LEGAL
Cookie and Tracking Notice.
Last updated: 24 May 2026.
This Cookie and Tracking Notice describes how Flex Force X Operations Pty Ltd (ACN 692 102 971; ABN 70 692 102 971) uses cookies, similar web technologies, and on-device storage when you visit flexforcex.fitness or flexforcex.app, or use the FFX iOS app. It supplements, and should be read alongside, our Privacy Policy.
If you have questions about this notice, contact privacy@flexforcex.fitness.
1. What cookies and similar technologies are
A cookie is a small text file that a website asks your browser to store on your device. Cookies are commonly used to keep you logged in, remember your preferences, and help a website work properly across page loads.
We also refer in this notice to similar technologies, including:
- Local storage and session storage: data your browser stores in dedicated areas, accessed by the website's own scripts rather than sent automatically with each request.
- IndexedDB: a browser-based database used to store structured data for offline use.
- iOS Keychain: a secure, system-managed credential store on Apple devices.
- Tracking pixels and web beacons: small invisible images embedded in pages or emails to record opens, clicks, or visits.
2. Cookies used on our web properties
2(a) Strictly necessary cookies
These cookies are required to operate the website. You cannot opt out of them without breaking core functionality, such as staying logged in.
| Purpose | Provider | Notes |
|---|---|---|
| Authentication session | Supabase, set by our application | Keeps you signed in. Set with HttpOnly, Secure, and SameSite=Lax flags. Cleared on sign-out and account deletion. |
| Session security and request validation | Our application | Used to bind requests to your authenticated session and protect against cross-site request forgery. The SameSite attribute on the session cookie is the primary CSRF defence. |
| Load balancing and routing | Our hosting provider | May be set to direct requests to the appropriate server region. Contains no personal information. |
2(b) Functional cookies
We currently set no functional cookies on flexforcex.fitness or flexforcex.app. If we add cookies for purposes such as remembering theme, language, or layout preferences, we will update this notice.
2(c) Analytics
We use Vercel Web Analytics on flexforcex.fitness to understand aggregate website traffic, page views, referrers, browser and device type, operating system, and approximate country-level location. Vercel Web Analytics does not use cookies and is not used for advertising, retargeting, session replay, or cross-site tracking.
We do not use Google Analytics, Posthog, Mixpanel, Amplitude, Segment, advertising pixels, or comparable marketing analytics tools on the website, flexforcex.app, or in the FFX App.
2(d) Advertising and marketing cookies
We use no advertising, retargeting, or cross-site tracking cookies. We do not use Meta Pixel, Google Ads tags, TikTok Pixel, LinkedIn Insight Tag, or any comparable advertising technology. We do not sell or share personal information for behavioural advertising.
3. The FFX iOS App: local storage instead of cookies
The FFX iOS App does not rely on traditional browser cookies. It runs inside a native iOS shell that loads our application in a WKWebView. Information is held on your device using these mechanisms:
- WKWebView local storage and IndexedDB: used to support offline use of the app, keep your session live between launches, and queue actions you take while offline so they can be synchronised when you reconnect.
- iOS Keychain: used to hold authentication tokens in Apple's system-protected credential store, encrypted at rest and protected by your device passcode or biometrics.
- iOS HealthKit, Calendar, and Location data: read only with your explicit permission. These are managed by iOS and are governed by standard iOS permission prompts and our Privacy Policy.
We embed no third-party advertising SDKs in the FFX App. We do not collect Apple's advertising identifier (IDFA) and we do not present an App Tracking Transparency prompt because the app does not engage in cross-app or cross-website tracking.
4. How to manage cookies and on-device storage
On the website
You can control cookies through your browser. Most browsers let you:
- view the cookies stored for a site;
- block all cookies, or only third-party cookies;
- delete existing cookies on demand or when you close the browser; and
- install privacy-focused extensions that block cookies and trackers.
Blocking strictly necessary cookies will prevent you from staying signed in to flexforcex.fitness or flexforcex.app.
Provider guides: Apple Safari | Google Chrome | Mozilla Firefox | Microsoft Edge.
In the FFX iOS App
You can clear locally stored data from inside the app at Settings -> Account -> Clear local data. This removes locally cached plans, queued offline actions, and cached media. Authentication tokens are cleared when you sign out.
To remove all data we hold for you, including your account, use Settings -> Account -> Delete account. This triggers a full server-side deletion in line with our Privacy Policy and Australian Privacy Principle 11. You can also remove all FFX local data at the operating-system level by uninstalling the app.
5. EU/UK consent banner
If you access flexforcex.fitness or flexforcex.app from the European Economic Area, the United Kingdom, or Switzerland, the following applies in addition to the rest of this notice:
- We will display a cookie banner before any non-essential cookies are set on your device, in line with applicable EU and UK rules.
- Strictly necessary cookies are exempt from prior consent and will be set without a banner choice.
- Vercel Web Analytics does not set analytics cookies. Because we currently set no advertising or other optional cookies, the banner is informational only. There are presently no optional cookie categories to opt in or out of.
- If we introduce non-essential cookies in the future, the banner will offer granular opt-in choices and a reject-all option of equal prominence to accept-all. You will be able to change your selection at any time through a persistent Cookie settings link.
- Visitors from outside the EEA, UK, and Switzerland will not see a consent banner. The Australian Privacy Principles do not require one for the cookies described above, and we set no other cookies.
6. Do Not Track and Global Privacy Control
Many browsers offer a Do Not Track signal, and a growing number support Global Privacy Control, which signals an opt-out of the sale or sharing of personal information for cross-context behavioural advertising.
- We do not sell or share personal information for advertising, and we do not engage in cross-context behavioural tracking. Whether or not your browser sends DNT or GPC, our behaviour is the same.
- Where GPC is recognised as a binding opt-out signal under applicable law, we honour it. Because we do not engage in the activities GPC controls, this has no practical change in behaviour on our side.
- DNT is treated as informational. There is no industry consensus on its meaning, and several major browsers have deprecated their DNT controls.
If you would like confirmation of the current state, contact privacy@flexforcex.fitness.
7. Changes to this notice
We may update this notice from time to time, for example if we change our analytics provider, change our hosting provider, or respond to a change in law. The last updated date at the top of this page reflects the most recent change.
Material changes, such as introducing analytics cookies, advertising cookies, or changing the categories of data collected via cookies, will be communicated in advance where appropriate. Continued use of flexforcex.fitness, flexforcex.app, or the FFX App after the effective date of an updated notice indicates your acknowledgement of the changes.
8. Contact us
If you have questions about this notice, want to exercise privacy rights, or wish to make a complaint about how we handle cookies or on-device storage:
Privacy Officer - Flex Force X Operations Pty Ltd
Privacy: privacy@flexforcex.fitness
Data Protection Officer: dpo@flexforcex.fitness
Legal: legal@flexforcex.fitness
Security: security@flexforcex.fitness
Support: support@flexforcex.fitness
Registered office: Level 29, 66 Goulburn Street, Sydney NSW 2000
Phone handling can be requested through the privacy inbox. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner on 1300 363 992 or at www.oaic.gov.au. EU/UK visitors may also contact their local supervisory authority.
By using flexforcex.fitness, flexforcex.app, or the FFX App, you acknowledge the cookie and tracking practices described in this notice.