Privacy policy

What TrainLog collects

• Your account. Your email address and a sign-in ID. If you sign in with Google, also the name on your Google account. Passwords are handled by Google Firebase; TrainLog never sees or stores them.
• Your profile. The details you enter: name, age, sex, height, weight (and your previous weight, to show the change), target weight, body fat if you add it, and your weekly workout target.
• Your training. Workouts with their exercises, sets, reps, weights, times and notes; custom exercises; saved workouts; and your training plan (split, training days, gym time and reminder settings).
• Feedback you send. The message, its type, your account email, and, unless you untick the box, the app version and phone model.
• Technical details. Your phone's time zone, so workouts land on the right day. If the app crashes, a crash report: phone model, Android version, app version, what went wrong, and your sign-in ID. The server's hosting provider may keep standard request logs, such as IP addresses, for a short time.

TrainLog does not collect your location, contacts, photos or advertising ID, does not show ads, and does not use advertising or tracking tools.

On your phone

The app keeps a copy of your data on your phone so it opens instantly and works with no signal, along with any workout in progress and workouts waiting to upload. Gym reminders are scheduled by your phone. When you log out, your cached data and training plan are removed from the phone. The app opts out of Android backups, so none of this is copied to Google Drive or to a new phone.

Why it's used

• To run the app: save your workouts, show your history, progress, body map and Up next.
• To keep your data in your account, so it's there after a reinstall or on a new phone.
• To keep accounts safe: confirming email addresses and limiting abuse.
• To fix crashes and answer your feedback.

Your body measurements and training are personal. They are only used to show you your own stats. They are never sold, never shared for advertising, and never used to build a profile of you for anyone else.

Who helps run TrainLog

A few services process data on TrainLog's behalf, only to provide the app:

• Google Firebase: sign-in (Authentication) and crash reports (Crashlytics).
• Railway: hosts the server and the database where your account data is stored.
• Resend: delivers your feedback messages to the author's inbox.

These services may store data outside India, including in the United States. Your data is not shared with anyone else unless the law requires it.

How long it's kept

Your data is kept for as long as you have an account. When you delete your account, everything you logged is removed from the database straight away and your sign-in is deleted from Firebase. Crash reports are kept by Firebase for up to 90 days, and copies may remain in the hosting provider's backups for a short time before they're overwritten.

Your choices

• See and change your data in the app: your profile on the Profile tab, and every workout from its own page.
• Delete everything from Profile → Account → Delete account. This can't be undone.
• Get a copy of your data, or ask anything about it, using the contact details below.
• Turn off gym reminders in Profile → Training plan, and notifications in your phone's settings.

Keeping it safe

Everything between the app and the server is encrypted (HTTPS). Every request is checked against your sign-in, and each account can only ever reach its own data. No system is perfectly secure, but TrainLog only keeps what it needs to work.

Children

TrainLog is not meant for children under 13. If you're under 18, use it only with a parent's or guardian's permission. If you believe a child has created an account, get in touch and it will be deleted.

Changes

If this policy changes, the date at the top will change too. Big changes will also be mentioned in the app.

Contact

Use Profile → Send feedback in the app. I read everything and reply within a few days.