Privacy policy

The data controller for personal data processed through TrainLog is StrengthBit Technologies d.o.o. ("we", "us"). For privacy questions, write to us at support@trainlogapp.com.

We collect only what is necessary to operate the Services:

• Account data — email, name, password hash, date of birth, height and weight if provided.
• Training data — workouts, sets, reps, weights, RPE, body measurements, physique pictures — the logs you create yourself.
• Usage data — anonymous, aggregated metrics such as crash reports, feature usage and device type, used to debug and improve the app.
• Payment data — handled entirely by Apple and Google. We never see your card details; we only receive a subscription status from the relevant store.

We process your data on the legal bases set out in Article 6 of the GDPR: the performance of our contract with you (account, subscription, in-app features), our legitimate interest in operating and improving the Services (analytics, fraud prevention), and your consent where required (e.g. optional marketing emails).

We do not sell your data. We share the minimum necessary with trusted processors that help us run the Services, under data processing agreements:

• Cloud hosting and database providers
• Crash reporting and analytics providers (anonymised)
• Email delivery providers (for transactional mail)
• App Store and Google Play (for subscription management)

A current list of sub-processors is available on request at support@trainlogapp.com.

We keep your account data for as long as your account is active. When you delete your account, we erase your personal data within 30 days, except where we are legally required to retain certain records (e.g. invoices for tax purposes, typically 10 years under Slovenian law).

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Rectify incorrect or outdated data
• Erase your data (the right to be forgotten)
• Restrict or object to processing
• Data portability — receive your data in a machine-readable format
• Withdraw any consent you previously gave
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email support@trainlogapp.com. We respond within 30 days.

Some of our processors are based outside the European Economic Area. In those cases we rely on Standard Contractual Clauses approved by the European Commission, and on additional measures where appropriate, to ensure an adequate level of protection.

We apply industry-standard technical and organisational measures — encryption in transit (TLS), encryption at rest for sensitive fields, hashed passwords, access controls, and regular backups. No system is perfectly secure, but we treat your data as if it were our own.

TrainLog is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe we may have done so, please contact support@trainlogapp.com and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email. The "Last updated" date at the top of this page always reflects the most recent revision.