limited, and protect admin tools with strong passwords. No system is perfectly secure, so please don't put information you don't want to share into free-text boxes.

Changes and complaints

We'll update this page if our practices change and show the date at the top. If you have a concern, email hello@burnly.com.au. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.