TrainUp is a training app that works without an account and without servers of our own: your workouts, routines, ranks, nutrition, measurements and photos are stored in the local database on your iPhone. There is no sign-up, no sign-in and no social network. This policy explains the little that leaves your device, who receives it and why.
1. Who is responsible
The data controller is TrainUp, developer of the TrainUp app for iOS. For anything related to your data, write to support@usetrainup.com.
2. No account
We don't ask for your email, password or phone number, and you can't sign in with Apple, Google or any other provider. The first time you open the app, a random identifier (UUID) is created on the device itself. It contains nothing about you and only links your purchases to this installation (section 4).
3. What stays on your device
All of the following lives only on your iPhone. We don't receive it and can't see it:
- Full workouts, sets, routines, programs, custom exercises, ranks and history.
- Local profile: name, sex, age, weight, height, measurements and goals.
- Food diary, recipes and calorie and macro goals.
- Photos and videos you add to your workouts or exercises.
- Steps read from the Health app (HealthKit), read-only.
- Preferences, rest timers and reminders (local notifications scheduled by the iPhone itself) and the record of the consents you give.
If you use backup, the app creates a file with your data and you decide where to keep it (Files, iCloud Drive, etc.). That file stays under your control; we don't receive it. If you share a progress card or save it to Photos, you do so yourself through iOS.
4. Services that receive data
| Recipient | What it receives | Why |
|---|---|---|
| Apple | The payment for TrainUp Pro. We never see your card or your Apple ID. | Charging the purchase or subscription. |
| RevenueCat (US) | The installation's random identifier, the product purchased, the purchase status and technical device data. | Knowing whether you have Pro and restoring purchases. |
| Open Food Facts | The barcode you scan or the text you search for. No identifier of yours. | Showing you the product's nutrition data. |
| Cloudflare | Download requests for exercise catalog images and videos, with the technical data of any connection (such as the IP address). No identifier of yours. | Serving the public catalog content. |
These providers only use the data to deliver their service. We never send them your workout history, weight, measurements, photos or food diary.
5. Health data
Your sex, weight, measurements and food diary are health-related data (Article 9 GDPR). You can give or withdraw explicit consent for them under Settings → Account → Your data, separate from accepting these documents. The app only uses them on the device itself, for example to calculate your ranks and goals.
Data read from HealthKit never leaves the device, is not used for advertising and is not shared with third parties, as Apple requires.
6. What we don't do
- We have no user accounts and no server where we store your data.
- We don't sell or share your data.
- No ads, advertising identifiers or third-party pixels.
- We don't use analytics, crash-reporting or tracking tools, and we don't track you across apps or websites. The app doesn't ask for tracking permission (ATT).
- We don't send notifications from a server: every alert is scheduled by your iPhone.
- We don't access your location, contacts, calendar or microphone.
7. Legal bases
| Processing | Basis (GDPR) |
|---|---|
| Purchases and Pro access control (RevenueCat, Apple) | Performance of a contract — Art. 6(1)(b) |
| Food lookup and exercise images | Performance of a contract — Art. 6(1)(b) |
| Health data, processed only on the device | Explicit consent — Art. 9(2)(a) |
| Answering the emails you send us | Legitimate interest — Art. 6(1)(f) |
8. International transfers
Apple, RevenueCat and Cloudflare may process data outside the European Economic Area; they do so under the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
9. How long data is kept
- On your device: while the app is installed. You can erase everything under Settings → Account → Your data → Delete my data or by deleting the app.
- At RevenueCat: as long as needed to manage your purchases and meet legal obligations.
- Support emails: as long as needed to answer you and at most 12 months.
10. Your rights
You can exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw any consent. Because your data lives on your iPhone, you view, edit, export and delete it yourself in the app. For purchase data or any other request, write to support@usetrainup.com; since we don't know who you are, we may ask for your Apple order number to find the purchase.
We reply within one month. If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD) or to the authority in your country.
11. Children
TrainUp is not directed at children under 16. If you are a parent or guardian and believe a child has given us data, write to us and we will delete it.
12. This website
This website uses no cookies or analytics. It is hosted on Vercel, which logs technical visit data (such as the IP address) to serve the pages and protect the service.
13. Security
Local data is stored in the app's storage, protected by iOS encryption and sandboxing. All connections to the services in section 4 are encrypted (HTTPS).
14. Changes
If we change anything relevant, we bump the version number above and let you know in the app. Minor changes only update the date. Version 5 removes Community and sign-in: the app no longer creates accounts or hosts published content.
15. Contact
Any question about this policy or your data: support@usetrainup.com.