Privacy Policy

Account information: your name, email address, and password (stored only as a secure hash). If you sign in with Google or Apple, we receive your name, email address, and an account identifier from that provider.

Health and fitness information you provide: body weight and target weight, height, age, gender, body fat estimate, fitness goal and pace, experience level, training days, available equipment, and any injuries or body areas you ask us to work around.

Activity you log: workouts, exercises, sets, reps, weights, and personal records; weight entries; meals, foods, calories and macronutrients; water intake; nutrition targets and their adjustments; and the reminder times you choose.

Meal photos and food descriptions: if you use the AI meal scanner, the photo you take or choose from your photo library, and any caption you add. If you use AI estimation, the food name you type. If you scan a barcode, the barcode number.

Sign-in and device information: when you sign in, we store your IP address and your device's user-agent string with your session to keep your account secure.

Diagnostics: crash reports and error details (such as app version, operating system, and device model) to find and fix bugs. Crash reports do not include your workout, meal, or body data.

Purchases: if you subscribe to Trainlo Pro, Apple or Google processes the payment. We never receive your card details. We store the subscription product, its purchase token or transaction ID, and its expiry date so we can unlock Pro.

Reports you send us: if you report an AI result, we store your report and the result you reported.

• To build your workout plan, track your progress, and set and adjust your calorie and macro targets.
• To estimate the nutrition in meal photos and food descriptions you submit.
• To sync your data across your devices and keep your account secure.
• To verify subscriptions and unlock Pro features.
• To send account emails (verification, password reset, and account deletion notices).
• To diagnose crashes and improve the AI results you report.

We do not sell, rent, or trade your personal or health information, and we never use it for advertising or share it with data brokers.

When you scan a meal or ask for an AI estimate, the photo, caption, or food name is sent over an encrypted connection to a third-party AI service provider that processes it on our behalf, only to identify foods and estimate their nutrition. Your name, email, and other account details are not sent with it.

• Our AI service provider is not permitted to use your photos or descriptions to train its models or for any purpose of its own.
• Nutrition values produced by AI are estimates and may be inaccurate. Check them before you log them.
• Food names may also be looked up in public food databases (USDA FoodData Central) to improve accuracy, and scanned barcodes are looked up in Open Food Facts. Only the food name or barcode is sent, never your account details.

Meal photos are not saved: a photo is used only for the scan you take it for. We don't keep it on our servers or in your meal history; only the foods and nutrition values you choose to log are saved.

We share information only with service providers that process it on our behalf to run Trainlo:

• Cloud hosting (Vercel): runs our servers.
• Database hosting (Neon): stores your account and app data.
• AI service provider: estimates nutrition from meal photos and food descriptions, as described in section 3.
• Email delivery (Resend): sends account emails.
• Crash reporting (Sentry): receives crash and error reports.
• Sign-in and payments (Google and Apple): optional sign-in, and subscription billing through Google Play or the App Store.

We keep your data for as long as your account exists. You can delete individual meals, workouts, and weight entries in the app at any time.

Deleting your account: in the app, go to Profile → Delete Account. If you no longer have the app, request deletion at trainlo.app/delete-account; we email you a link to confirm.

Once you confirm, you are signed out everywhere and your account is scheduled for deletion 30 days later. Signing in before then cancels the deletion. After 30 days, your account and all associated data (profile, workouts, meals, weight and water logs, subscription records, and AI reports) are permanently deleted. Copies in our database provider's backups expire within a further 30 days.

What is not deleted: Apple and Google keep their own records of your purchases under their privacy policies. Technical server logs that may contain your user ID expire automatically within 30 days. When you confirm deletion we turn off renewal of a Google Play subscription; Apple does not let apps cancel App Store subscriptions, so cancel that yourself in your Apple ID settings.

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can view, edit, and delete your data in the app, or email us at trainlo.team@gmail.com and we will respond within 30 days.

All traffic between the app and our servers is encrypted with HTTPS, and our providers encrypt stored data at rest. Access to production data is limited to what is needed to run and support Trainlo. No system is perfectly secure, but we work to protect your information.

Trainlo is not directed to children under 13 (or under 16 where local law requires). We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy. We will change the date at the top and, for significant changes, tell you in the app or by email.

• Developer: Menna AI
• Email: trainlo.team@gmail.com
• Response time: within 30 days (usually much sooner)