Privacy policy

Trayner is a training and nutrition app made by Just Get Visible Ltd (“we”, “us”). This policy explains what Trayner keeps on your phone, what leaves it, who receives it, how long it’s kept and what you can do about it.

Most of Trayner works without anything leaving your phone. Where something does leave, this policy says what, where it goes and why.

1. Who we are

Just Get Visible Ltd is the data controller for Trayner. Contact for anything in this policy: support@trayner.app

2. The short version

• Your training, food and health history live on your phone. You don’t need an account to use Trayner.
• An account is optional. It’s needed for backup and for Trayner Together. Signing in uploads nothing by itself; backup is a separate switch, off until you turn it on.
• Coaching and scans are written by AI providers. Trayner asks before anything goes to an AI provider (OpenAI and Google). You can change this in Settings ▸ Data ▸ AI coaching. Trayner sends them a rounded summary, or the photo or video you choose to scan. Never your name or date of birth.
• Nothing from Apple Health or Health Connect is used for advertising or sold. Trayner shows no ads and doesn’t sell personal data.
• Under 18: no AI providers, no analytics.
• You can export, delete and switch things off from Settings at any time.

3. What stays on your phone

Unless a section below says otherwise, everything you record in Trayner is stored only on your phone: your profile, workouts, routines, food log, water, supplements, fasts, measurements, progress photos, check-ins and coach chats, and everything Trayner reads from Apple Health or Health Connect.

That has a cost: if you lose your phone and haven’t turned on backup, the data is gone. Settings ▸ Data ▸ Export backup saves a full copy as a file you keep.

4. What leaves your phone, and why

4.1 AI coaching and scans

Trayner’s coaching lines, chat replies, plans, recaps and insights are written by an AI model. So are the results of scans you choose to run. To write them, Trayner sends:

• A summary of your training, recovery and nutrition, rounded (for example steps to the nearest 500, sleep to the quarter hour, calories to the nearest 50 kcal), and, for an insight, the figures on that card.
• Your age in years, and the goal, experience and equipment you chose.
• Injuries and allergies you entered, as you typed them.
• What you type or say to the coach. Voice is turned into text by your phone’s own speech recognition, which Apple or Google may process on their servers; Trayner receives only the text.
• The photos and videos you choose to scan: meals, nutrition labels, your fridge, supplement labels, exercise machines, body-composition reports, progress photos, and form-check videos.

It never sends your name, your date of birth or a health condition you tick in Health & Safety.

Who receives it. OpenAI and Google (the Gemini API), depending on the feature. Requests pass through Trayner’s own server, which forwards them and doesn’t keep them. Neither provider uses them to train its models. Each keeps requests for a limited period to detect misuse: OpenAI up to 30 days; Google for a limited period it doesn’t state.

Form checks. A form-check video is uploaded to Trayner’s server. Our own pose service, on Google Cloud, may measure your joint positions from it before the AI writes the check. The video is deleted once it has been analysed. The written result is kept on our server for up to an hour, until your phone collects it.

Your choice. Trayner asks you before it sends anything to an AI provider, and nothing is sent until you say yes. You can change your mind at any time in Settings ▸ Data ▸ AI coaching. Turning it off works straight away; it doesn’t recall what was already sent. With it off, the features that need it are switched off or use Trayner’s own rules on your phone; the rest of Trayner works as before.

Under 18. If you’ve told Trayner you’re under 18, nothing goes to an AI provider, whatever the setting says.

Searches. When you search for a food, a supplement or an exercise tip, the words you searched go to Open Food Facts (straight from your phone, so it sees your IP address), or through our server to the US Department of Agriculture’s food database, the US National Institutes of Health’s supplement database or an AI provider. Only the words go, never anything about you, and this works whether or not AI coaching is on. Scanning a barcode sends the barcode to Open Food Facts.

4.2 Your Trayner account

You can use Trayner without an account. If you create one — with Sign in with Apple on iPhone, Sign in with Google on Android, or a code we email you — Trayner keeps your email address (an Apple “Hide My Email” address if you chose that), the name Apple or Google gives it, how you signed in, and when. Google and Apple tell Trayner only that: your email address and name. Trayner sends them nothing about you. Signing in uploads nothing by itself. Backing up your data is a separate switch, off unless you turn it on.

