Consumer Health Data Privacy Policy

This policy is written for the consumer health data laws of Washington State (the My Health My Data Act) and Nevada, and it applies to everyone who uses Trainzo, wherever they live. It sits alongside our Privacy Policy, which says the same things in more detail.

From your phone, only if you connect it. Daily totals from Apple Health or Health Connect: steps, sleep (and time in each sleep stage where recorded), resting heart rate, active energy, weight, and workouts (type, start time, length, distance, energy, and the app that recorded it). Used to show you your own activity and, only for the coaches and the kinds of data you choose, to show your coach, fill in habits your coach set, and tell your coach when your activity drops or stops arriving.

What you record. Weigh-ins, body measurements and body composition, progress photos, the sets you log, habits and goals, and your answers to check-in questions your coach sends (which may cover sleep, energy, stress, appetite or how training felt). Used to deliver the coaching you signed up for and to show you and your coach your progress.

What your coach records. Notes your coach keeps about you — an old injury to train around, for example — and what they write in messages to you. Used by your coach to coach you.

From you, as you use the app or the website; from your phone’s health app, if you connect it; and from your coach, about the coaching they give you.

Your coach. What you record inside a coaching relationship is seen by the coach you train with there, and by staff of their business whom they give access to. A client of two coaches has two sealed relationships: neither coach sees the other’s. Data from your phone is different: no coach sees any of it until you share it, coach by coach and kind by kind, and you can stop at any time.

Our service providers, who process it only on our instructions to run Trainzo: Supabase (database and file storage, in Frankfurt, Germany) and Vercel (which serves the pages that display it). Notifications are delivered through Expo, Apple and Google’s push services; they may carry a habit’s name or a short message from your coach, and never the numbers synced from your phone.

Nobody else. We do not sell consumer health data, and we do not share it with advertisers, data brokers or for marketing. We have no affiliates that receive it. We do not use geofencing around places where health care is provided.

You can ask us to confirm whether we hold your consumer health data, to give you a copy of it and a list of everyone it has been shared with, and to delete it. You can withdraw your consent to any use of it.

Much of this you can do yourself, straight away: change or stop what each coach sees from your phone in the app (App settings, then Apple Health or Health Connect); Disconnect, with the choice to delete everything synced; and delete your account and everything tied to it from Account settings, in the app or on the web.

For anything else, write to privacy@trainzo.com from the email address on your account. We answer within 45 days, and tell you if we need up to 45 more and why. We will not charge you or treat you differently for using these rights.

If we turn a request down, we will say why. You can appeal by replying to that answer; we will respond to an appeal within 45 days. If you are still not satisfied, you can contact the Attorney General of Washington or of Nevada, or the data protection authority where you live.

We will update this page when our practices change, and the date at the top will say when. We will ask for your consent again before using consumer health data for anything this policy does not already say.

Questions about this document can go to privacy@trainzo.com, or by post to Cavrian FZE LLC, Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.