Privacy Policy

TrainToday (“we,” “our,” or “us”) operates the TrainToday mobile application and related web services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our app and services. Please read it carefully.

1. Information we collect

We collect information you provide directly and information generated from your use of our services.

• Account information: Email address (used to sign in and send you verification codes and account-related emails).
• Profile information: Name or display name, optional details you add (e.g., goals, equipment, experience, injuries, timezone, schedule preferences) so we can personalize your experience.
• Training data: Workouts assigned to you, sets and reps you log (including weight and completion status), exercise maxes or targets you set, drill or speed or other metrics you record, and session completion and attendance. Coaches can see training data for athletes on their team.
• Team and organization data: Team or organization you join, your role (athlete or coach), optional position or group, and (for coaches) program assignments, roster information, and reminders you send.
• Payment information: If you subscribe or pay through the app or web, payment is processed by Stripe. We do not store your full card number; we store billing-related identifiers (e.g., Stripe customer and subscription IDs) to manage your subscription and access.
• Waitlist and feedback: If you sign up for a waitlist or send feedback, we collect the email and any message or metadata you provide.
• Cookies and similar technologies (web): We use cookies, local storage, or similar technologies for authentication and session management. When product analytics are enabled (see below), additional technologies may be used to measure usage.
• Device and app data: Our mobile app stores session tokens on your device (e.g., via secure device storage) so you stay signed in. Apple and Google may collect device or diagnostic data when you download or use the app according to their respective privacy policies.

2. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the TrainToday app and services (e.g., showing today’s workout, saving your sets and reps, and surfacing progress).
• Authenticate you and communicate with you (sign-in codes, verification emails, and important notices).
• Let coaches manage programs, rosters, and reminders and view relevant athlete training and attendance data.
• Process payments and manage subscriptions (via Stripe).
• Respond to your feedback or support requests.
• Comply with legal obligations, enforce our terms, and protect the rights and safety of TrainToday and our users.
• Analytics (web): When we configure it, we use PostHog on our website and web application to collect product analytics (e.g., page views and in-product events such as onboarding or workout completion) to understand usage and improve the service. Analytics are optional and only run when our PostHog project is enabled.

3. How we share your information

We do not sell your personal information. We may share information as follows:

• Service providers: Third-party services process data on our behalf (e.g., hosting and databases, authentication, email delivery, payment processing, and product analytics). These providers are contractually required to use your information only to provide services to us and to protect your data.
• Coaches and team context: If you are an athlete on a team, coaches and other authorized team staff can see your profile and training data as needed to run the team and programs.
• Legal and safety: We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of TrainToday, our users, or others.

Key service providers include Supabase (database and related backend), Stripe (payments), email delivery for sign-in and verification, and PostHog (product analytics on the web, when enabled).

4. Data retention

We retain your information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account or ask us to delete your data, we will remove or anonymize your personal data in line with our retention practices and applicable law, except where we must retain it for legal or safety reasons.

5. Security

We use industry-standard measures to protect your data, including encryption in transit and at rest where supported by our providers, access controls, and secure authentication. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

6. Your choices and rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct or update your information (e.g., in the app profile or account settings).
• Request deletion of your personal information or your account.
• Object to or restrict certain processing of your data.
• Data portability (e.g., a copy of your data in a portable format).
• Withdraw consent where we rely on it.
• Lodge a complaint with a supervisory authority.

To exercise these rights or ask questions about your data, contact us at the email below. We will respond in line with applicable law. If you are in the European Economic Area or the United Kingdom, we process your data on the basis of contract performance, consent, or legitimate interests as appropriate; you may object to processing based on legitimate interests.

California residents (CPRA): You may have the right to know what personal information we collect, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell your personal information. To submit a request, contact us at the email below; we will verify your request as required by law.

Other U.S. states: If your state provides similar privacy rights, you may contact us using the same email and we will honor applicable requests.

7. Children’s privacy

Our services are not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it promptly.

8. International transfers

Your information may be processed in the United States or other countries where our service providers operate. By using our services, you understand your information may be transferred to countries with different data protection laws. Where required, we use appropriate safeguards (e.g., standard contractual clauses) for such transfers.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. If we make material changes, we may notify you by email or through the app. Your continued use of TrainToday after changes constitutes acceptance of the updated policy where permitted by law.

10. Contact us

For privacy-related questions, to exercise your rights, or to request a copy of this policy, contact us at:

Email: support@traintoday.app

You can also reach us via the support link in the app or on our website.