To delete your account, go to Settings ▸ Account ▸ Delete account. That deletes your account, your Trayner Together data and your backup from Trayner’s servers, revokes Sign in with Apple, and disconnects Trayner from your Google account if you signed in with Google. Your past challenges kept on that phone go too. The rest of what’s on your phone stays until you use Settings ▸ Data ▸ Reset all data or delete the app.

You can also ask us to delete it without the app: email support@trayner.app from the address you signed in with.

4.3 Backup

If you turn on Back up my data (Settings ▸ Account), Trayner copies your data to your account so it can be restored on another phone: your profile (including your date of birth, height, weight, goals, injuries and any health conditions you entered), workouts, routines, measurements, custom exercises, food log and saved foods, meal plans, supplements, fasts, your training plan, and your coach chats and what the coach remembers about you.

It doesn’t copy what Trayner reads from Apple Health or Health Connect, form checks, photos or videos.

The backup is stored with Supabase, our database provider, in Ireland. Only your account can read it. Turning backup off stops new copies; deleting your account deletes the backup.

4.4 Trayner Together

Trayner Together needs an account. It’s free, and open to everyone who can use Trayner. Its data is stored with Supabase, our database provider, in Ireland.

Your Together name. You choose the name your Circles see (2 to 30 characters). You can change it at any time. It’s deleted with your account.

Circles and invites. A Circle is private: it can’t be searched for, and people join only through an invite. An invite is a link or code made by someone in the Circle. It works for up to 10 people over 7 days, and Trayner stores only a scrambled fingerprint of it, not the code. Anyone signed in who opens an invite sees the Circle’s name, how many people are in it and who sent it, and chooses whether to join. Inside a Circle, members see each other’s Together names and roles, the Circle’s challenges and the routines shared to it. The Circle’s owner and admins can remove members. Trayner records who joined, left or was removed, and when.

Challenges. If you join a challenge in a Circle, Trayner sends the server only what that challenge counts, for the challenge’s days:

• for a steps challenge, each day’s step total read from Apple Health or Health Connect;
• for a workout challenge, each workout’s length and whether it was strength or cardio (not the exercises, sets or weights);
• for a water challenge, each day’s water total and your water goal;
• for a meal-logging challenge, how many meals you logged (never what you ate);
• for a check-in challenge, the days you answered Trayner’s “How do you feel today?” (never the answer);
• for a weigh-in challenge, the days you weighed yourself (never your weight);
• for a sleep challenge, the nights you reached the sleep goal you set, read from Apple Health or Health Connect (never how long you slept);
• for a distance challenge, each day’s distance from Apple Health or Health Connect;
• for a reps challenge, how many reps of the challenge’s move you logged each day;
• for a lifting-volume challenge, each day’s total weight lifted in kg;
• for a personal-bests challenge, how many personal records you set each day — never which exercises, your sets or the weights;
• for a training-plan challenge, the share of each week’s planned sessions you trained, as a percentage;
• for a healthy-habits challenge, which of the challenge’s habits you met each day (steps and sleep judged against your own goals from Apple Health or Health Connect) — never the numbers behind them;
• for a strength challenge, how much your estimated one-rep max on the chosen lift has improved, as a percentage — never the weights;
• for a weight-goal-support challenge, which of its habits you met each day and whether you weighed in that week — never your weight.

Before you join, you choose what the other members of that challenge see — whether you hit the target, your progress as a percentage, or the numbers — and you can share less at any time. A competition ranks people by their numbers, so everyone in one shares numbers. Nothing from Apple Health or Health Connect is used for advertising or sold, and nothing is sent for challenges you haven’t joined. Leaving a challenge stops anything new being sent.

Trayner deletes a challenge — everyone’s progress, the comments and its history — from its servers 90 days after the challenge ends (later only if a report about it is still being looked at). Each person who took part keeps a copy on their own phone, as they saw it, including the other participants’ names, what they shared and the comments; that copy stays until they delete their Trayner account, use Reset all data, or delete the app. Copies on other people’s phones aren’t affected when you delete your own account.

