1. Introduction
Training Yard ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").
2. Information We Collect
Account Information
- Email address (for account creation and communication)
- Password (stored securely using bcrypt hashing)
Workout & Training Data
- Training programs and workout schedules
- Exercise performance data (sets, reps, weight, RIR)
- Workout session history and completion status
- Training preferences (experience level, training frequency, equipment availability)
- Session feedback (soreness, fatigue, pump ratings)
- Optional free-text notes you write per set (up to 200 characters) or per session
Body Metrics
- Body weight measurements (if provided)
Device Information
- Apple Push Notification (APNs) device tokens for iOS push notifications (only if you opt in)
Subscription Information
We do not store credit card numbers or payment details directly — payment processing is handled by Stripe (web) and Apple (iOS). To manage entitlement, we store your subscription status, expiry date, free-trial dates (including when your trial ends and whether we have sent you a trial-ending reminder), source (Stripe or Apple), and the customer and subscription identifiers issued by those processors (including a RevenueCat user identifier for iOS purchases). No card numbers, bank details, or billing addresses are stored on our servers.
3. How We Use Your Information
- Personalization: To generate and adapt your training programs based on your performance, preferences, and feedback
- Progressive Overload: To calculate exercise recommendations and track your strength progression over time
- Account Management: To authenticate your identity and manage your subscription
- Communication: To send password reset emails, email verification, and important account notifications
- Push Notifications: To send workout reminders and updates (only if you opt in)
- Service Improvement: To understand usage patterns and improve the app experience
4. Third-Party Services
We share limited data with the following third-party services:
- Stripe: Payment processing for subscriptions. Stripe receives your email and payment details to process transactions. See Stripe's Privacy Policy.
- Apple (App Store / RevenueCat): In-app purchase processing on iOS. See Apple's Privacy Policy.
- Apple Push Notification Service (APNs): For delivering push notifications to iOS devices.
We do not sell, rent, or trade your personal information to any third parties for marketing purposes.
5. Apple Health (HealthKit)
Training Yard version 1.0 does not integrate with Apple HealthKit. We do not read from, or write to, Apple Health, and we do not request HealthKit permissions. If HealthKit integration is added in a future update, this Privacy Policy will be updated in advance to describe what data is shared and how it is used.
6. Data Retention
- Your account data and workout history are retained as long as your account is active.
- If you delete your account, all personal data is permanently removed within 30 days.
- We may retain anonymized, aggregated data for analytics purposes after account deletion.
- Payment records may be retained as required by law for tax and accounting purposes.
7. Data Security
We implement industry-standard security measures to protect your data:
- All data is transmitted over HTTPS (TLS encryption)
- Passwords are hashed using bcrypt with salt rounds
- Session tokens are signed using JWT
- Database access is restricted and credentials are securely managed
8. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct your personal information via the Settings page
- Deletion: Delete your account and all associated data from the Settings page
- Data Portability: Request your data in a machine-readable format
- Withdraw Consent: Opt out of push notifications at any time via device settings
9. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: privacy@trainingyardapp.com