Privacy Policy

Trainr is operated by Helord Studios S.R.L. (CUI 48354541), a company registered in Ploiești, Romania ("Trainr," "we," "us," or "our"). Your data is yours. We build a private layer for tracking physical change, and we hold health information to a high standard. This policy explains what we collect, why, how we handle it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Romanian data-protection law. It applies to the Trainr app and website.

1. Data ownership — and what we never do

We do not operate an advertising business. We do not sell, rent, or share your personal or health data with data brokers, insurers, advertisers, or pharmaceutical networks, and we never use your health data to train advertising profiles. You pay us for software that creates clarity; you are the customer, not the product.

2. Who is responsible for your data

Helord Studios S.R.L. (CUI 48354541, Ploiești, Romania) is the data controller for the personal data you provide through the Service. For any privacy question, to exercise your rights, or to reach our data-protection contact, email privacy@trainr.club. When you link a professional and share your data with them, that professional acts as an independent controller for the data they access and any guidance they give (see Section 6 and our Professional Data Processing Agreement).

3. Information we collect

We collect only what is needed to run the Service:

• Account data: your email address and authentication tokens.
• Profile & goals: details you enter such as height, weight, age, dietary preferences, and targets.
• Body-scan data: the front and side photos you take for a scan, and the 3D mesh and estimated measurements generated from them.
• Nutrition data: meal photos or descriptions you log and the estimated calories and macros derived from them.
• Fasting and activity data you record, and health data you choose to sync via Apple HealthKit.
• Documents you upload, including lab or blood-test reports, if you choose to add them.
• Care-team data: records of the professionals you link with and the consent you give (see Section 6).
• Diagnostics: limited crash and product-analytics data to keep the app working. We do not sell this.

4. Health data & your consent (legal basis)

Some of what you record — body-composition estimates, nutrition logs, and especially any lab or blood-test reports you upload — is health information (special-category data under the GDPR). We process it only with your explicit consent, which you give when you enter this data or turn on a feature, and which you can withdraw at any time by deleting the data, revoking a linked professional, or deleting your account. Where other legal bases apply (for example, performing our contract with you or complying with law), we rely on those as well. We do not use your health data for advertising, and we do not use uploaded lab reports to generate meal plans or any automated guidance.

5. How we use your information

We use your data to operate and improve the Service: to build your 3D model and measurements, estimate the nutrition of your meals, track your progress over time, sync with Apple Health where you enable it, and — where you choose — plot anonymized, de-identified body-composition figures against age/gender cohort averages. In those cohort comparisons, identifying details (name, email, precise location) are removed. We also use limited diagnostic data to fix crashes and keep the app reliable.

6. Sharing with your Care Team

Trainr lets you link with an independent professional (such as a dietician, nutritionist, or trainer) and share your data with them. This sharing is entirely under your control:

• Nothing is shared until you enter a professional's link code and give explicit consent. We show you what will be shared before you agree.
• Once linked, that professional can view the data you record — meals, body measurements and scans, fasting history, and any blood-test reports you upload — and may send you diet plans.
• You can revoke access at any time in the app; this stops their future access immediately.
• Professionals are independent third parties. When you share data with one, they become responsible for how they use it. Trainr transmits and displays your data; it does not interpret it.

Friends and challenges. If you use friend challenges or friend links, the person you challenge or befriend sees the first name you enter, the exercise and target, the camera-counted result (a number of reps or seconds) and your head-to-head record with them. Nothing else is shared: never your body scans, measurements, photos, meals or health data, and exercise video never leaves your phone. To run the Friend Reward we record who invited whom and whether an invited friend finished a challenge; only we can see this. You can remove a friend at any time in the app, and deleting your account removes you from every friend list.

7. Trainr is not a medical device

Trainr is a consumer wellness tool, not a medical device. We store and display the health information you record — including lab reports — but we do not read, evaluate, flag, or interpret their values, and we do not provide medical advice. Interpretation of any health data is for you and any qualified professional you choose. See our Terms of Service.

8. Service providers & international processing

We rely on a small set of vetted service providers ("sub-processors") who process data on our behalf, under contract, solely to operate Trainr. We do not sell your data to them or to anyone else.

• Apple — App Store payments and subscription billing; Apple HealthKit, for the health data you choose to sync.
• Google Firebase / Google Cloud — account authentication, secure database and file storage (including uploaded lab reports), product analytics, and crash diagnostics.
• Google (Gemini) — meal photos and descriptions are sent to Google's Gemini models, through a secure server-side proxy, to estimate calories and macros.
• Esenca — the front and side photos from your body scan are sent to Esenca's engine to generate your 3D model and measurements.
• RevenueCat — manages and validates your subscription entitlements.

Some of these providers operate servers outside your country, including in the United States. Where required by law, such transfers are made under appropriate safeguards, and we remain responsible for how these providers handle your data.

9. Retention, export & deletion

We keep your data only as long as your account is active or as needed to provide the Service and meet legal obligations. You can export a full copy of your data at any time from the app. You can delete individual items (including uploaded reports) or your entire account from the app; deleting your account removes your associated data — including files in cloud storage — from our primary systems within 7 days, and from encrypted backups within 30 days, except where we must retain limited records to comply with law.

10. Your rights

Under the GDPR you have the rights to access, correct, delete, port, or restrict the processing of your data, to object to certain processing, and to withdraw consent at any time (which does not affect processing already carried out). If you are in the EEA you may lodge a complaint with your local data-protection authority; in Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro). If you are in California, we do not sell or "share" your personal information as those terms are defined under the CCPA/CPRA. To exercise any right, contact privacy@trainr.club; we respond within one month.

11. Children

Trainr is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will delete it.

12. Security

We encrypt your data in transit (TLS) and at rest, restrict access to production systems, and gate access to your data behind your account and the security rules of our infrastructure. A professional can only reach your data while a consent you granted is active. No system is perfectly secure, but we work to protect your information and to notify you and the relevant authorities of any breach as required by law.

13. Changes & contact

We may update this policy as the Service evolves; we will note the "last updated" date above and, for material changes, provide additional notice. For any privacy question, contact privacy@trainr.club.