Privacy Policy

The WOW Factor — thewowfactor.earth

Average AF Pty Ltd · ABN 24 647 769 579 · ACN 647 769 579

Version 1.0 · effective 15 October 2026

The WOW Factor is a licensed trading name of Average AF Pty Ltd (ABN 24 647 769 579 · ACN 647 769 579). In this policy, “we”, “us” and “our” mean Average AF Pty Ltd.

This policy explains what we collect, why, where it goes and what you can do about it.

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988. We apply those principles to everything we do, regardless of whether a small business exemption would otherwise be available to us.

1. Contact us

Average AF Pty Ltd trading as The WOW Factor
Privacy contact: [email protected] · 0428 834 944
Billing and invoices: [email protected]
Or the contact form at thewowfactor.earth/contact

2. What we collect

Everyone who visits

• Pages viewed, the page you came from, device type, and an approximate location (country, region, city) worked out from your connection. We don’t keep your IP address for analytics — we use a scrambled code that can’t be read back.
• We do keep your IP address in a security log when you sign up, sign in, reset a password or perform an admin action. Kept for 12 months.
• Anything you send through a contact or feedback form: name, email, message.

Members

• Account: name, email, password (stored hashed — we can’t read it), profile photo.
• Date of birth, to confirm you’re 18 or over.
• Optional profile details: phone, delivery address, emergency contact, social links, your reason for joining, how you heard about us.
• Location: a map pin you choose, used to show events near you.
• Wellbeing activity: your Wellness Baseline (Balance Map) self-ratings across physical, emotional, financial, intellectual and spiritual wellbeing; daily tasks and any reflections you write; quiz answers; WOW points and streaks.
• Events: bookings, likes, series you follow, replays watched, messages you post in event chats.
• Membership and payments: your plan, billing dates, payment history, and your card’s brand, last four digits and expiry. We never see or store your full card number — cards are entered directly into our payment provider’s own form.
• Support: messages you send us.
• Emails: whether our emails were delivered, opened or clicked.

Providers and event hosts

In addition to the above:

• Business name, ABN, ACN or association details, your role, business contact details and address, website and socials, logo, images, offerings and descriptions.
• Documents you upload to prove your business details. Kept private, seen only by our admin team.
• Event hosts: an identity check run by our payment provider using photo ID and a matching selfie. They hold the images. We keep only the result and the date.
• For in-person events, your certificate of currency for public liability insurance.
• Your signed Directory Participation Agreement or Host Agreement, and the version accepted.

Emergency contacts

If you give us an emergency contact, we hold that person’s name and phone number.

Please make sure they know you’ve done it. We’ll only use their details if there’s an emergency at an event, and we delete them when you close your account.

3. Sensitive information, including health

Some of what you share with us is health information under the Privacy Act 1988. That includes your Wellness Baseline ratings, your reflections, your reason for joining, which wellness events you attend, and anything you type into our chatbot.

The selfie used for the host identity check is biometric information, which is also sensitive.

We only collect this with your consent and only to run the features you choose to use. All of it is optional except the host identity check, which is needed only to publish events.

We never sell it, never use it for advertising, and never show your wellbeing ratings, reflections or chatbot conversations to other members.

Please don’t share details of a medical condition, diagnosis or treatment in free-text fields or in the chatbot. We’re a wellbeing community, not a medical service, and that information doesn’t need to leave the country — see section 7.

4. Nobody reads your reflections or your chatbot conversations

We don’t monitor what members write and we can’t respond to it.

Your reflections are private to you. Your chatbot conversation stays in your browser and isn’t stored in our database — we can’t see it, which also means we can’t act on it.

We’re telling you this plainly because people make reasonable assumptions about who might be watching, and the honest answer is nobody.

5. Why we collect it

Change which emails you receive at Account → Email preferences.

6. What’s shown publicly

• Provider listings: business name, logo, images, description, offerings, ABN, suburb or address, website, socials, and any business phone or email you add.
• Events: the host’s name and photo, plus event details.
• Event chats and “who’s watching”: your name and profile photo, to other members at that event.
• Your phone number: only if you tick “show phone publicly”.

Nothing else on your profile is public. Your wellbeing ratings, reflections, date of birth, emergency contact and home address are never shown to anyone.

7. Who we share it with, and where it goes

We may also disclose information where the law requires it, or to protect someone’s safety.

We do not sell personal information. We don’t share it with advertisers or data brokers.

8. Your information is stored overseas

Our website, database and uploaded files are hosted in the United States. Some of our other providers are in the United States and Europe. Our email provider is in Australia.

Information held overseas may be subject to the laws of that country, including laws allowing government access. We remain accountable to you for how it’s handled.

We take reasonable steps to protect it:

• We use established providers with recognised security certifications
• Information is encrypted in transit and at rest
• We limit what each provider receives to what they need
• We are seeking formal data processing agreements with each provider

If you’d rather your information wasn’t stored overseas, the honest answer is that we can’t currently offer that. You’re free not to use the platform.

The chatbot in particular sends what you type to our hosting platform and then to an AI model provider, both in the United States. That’s why we ask you not to type medical details into it.

9. How we protect it

• All connections to the site are encrypted.
• Passwords are stored hashed and cannot be read by us.
• Full card numbers never touch our systems.
• Business proof documents are stored privately and opened only by admins, through short-lived links.
• Only our admin team can reach member records, and admin actions are logged.
• Access is limited to people who need it.

No system is perfectly secure, and we won’t pretend otherwise. If something goes wrong, see section 12.

10. How long we keep it

11. Your rights

• See and correct — most details at Account → My Details.
• Get a copy — ask us for everything we hold about you.
• Delete — close your account at Account → Delete account. Your subscription is cancelled first. You can also ask us to do it.
• Opt out of updates — unsubscribe in any email, or Account → Email preferences.

We respond within 30 days and there’s no charge. We may need to confirm it’s really you first.

Some records stay after deletion where the law requires it — payment and tax records for 7 years. We’ll tell you what’s being kept and why.

12. Data breaches

If a data breach is likely to cause serious harm, we’ll notify the people affected and the Office of the Australian Information Commissioner, as required by the Notifiable Data Breaches scheme, and tell you what you can do to protect yourself.

We have a written response plan and we treat a suspected breach as a breach until proven otherwise.

13. Cookies

• Essential cookies to keep you signed in and the site secure.
• Your browser’s own storage for things like your cart, tips you’ve dismissed, and your chatbot conversation — stored only on your device.
• First-party analytics counting page visits, with no third-party trackers.

We don’t use advertising or third-party tracking cookies. You can clear cookies any time, but you’ll be signed out.

14. You must be 18

The WOW Factor is for people aged 18 and over.

If we find out an account belongs to someone younger, we’ll close it and delete their information. A parent or guardian can contact us at [email protected].

If you’re under 18 and looking for support, Kids Helpline is free and confidential on 1800 55 1800.

15. Complaints

Contact us first at [email protected]. Tell us what happened and what you’d like done. We’ll acknowledge within 2 business days and respond within 30 days.

If we haven’t sorted it out to your satisfaction, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

16. Changes to this policy

We’ll update the date at the top and tell members by email or a notice on the site before significant changes take effect.

Average AF Pty Ltd trading as The WOW Factor
ABN 24 647 769 579 · ACN 647 769 579
[email protected] · [email protected] · 0428 834 944