Comments and Cheers. In a challenge you’ve joined, you can comment and cheer. The other people in that challenge see your comments (with your Together name) and how many cheers each person had that day. A comment you delete, or one removed by the Circle’s owner, an admin or Trayner, is deleted. If you block someone, Trayner keeps a note of it so their comments and cheers are hidden from you; they aren’t told. Your comments, cheers and blocks are deleted with your account.

Shared routines. If you share a routine into a Circle, its members see its name, its exercises, sets, reps, rest and tempo, and your Together name. Never your weights or notes. Anyone in the Circle can copy it into their own routines. You, the Circle’s owner or an admin can delete it from the Circle; copies people made stay theirs. It’s deleted with your account.

Inviting from your contacts. If you choose someone from your contacts to invite to a Circle, Trayner uses only the person you chose, on your phone, to open Messages or Mail with the invite. You send it. Nothing from your contacts is uploaded or kept.

Reports and the rules. If you report a person, a Circle or a challenge, Trayner stores who sent it, what it’s about, the reason, any note you add, and a copy of the reported name or text as it was. Trayner emails each report to its moderation inbox (through Resend, Trayner’s email provider) and reviews it. Nobody in your Circles is told who reported them. A report about you is deleted when your account is; a report you made stays without your name if you delete your account. If an account breaks the Together rules, Trayner can remove its words and stop it using Together; Trayner records that and why. Trayner also records which version of the Together rules you agreed to, and when.

Limits. To stop misuse, Trayner counts how often an account does each Together action — making a challenge, commenting, syncing, renaming and so on — per minute. These are counts only, never what was written or synced. A count is deleted the next time you do that action, once it’s outside its limit’s window (an hour for syncing, a day for the rest), and every count within two days at most.

Analytics. If usage analytics is on (Settings ▸ Data ▸ Share usage analytics), Trayner counts how Together is used — for example that a Circle was made, a challenge of a given type was joined or finished, or a comment was posted — with the type, the format and counts only. It never sends a name, a comment, an invite code, anyone’s numbers or who is in a Circle. Analytics is never collected for anyone who has told Trayner they’re under 18.

Age. Together is open to everyone who can use Trayner (13 and over). Circles are invite-only. Everyone agrees to the Together rules first. Names and comments pass a word filter. Anyone can report or block, and Trayner reviews reports.

4.5 Notifications

In the morning, our server sends your phone a silent signal so Trayner can check whether your night’s sleep has synced and prepare your morning summary. To do that, our server keeps your phone’s push token, platform, time zone, app version and the time you usually wake. No health number is ever sent this way; the summary is put together on your phone.

When you’re signed in on a phone that allows notifications, Trayner links that phone to your account (its app ID and time zone), so it can tell you when someone cheers you, comments in a challenge you’re in, or starts a challenge in your Circle. These notifications show names and the challenge only, never what anyone wrote or their numbers, and wait until 7am if they come in overnight. They’re sent through Expo’s push service to Apple or Google. Signing out unlinks the phone; you can turn each kind off in Settings.

4.6 Subscriptions

Payments are handled by Apple or Google; we never see your card. RevenueCat, our subscription provider, receives your purchases from the store, linked to a random ID made on your phone when you installed Trayner. To make sure the free trial is used once, our server keeps a marker for that ID (on Android, a scrambled version of the phone’s Android ID) and a note of your current plan.

4.7 Usage analytics

If Share usage analytics is on (Settings ▸ Data), Trayner sends Amplitude, our analytics provider, which screens you open and which features you use, so we can see what works and what doesn’t. Amplitude receives the random install ID, your age as a range (such as 25–34, never your birthday), and numbers such as how many days a week you train or a workout’s volume. It never receives your name, anything you typed, a photo, a food description or a health reading. Your IP address isn’t collected.

Turn it off in Settings ▸ Data ▸ Share usage analytics. If you’ve told Trayner you’re under 18, analytics never starts.

