Privacy Policy

MyTrainerOS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our fitness coaching platform, including our mobile application and website.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application or website.

Personal Information

We collect information that you provide directly to us when you:

• Create an account (name, email address, password)
• Complete your profile (age, gender, fitness goals, measurements)
• Use our services (workout logs, nutrition entries, progress photos)
• Communicate with us or your trainer
• Make payments (processed securely through Stripe)

Health and Fitness Data

With your consent, we collect health and fitness data including:

• Workout performance (exercises, sets, reps, weight lifted)
• Nutrition logs (food intake, macronutrients, calories)
• Body measurements and progress photos
• Wearable device data (heart rate, sleep, steps, HRV) via Terra API

Voice and Photo Data

When you use our AI-powered features, we collect:

• Voice recordings (temporarily processed for workout and nutrition logging, not permanently stored)
• Photos of meals (processed for food recognition, stored until you delete them)
• AI chat conversations with your trainer's AI assistant

Automatically Collected Information

When you use MyTrainerOS, we automatically collect certain information including:

• Device information (device type, operating system, unique identifiers)
• Usage data (features accessed, time spent, interactions)
• Location data (if you grant permission)
• Log data (IP address, browser type, access times)

We use the information we collect to:

• Provide Services: Deliver our fitness coaching platform, process transactions, and send service-related communications
• AI Features: Process voice commands, recognize food in photos, generate personalized coaching responses, and provide proactive interventions at optimal times (JITAI)
• Personalization: Customize your experience, recommend workouts, and track your progress
• Trainer-Client Relationships: Enable communication and data sharing between trainers and their clients
• Improve Platform: Analyze usage patterns, identify bugs, and develop new features. AI models may be trained on anonymized, aggregated data to improve accuracy
• Safety & Security: Protect against fraud, unauthorized access, and other security threats
• Legal Compliance: Comply with applicable laws, regulations, and legal processes
• Marketing: Send promotional emails through our CRM system (you can opt out at any time)

We do not sell your personal information. We may share your information in the following circumstances:

With Your Trainer

If you are a client, your trainer can access your workout logs, nutrition data, measurements, progress photos, and other information you choose to share.

With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Database and authentication services
• Stripe: Payment processing (we do not store your full credit card information)
• Terra API: Wearable device integration
• Google Cloud Platform: AI backend hosting (LangGraph) and data processing
• Anthropic (Claude AI): AI language model for coaching chat and text processing
• Deepgram: Voice transcription for workout and nutrition logging
• Passio AI: Food recognition from photos
• Resend: Email delivery for CRM campaigns
• Sentry: Error tracking and monitoring

For Legal Reasons

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Row-level security policies in our database
• Regular security audits and penetration testing
• Access controls and authentication requirements
• Secure storage of progress photos with signed URLs

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Data Portability: Request your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails
• Withdraw Consent: Revoke consent for wearable data collection

To exercise these rights, please contact us at privacy@mytraineros.com. We will respond within 30 days.

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account:

• Your profile and personal information will be deleted within 30 days
• Workout and nutrition logs may be retained in anonymized form for analytics
• Financial records will be retained as required by law (typically 7 years)
• Backups containing your data will be deleted within 90 days

MyTrainerOS is not intended for anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@mytraineros.com.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using MyTrainerOS, you consent to the transfer of your information to the United States and other countries where we operate.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information.

Your CCPA/CPRA Rights

As a California consumer, you have the right to:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes, and the categories of third parties with whom we share it
• Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, ongoing transactions)
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information or share it for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: Direct us to limit the use and disclosure of your sensitive personal information to what is necessary to provide our services
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, IP address, device identifiers
• Customer Records: Billing address, payment information (via Stripe)
• Protected Characteristics: Age, gender (voluntarily provided for fitness customization)
• Commercial Information: Transaction history, subscription records
• Biometric Information: Body measurements, progress photos (voluntarily submitted)
• Internet/Network Activity: Browsing history within the app, feature usage analytics
• Geolocation Data: Approximate location (if permission granted)
• Sensory Data: Voice recordings (temporarily processed, not stored), meal photos
• Professional/Employment Information: Trainer certifications, business information
• Health Information: Workout performance, nutrition logs, wearable data, wellness check-ins (classified as sensitive personal information under CPRA)
• Inferences: Fitness level, readiness scores, churn risk scores, TDEE estimates

Sensitive Personal Information

We process the following categories of sensitive personal information solely to provide our fitness coaching services:

• Health data (workout logs, nutrition, body measurements, wearable data)
• Biometric data (progress photos, body composition estimates)
• Precise geolocation (only if explicitly consented for gym check-in)

We do not use sensitive personal information for purposes beyond providing our services. You may limit the use of sensitive personal information at any time through Settings > Privacy & Consent.

Exercising Your Rights

To submit a verifiable consumer request, you may:

• Use the in-app Privacy & Consent settings to manage or delete your data
• Email us at privacy@mytraineros.com

We will verify your identity before processing your request and respond within 45 days. You may designate an authorized agent to submit requests on your behalf.

Data Retention Under CCPA/CPRA

We retain personal information only as long as necessary for the purposes described in this policy. For specific retention periods, see our Data Retention Policy. When your account is deleted, personal data is purged within 30 days, with a 72-hour cooling-off period during which you may cancel the deletion.

MyTrainerOS processes health and fitness data that may be subject to the Washington My Health My Data Act (MHMDA) and similar state health privacy laws. We take additional precautions with all health-related data.

Health Data We Collect

With your explicit consent, we collect and process:

• Workout performance metrics (exercises, sets, reps, weight, RPE)
• Nutrition intake (food logs, macronutrient tracking, hydration)
• Body measurements and composition estimates
• Progress photos
• Wearable device data (heart rate, HRV, sleep quality, steps)
• Wellness check-ins (mood, energy, soreness, stress)
• Readiness and recovery scores

How We Use Health Data

Health data is used exclusively to:

• Provide personalized fitness coaching and workout recommendations
• Generate AI coaching responses and proactive interventions
• Calculate adaptive TDEE, readiness scores, and program effectiveness
• Share with your assigned trainer for coaching purposes
• Detect injury risk and provide safety alerts

We never sell health data. We do not use health data for advertising, employment decisions, or insurance underwriting.

Consent for Health Data

Collection and processing of health data requires your explicit, informed consent. You may:

• Withdraw consent at any time through Settings > Privacy & Consent
• Selectively consent to individual data categories (e.g., wearable data only)
• Request a complete export of your health data
• Request permanent deletion of all health data

Geofencing Restriction

We do not use geofencing technology to identify or track consumers seeking health-related services. Location data, when collected, is used solely for gym check-in features with explicit user consent.

For full details, see our dedicated Health Data Privacy Policy.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of MyTrainerOS after changes are posted constitutes acceptance of the updated Privacy Policy.

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: privacy@mytraineros.com
• Website: https://app.mytraineros.com/contact