Privacy policy

Last updated: 21 August 2026

Solo2Scale is operated by Nexus Health Collective Pty Ltd (ABN 49 668 019 163) (“NHC”, “we”, “us”). Contact: hello@solo2scale.com.au

We are bound by the Australian Privacy Principles under the Privacy Act 1988 (Cth).

What we collect

When you take the assessment

Your answers to 17 questions covering where you are up to, your finances, working hours, caring responsibilities, clinical experience, attitudes to business tasks and your reasons for working for yourself. If you are already trading you are asked 16, because one question about dropping employed days does not apply to you. The result. Optionally, a free-text description of what you want to build, and what you would like help with first.

Of those answers, only one is stored: where you are up to, which you are asked first. We keep it so we can tell which kinds of practitioner the assessment reaches. The rest are used to work out your result and are not kept, and your result cannot be turned back into them.

When you create an account

Your name, email address and a securely hashed password. We never store your password itself.

When you subscribe

Your subscription tier, start date, renewal date and payment history. Card details go directly to Stripe and are never stored by us or passed through our systems.

As you use the platform

Which modules you have completed. Your answers to check-ins. Your weekly hours worked. Your revenue figures, if you enter them. Your stated non-negotiables and whether you have held them. Habit tracking. Any notes or plans you save.

When you contact us as a founding member

Messages you send us and notes we take from calls, so we can pick up where we left off. Calls are not recorded.

Automatically

A one-way salted hash of your IP address, used only to limit how often forms can be submitted. We do not store the IP address itself.

We do not collect payment card details, government identifiers, clinical records, or any information about your clients or patients. Please do not enter patient information into the platform.

Health and wellbeing information

Some of what we collect touches on your wellbeing: how burnt out you feel, your working hours, and whether you are holding the limits you have set for yourself. Depending on how you answer, some of this may be health information, which receives additional protection under the Privacy Act.

We ask for your consent before you start the assessment and before you begin tracking. You do not have to answer any of it. We use it to calculate your result and to hold you to the limits you have set yourself. We do not disclose it to anyone.

What is never sent to advertisers

Your assessment answers, your six dimension scores, your result, which modules you have opened or completed, and everything you enter in a weekly check-in are never sent to Meta or to any other advertising platform. None of it leaves our own systems for advertising or measurement, and no advertising tool runs on the pages where you enter or read any of it.

Analytics

We do not use Google Analytics, Google Tag Manager, or any general website analytics product, and there is no third-party analytics script on this site.

We do count three things ourselves, so we can tell whether people who see their result go on to ask for help: that a result was viewed, that an email was submitted, and that a share link was clicked. The first of those also records the starting dose and the pattern your answers produced, with nothing that identifies you. These go to our own server, and we may forward them to a private endpoint that we control. They are not sent to Meta or to any advertising platform.

Advertising: the Meta Pixel

We use the Meta Pixel on the public part of this site to measure whether our advertising works. It is provided by Meta Platforms Ireland Limited, the company behind Facebook and Instagram.

Meta is not a supplier holding data on our behalf, in the way our hosting and email providers do. It receives data for its own advertising and measurement purposes as well as ours, so it is set out here on its own rather than in the table of providers below.

What the pixel sends

On a page where it runs, the pixel sends Meta the web address of that page, the address of the page you came from, your IP address, and your browser and device type. It also reads and sets Meta’s own cookies in your browser: _fbp, which identifies your browser to Meta, and _fbc, which is set only if you arrived here by clicking a Meta ad.

The only thing we ask it to record is that a page was viewed. We do not send it your name, your email address, or anything you have typed into this site.

When you give us your email at the result

We send Meta a one-way hashed version of your email address, so that an ad click can be matched to a sign-up. Hashing turns the address into a fixed string of letters and numbers that cannot be turned back into the address. The address itself is never sent.

Nothing about your assessment goes with it. Not your answers, not your scores, not your starting dose, and not the pattern your answers produced. The web address we attach is the plain page address with everything after it removed, so the part of a result link that encodes your scores is never included.

This one event is sent from our server rather than from your browser, which is what lets us choose every part of it by hand. It is the only reason we can measure whether our advertising works while keeping the pixel off the assessment and the result page entirely.

Where it runs

On our marketing pages: the home page, the about page, the pricing and legal pages, the sign-up and login pages, and the page you land on after subscribing.

Where it does not run

It does not run on the assessment questions, and it does not run on your result page. The assessment asks about your money, your hours and how you are coping, and your result page carries your scores in its web address. Neither is somewhere an advertising tracker belongs.

It does not run on any page you reach after signing in either: Today, Progress, Modules, Setup, My setup, Account, the weekly check-in, onboarding, or the dashboard.

On those pages the pixel is not loaded at all, so nothing is sent, no Meta cookie is set by us, and no request is made to Meta. This is built into the site itself rather than being a setting we could change in Meta’s dashboard by accident.

Cookies

There are two kinds on this site, and only one of them is optional.

Essential cookies

Set by us and by Supabase to keep you signed in and to keep your session secure, and by Stripe while you are paying. The platform cannot work without them, so there is nothing to turn off.

Advertising cookies

_fbp and _fbc, set by Meta through the pixel described above, on public pages only. They are used to measure our advertising and to show ads. They are not needed for anything on this site to work.

Consent

This site is intended for people in Australia. We are bound by the Australian Privacy Principles, which require us to tell you what we collect and who receives it, and this policy is how we do that.

We do not show a cookie banner, and we do not ask for your agreement before the pixel runs on a public page. If you are in the European Union or the United Kingdom, please note that we do not operate a consent mechanism of the kind those laws expect, and we do not claim to comply with the GDPR or the UK GDPR.

How to stop it

In your Meta account, under Accounts Centre, open “Your activity off Meta technologies” to see what has been sent, disconnect it from your account, or turn future activity off. In your browser, blocking third-party cookies or using a content blocker stops the pixel loading here at all.

Refusing it changes nothing about the product. Every page, every feature and your result work exactly the same either way, and we will never ask you again or treat you differently for it.

Who we share it with

We use third-party providers to run the service. Each holds data only for the purpose of doing its job.

Your account and assessment data is stored in Japan. By using the platform you agree that your information may be disclosed to these providers, including where they are located overseas. We take reasonable steps to ensure they handle it appropriately, but overseas recipients may not be subject to the Australian Privacy Principles, and you may not be able to seek redress under the Privacy Act in relation to them.

Meta is not in this table. It is not holding data for us in the way these providers are, so it is described in its own section above.

We do not sell personal information, and we do not provide it to data brokers.

How long we keep it

While your account is open, and for 12 months after you close it in case you return. After that we delete it, except for financial records, which we are required to keep for seven years under tax law.

Rate-limiting records are deleted after 24 hours.

Security

Data is stored in a database with row-level security enabled, reachable only by our server. Access is restricted to the operator of NHC. Passwords are hashed. Connections are encrypted.

No system is completely secure. If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner, as required under the Notifiable Data Breaches scheme.

Your choices

You can ask us to tell you what personal information we hold about you, correct anything that is wrong, delete everything we hold, or provide you with a copy of your data.

Email hello@solo2scale.com.au and we will respond within 30 days. There is no charge.

Deleting your account removes your data and ends your access. We cannot restore it afterwards.

Complaints

Email hello@solo2scale.com.au and we will respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

We will post any changes here and update the date at the top. If a change materially affects how we use information we already hold, we will email you.