Privacy Policy

TrainerX is operated by TKT Labs LLC. This Privacy Policy explains how TrainerX ("TrainerX", "we", "us", or "our") collects, uses, shares, and protects information in connection with our coaching workflow platform, websites, and related services (the "Service"). TrainerX is a business tool for fitness coaches and agencies. By using the Service, you agree to the practices described here.

Information we collect

We collect the following categories of information:

• Coach account data. Name, email address, authentication identifiers, billing details, and account preferences for the coaches and agency staff who use the Service.
• Athlete account data. Name, email address, authentication and account identifiers, invite and coaching relationship identifiers, and account preferences.
• Athlete health & biometric data. When an athlete connects a wearable or mobile health source (for example Apple Health on iPhone or Health Connect on a supported Android device), we read and ingest only the categories they authorize. Supported categories can include sleep, heart rate, heart-rate variability, resting heart rate, respiratory rate, oxygen saturation, VO2 max, body weight, steps, active calories, distance, and exercise or workout records. This is sensitive personal data and is processed only on the basis of the athlete's explicit consent.
• Athlete-provided content. Workout logs, exercise results, notes, feedback, and check-ins an athlete submits through the app.
• Coaching content. Notes, tags, and decisions coaches record about their athletes within the Service.
• Operational diagnostics. Log data, IP address, device and browser information, and service diagnostics used to operate, secure, troubleshoot, and improve reliability.
• Public-site analytics. When anyone visits trainerx.io, including the Privacy Policy or Terms opened from the athlete mobile app, the public site sends cookieless page-view and click-interaction events to PostHog. These events use no client-side cookie or persistent storage, are not tied to a TrainerX account, exclude health data, and do not include session recordings.
• Coach product analytics. After a coach opts in, the coach web app and TrainerX backend send limited product lifecycle events and an account identifier to PostHog. These events exclude athlete health data and athlete route identifiers.

How we collect it

We collect information directly from coaches when they create and use an account; from athletes when they grant access to a connected provider through that provider's authorization flow; from Apple Health or Health Connect after the athlete grants category-specific operating-system permissions in the TrainerX mobile app; including data delivered to us via provider webhooks where applicable; and automatically through operational logs and the cookieless public-site analytics described above. Coach product analytics are collected only after the coach opts in.

How we use information

We use information to:

• provide, operate, and maintain the Service;
• compute attention insights, scores, and narratives that help coaches prioritize their roster;
• send the alerts and digests a coach configures;
• enable the mobile health connections an athlete chooses, compute supported health trends, and share those trends with the athlete's connected coach and TrainerX coaching insights (for example Apple Health or Health Connect);
• provide support, secure the Service, prevent abuse, and comply with legal obligations.

Legal bases for processing

Where data-protection laws such as the GDPR apply, we process personal data to perform our contract with you, on the basis of our legitimate interests in operating and improving the Service, to comply with legal obligations, and, for athlete health and biometric data (which is special-category data), on the basis of the athlete's explicit consent, which can be withdrawn at any time.

How we share information

We do not sell personal data. We share information only as needed to run the Service:

• Service providers / subprocessors who host and support the Service, including Google Firebase and Google Cloud Platform (hosting, authentication, database), WHOOP (wearable data), PostHog (product usage analytics), and messaging providers used to deliver alerts.
• Within the coaching relationship: an athlete's daily summaries and logged workouts are shared with their coach as part of the Service.
• Legal & safety disclosures where required by law or to protect rights, safety, and the integrity of the Service.
• Business transfers, if TrainerX is involved in a merger, acquisition, or sale of assets, subject to this Policy.

Data retention

Disconnecting a provider stops TrainerX from collecting new data from that provider, but does not delete data already shared. An athlete can separately delete previously imported Apple Health or Health Connect data from TrainerX; this deletes only that provider's imported TrainerX history and does not delete records in the source health store or the TrainerX account. Leaving a coach revokes access and removes the athlete from active coaching surfaces. Previously shared data remains in a restorable coach archive. Permanent deletion removes the athlete account, coaching relationships, provider credentials, and athlete-identifiable history. Active athlete account data, provider credentials, coaching relationships, and athlete-identifiable history are removed after verified deletion. Firestore recovery versions may remain for up to 7 days. Operational application and service logs may remain for up to 30 days. Required Google Cloud audit logs may remain for up to 400 days. Identifying deletion-request records are deleted or stripped of identifiers within 30 days after verified completion. A non-identifying deletion completion receipt may remain. These restricted records do not keep an active account, provider connection, or restorable coaching relationship.

Security

We protect data with encryption in transit and at rest, scoped access controls, and a backend that owns all writes to protected records. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights & choices

Depending on your location, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to withdraw consent. Athletes can disconnect a provider at any time to stop future collection without leaving their coach. Disconnecting a provider or leaving a coach does not permanently delete an account. Revoking Apple Health or Health Connect permission in operating-system settings stops TrainerX from reading that source but does not delete data already imported into TrainerX. In the TrainerX mobile app, athletes can use Delete imported data to remove one provider's imported history without deleting the source records, coaching relationship, or account. To permanently delete an athlete account in the TrainerX mobile app, go to Settings, open Data & Privacy, and choose Delete account. If the in-app deletion flow cannot start or finish, email us from the athlete account address. Our initial-response target is within two business days. This target covers our first reply, not completion of the verified deletion process. Completion follows our deletion process and applicable legal timelines. To exercise other privacy rights or get deletion support, email privacy@trainerx.io; we will respond within the timeframe required by applicable law.

International transfers

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers of personal data.

Children's privacy

The Service is intended for coaches and their adult clients and is not directed to children under 16. We do not knowingly collect data from children; if you believe a child has provided data, contact us and we will delete it.

Third-party services

Connected providers and integrations (for example Apple Health and Health Connect) handle source data under their own privacy policies. TrainerX reads authorized data but does not write health data to Apple Health or Health Connect. Disconnecting or deleting imported TrainerX data does not delete source records. We encourage you to review the policies of any service you connect.

Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a new "Last updated" date.

Contact us

Questions about privacy or your data? Email privacy@trainerx.io.