Privacy Policy
1. Introduction & Scope
This Privacy Policy explains how TrainXP ("we", "us", or "our") collects, uses, stores, and protects your information when you use our mobile application (the "App") and related web services.
By downloading, accessing, or using TrainXP, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.
2. Information We Collect
We collect only the minimum necessary information required to deliver personalized workout routines, calculate progressive overload benchmarks, and render interactive RPG gamification:
A. Account & Authentication Data
- Sign-in Credentials: When signing in via Apple Sign-In or Google OAuth, we receive your unique authentication identifier and, if permitted by you, your email address. You may utilize Apple's "Hide My Email" relay service to keep your personal email private.
- Profile Information: Optional display username and profile avatar.
B. Fitness & Biometric Metrics
- Body Profile: Bodyweight and height are used to calculate BMI and strength-to-bodyweight ratios. Date of birth is used to decide whether adult BMI categories can be shown. Gender is displayed in your profile.
- Training Logs: Workout history, exercises performed, sets, repetitions, weight lifted, rest intervals, and Personal Record (PR) achievements.
- Target Focus Areas: Target muscle selections and joint sensitivity preferences (used to filter exercise suggestions based on your selections; the App does not assess injury risk).
C. Device & Diagnostics Data
- Optional feedback: If you choose to send feedback from the App, the email draft includes the message you write, app version, build number, platform and OS version, and your account email (or guest status). It is sent only if you choose to send the email. The App does not request access to HealthKit or collect health sensor data.
D. Purchase & Subscription Information
- When purchasing a TrainXP Pro subscription, transactions are processed through Apple App Store (StoreKit) or Google Play Billing, with RevenueCat used to manage purchase validation and subscription entitlements. The App receives subscription status associated with your TrainXP account. We do not receive or store your credit card or financial information.
3. How We Use Your Information
Your information is used strictly to power core app features:
- Calculating strength levels, 1-Rep Max (1RM) estimations, and unlocking 3D metallic achievement trophies.
- Delivering real-time workout timers and rest notifications via iOS Live Activities on Lock Screen and Dynamic Island.
- Generating personalized workout routines tailored to your available equipment and training experience.
- Verifying active Pro subscription entitlements and purchase restoration.
- Preventing fraudulent behavior and debugging application stability.
4. Third-Party Service Providers
We work with trusted infrastructure providers that adhere to rigorous security standards (SOC 2, ISO 27001, GDPR compliance):
- Supabase: Cloud database and authentication infrastructure. User data is encrypted both in transit (TLS 1.3) and at rest (AES-256).
- RevenueCat: In-app subscription infrastructure used to validate App Store receipts and manage Pro access.
- Apple Inc.: Processes payments and hosts iOS Live Activity push notifications.
5. Health Data Privacy & Non-Disclosure
In accordance with Apple App Store Review Guidelines, health, workout, and fitness data collected by TrainXP:
- Will NEVER be sold to data brokers, marketing agencies, or advertising platforms.
- Will NEVER be used for third-party advertising or cross-app tracking.
- Will NEVER be disclosed to third parties without your explicit consent, except as required by law or to provide the core services described herein.
6. Data Retention & Account Deletion
We retain your training data only as long as your account remains active. You maintain complete control over your data:
Method 1 (Instant in-app): Open TrainXP → Navigate to Profile → Tap Settings (Gear icon) → Tap "Delete Account & Data" → Confirm deletion. All personal profile information, workout logs, and PR benchmarks are permanently purged immediately.
Method 2 (Web Request): Visit our Account Deletion Page or email us at support@calgo.tech with your registered email address. We will permanently delete all records within 48 hours.
7. Children's Privacy
TrainXP is not directed to children under 13 years of age. We do not knowingly collect personal identifiable information from children under 13. If you become aware that a child under 13 has provided us with personal information, please contact us immediately, and we will delete the data.
8. International Data Transfers (GDPR & CCPA)
If you reside in the European Economic Area (EEA) or California, you are entitled to specific rights under GDPR and CCPA, including the right to access, rectify, port, or request the erasure of your personal data. You may exercise any of these rights by emailing support@calgo.tech.
9. Changes to This Privacy Policy
We may update our Privacy Policy periodically. We will notify you of any material changes by updating the "Last Updated" date at the top of this page and providing an in-app notice where appropriate.
10. Contact Us
If you have any questions or concerns regarding this Privacy Policy or our data practices, please reach out to us:
- Email: support@calgo.tech
- Developer Support: linhd220901@gmail.com
- Support Center: https://trainxp.vercel.app/support