Privacy Policy

We collect what Trainzo needs to work and nothing for advertising. We do not sell personal data. A coach’s clients, programming and notes are visible only to that coach. You can delete your account, and everything tied to it, from inside the product.

For your own account — your name, email and billing — Cavrian FZE LLC is the controller.

For information a coach records about their clients, the coach decides what is collected and why; we process it on their instructions in order to run the service. If you are a client and want something changed or removed, your coach is the first place to ask, and you can also write to us.

Account. Name, email address, password (stored hashed, never in readable form), and optionally a photo, phone number, timezone, and a short profile.

Roster. The clients a coach adds: name, email, and whether an invitation has been accepted.

Training. Workouts, programmes, scheduled sessions, and the sets, reps and weights a client logs.

Body measurements. Weight and any other measurements a client chooses to record. These are optional, they belong to the coach-client relationship they were entered under, and a client training with two coaches does not share them between the two.

Messages. Messages between a coach and their client, and private notes a coach writes about a client. Private notes are never shown to the client.

Technical. Ordinary server logs, including IP address and browser, kept to keep the service secure and working.

We do not sell personal data. We do not use your data or your clients’ data to train advertising models. We do not show one coach another coach’s clients, programming or messages.

Your data lives in Frankfurt, Germany, on Supabase’s infrastructure — database, authentication and file storage. Coaches and clients in the UK and the EEA can therefore use Trainzo without their data leaving the European Economic Area.

The website itself is served by Vercel from a global content network, and transactional email is sent through Resend. Both are processors acting on our instructions under their own data-processing agreements. Because Cavrian FZE LLC is a UAE company, our staff access to that data happens from the UAE.

Trainzo sets cookies for one purpose: keeping you signed in. They hold your session so that you are not asked for your password on every page. Signing out clears them.

We run no advertising cookies, no third-party trackers and no analytics that profile you. That is why you are not being asked to accept anything — there is nothing to consent to beyond the cookies the service needs in order to work.

We keep your data while your account exists. Delete your account and we remove your profile, your roster, and the training data, messages and notes attached to it. Backups roll off on their own schedule, normally within 30 days.

An archived client is not a deleted one: archiving keeps their history and frees the roster slot. Deleting a client removes their sessions and logs.

You can see and change your profile at any time, and delete your account from Account settings in the web dashboard or the mobile app. You can ask us for a copy of what we hold, ask for a correction, or object to a particular use.

Trainzo is not intended for children under 13, and we do not knowingly collect their data. A coach training a minor is responsible for having the consent that the law where they practise requires.

Every row of data is scoped to the coach who owns it, and that separation is enforced by the database rather than by application code. Traffic is encrypted in transit. No system is perfectly secure, and if a breach affects you we will tell you.

We will update this page when our practices change, and the date at the top will say when. Material changes will be announced before they take effect.

Questions about this document can go to privacy@trainzo.com, or by post to Cavrian FZE LLC, Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.