4.8 Reporting an issue

If you send Report an issue, we receive what you chose to send — the category, your note, the item you flagged (for example a meal estimate, a chat reply or a form check), your app and phone versions, and the install ID — by email, through Resend.

4.9 App updates

Trayner checks Expo, our update provider, for updates. The check sends the app version, the platform and an install ID.

5. Health data

With your permission, Trayner reads the following. On iPhone, from Apple Health (HealthKit): steps, walking and running distance, flights climbed, walking speed, active and resting energy, workouts, sleep, heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen, sleeping wrist temperature, weight, body fat and lean body mass, and, only if you turn it on, menstrual cycle. On Android, from Health Connect: steps, distance, floors climbed, active and total calories, exercise sessions, sleep, heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen, weight, body fat, lean mass and body water, and, only if you turn it on, menstruation. You choose which of these to allow in the system permission screen, and Trayner works with whatever you allow. Trayner only reads; it never writes to or changes your health data. What it reads is stored and worked out on your phone.

What leaves your phone from it is limited to the rounded summaries in section 4.1, the challenge figures in section 4.4 for challenges you join, and your backup’s measurements if you turn backup on (section 4.3). Nothing from Apple Health or Health Connect is used for advertising or sold.

Weight and body composition. With your permission, Trayner reads weight, body fat, lean mass and body water that smart scales and other apps write to Apple Health or Health Connect. These stay on your phone; you can switch the import off in Health settings and delete any imported entry.

6. Camera, microphone, photos and contacts

• Camera: to film a set for a form check, to scan, and for Live Coach. Live Coach watches and counts on your phone; nothing from it is recorded or sent.
• Microphone and speech recognition: for voice commands and talking to the coach (section 4.1).
• Photos: to attach progress photos and to scan a photo you already have. A photo leaves your phone only when you scan it.
• Contacts: only the person you pick, on your phone (section 4.4).
• Location: Trayner doesn’t collect or use your location.

7. International transfers

Some of the providers named in this policy are in the USA. Where data leaves the UK or the EEA, it is protected by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses in our agreements with them, or by the provider’s certification under the UK–US data bridge and the EU–US Data Privacy Framework.

7a. Who handles your data for us

Anyone who handles your data on Trayner’s behalf does so only to provide their service to us, and is required to protect it at least as strongly as this policy describes.

8. How long we keep it

9. Children

Trayner is for people aged 13 and over. If you tell Trayner you’re under 18, nothing goes to an AI provider and no analytics is collected, and the advice is limited: no calorie deficit below maintenance, no fasting, no maximum-weight attempts.

These rules start once Trayner knows your date of birth. If you haven’t given it, Trayner treats you as an adult.

If you think a child under 13 has given us personal data, email support@trayner.app and we’ll delete it.

10. Our legal bases (UK and EU users)

Trayner makes no decisions about you that have legal or similarly significant effects.

11. Your rights

You can ask for a copy of your data, to correct it, to delete it, to restrict or object to how it’s used, and to receive it in a portable format. Much of it you can do yourself:

• A copy: Settings ▸ Data ▸ Export backup.
• Delete what’s on your phone: Settings ▸ Data ▸ Reset all data, or delete the app.
• Delete your account: Settings ▸ Account ▸ Delete account.
• Stop AI coaching: Settings ▸ Data ▸ AI coaching.
• Stop analytics: Settings ▸ Data ▸ Share usage analytics.

For anything else, email support@trayner.app. If you have an account, write from the address you signed in with. If you don’t, send Report an issue from the app as well, so we can find the install ID it carries; it’s the only way we can tell your data apart. We’ll reply within one month.

What we can’t do: recall what AI providers already received. Their misuse logs expire on their own (section 8).

If you’re unhappy with how we’ve handled your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk) or the data protection authority where you live.

12. Security

Everything Trayner sends is encrypted in transit. The keys for AI providers stay on our server, never in the app. Your backup is locked to your account: no other user can read it. No system is perfectly secure, so we keep what we hold to what’s listed here.

13. Changes to this policy

When this policy changes, we’ll update this page, change the date at the top, and say here what changed.