Privacy Policy

1. Information We Collect

Account information

When you create an account we collect your name, email address, and a password. If you register as a practitioner, we also collect the professional details you provide in your application, such as your qualifications, accreditation, and practice information.

Sign in with Google

If you choose to sign in with Google, we receive your basic Google profile information: your name, email address, and profile picture. We use this information solely to create and authenticate your ACE-Flex account. We do not request access to any other Google services or data, and we do not store your Google password.

ACE-Flex's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or transfer it to third parties except as necessary to provide sign-in functionality.

Program information

To tailor the program to you, we collect the answers you give to our intake questions and your progress through the course modules.

Payment information

Payments are processed by Stripe. We do not store your full card details on our servers; Stripe handles them in accordance with its own privacy policy. We keep records of your subscription status and transaction history.

Consent records

When you accept these documents at registration we record the date and the version you accepted, so we have an accurate record of what you agreed to. This acceptance covers ACE-Flex only. The Moodle learning platform is operated on MoodleCloud and presents its own privacy notice, cookies policy and terms of service, which you will be asked to accept the first time you open a module. Those are agreements between you and Moodle Pty Ltd, and we cannot accept them on your behalf.

Technical information

Like most websites, we automatically receive standard technical data such as your IP address, browser type, and pages visited, and we use essential cookies to keep you signed in and secure your session.

2. How We Use Your Information

• To create and manage your account and authenticate you.
• To deliver the ACE-Flex program, including provisioning your access to our learning platform and tracking your module progress.
• To connect learners with accredited practitioners where you request it.
• To process payments and manage subscriptions.
• To communicate with you about your account, such as password resets, enrolment confirmations, and important service updates.
• To maintain the security and integrity of our services.
• To comply with our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. How We Share Information

We share personal information only with service providers who help us operate ACE-Flex, and only to the extent needed to provide the service:

• Supabase — secure hosting of our database and authentication.
• Moodle (Moodle Pty Ltd) — our learning platform at ace-flex.moodlecloud.com, where we automatically create a learning account for you using your name and email address, enrol you in the modules your access level includes, and where your progress through those modules is recorded. We create this account for you so you do not have to register a second time; if you sign in to ACE-Flex with Google, you may also be able to use Google to sign in there. Moodle Pty Ltd applies its own privacy notice and cookies policy to that platform, which you will be asked to accept on your first visit.
• Stripe — payment processing.
• Vercel — website hosting.

If you are enrolled through a practitioner, that practitioner can see your program progress in order to support you. We may also disclose information if required by law or to protect the rights, safety, or property of ACE-Flex or others.

4. Data Retention and Security

We retain your information for as long as your account is active or as needed to provide the service and meet our legal obligations. We use industry-standard safeguards — including encryption in transit, access controls, and reputable infrastructure providers — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data using appropriate technical and organisational measures.

5. Your Rights and Choices

You may access and update your account information at any time from your account settings. You can also contact us to request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and associated data. If you signed in with Google, you can additionally revoke ACE-Flex's access at any time from your Google Account's security settings.

6. Children's Privacy

ACE-Flex is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be communicated through the service or by email.

8. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at jamie.berry@neurotreatment.com.au.