1. Who we are
Personal Trainer (“we”, “us”) is a fitness app for logging workouts, nutrition, body measurements and progress. It is developed and operated by an independent developer based in India, who decides how and why your personal data is processed. Under India's Digital Personal Data Protection Act, 2023 that makes us the “Data Fiduciary” for your data, and under laws such as the EU/UK GDPR, the “controller”.
This policy explains what we collect, why we collect it, who else handles it, how long we keep it and the control you have over it.
2. Information we collect
Information you give us
| Category | What it includes |
|---|---|
| Account | Your name and email address. If you sign up with email, a password, which we store only as a secure one-way hash, so we never see or keep the password itself. If you sign in with Google, the account identifier Google provides. |
| Profile and health information | Date of birth, gender, height, current and target weight, activity level, fitness goal and unit preference. This is health-related information, and you choose whether to provide it. |
| Body tracking | Weigh-ins, body-fat percentage, body measurements (neck, chest, waist, hips, thigh, arm, calf) and any notes you add. |
| Progress photos | Photos you choose to take or upload, with their date, angle and any notes. These can show your body, so we treat them as sensitive. |
| Training | Workout plans, custom exercises, workout sessions, sets, reps, weights, durations, effort ratings (RPE) and notes. |
| Nutrition | Food and meal logs (food, quantity, calories and macros, time eaten) and custom foods you create. |
| Reminders | Your notification preferences (for example workout, rest-day and nutrition reminders and your reminder time) and the in-app notifications we send you. |
| Messages to us | Anything you send when you contact us, such as a support or privacy request. |
Information collected automatically
| Category | What it includes |
|---|---|
| Device and session | Your device platform (iOS or Android), your device's push-notification token, your time zone (so reminders arrive at the right local time), and, for each signed-in session, your IP address and app/device details (user agent). We also record when you sign up, how you signed up and when you were last active. |
| Security codes | One-time codes for email verification and password reset, stored only in hashed form, with their expiry time and number of attempts. |
| Diagnostics | App errors and technical events, the app version, a random identifier for your app installation, and server request details (such as the time, the request made, the response status and the IP address). We use these only to find and fix problems and to protect the service. |
We do not collect your precise location, contacts, or data from Apple Health or Google Health Connect. We do not use advertising identifiers.
3. Device permissions
- Camera and photo library: requested only when you add a progress photo, so you can take one or pick one from your library. On iOS the app may also ask to save photos you take to your library. We access only the photo you choose.
- Notifications: requested so we can send the reminders you have switched on.
You can refuse or withdraw any permission at any time in your phone's settings. The rest of the app keeps working.
4. How we use your information
- To provide the app: create and secure your account, save your data, sync it across your devices and show your history and progress.
- To calculate things for you: for example calorie and macro targets, BMI, training volume and other insights. These calculations are automatic and are shown only to you. They don't lead to any decision about you by us or anyone else.
- To communicate with you: send verification and password-reset codes by email, send the reminders and notifications you have enabled, and reply to your messages.
- To keep the service safe: prevent abuse (for example by limiting repeated sign-in attempts), detect suspicious activity and protect your account.
- To fix and improve the app: investigate errors and make sure features work as intended.
- To meet legal obligations where the law requires it.
We do not sell or rent your personal data, use it for advertising, or use your data to train AI models.
5. Consent and legal basis
We process your personal data on the basis of the consent you give when you create an account and accept this policy, and when you choose to enter optional details such as health information or progress photos. Where laws such as the GDPR apply, we also rely on contract (to provide the app you signed up for), legitimate interests (security, fraud prevention and fixing bugs) and legal obligation, and on your explicit consent for health-related information.
You can withdraw consent at any time by removing the information, turning off the relevant feature or permission, or deleting your account. Withdrawing consent does not affect processing that already happened, but some features may stop working without the data they need.
6. Who we share it with
We share personal data only with service providers that process it on our behalf to run the app, under their own terms and security commitments:
| Provider | What they do for us |
|---|---|
| Amazon Web Services (AWS) | Hosts our servers and database, stores progress photos privately, sends account emails (verification and password-reset codes) and hosts this website. |
| Google Firebase | Handles Google sign-in (Firebase Authentication) and delivers push notifications (Firebase Cloud Messaging). On iOS, notifications are delivered through Apple's Push Notification service. |
| Google Sign-In | If you choose “Continue with Google”, Google shares your name, email address and account identifier with us. Your Google password is never shared with us. |
We may also disclose information if the law requires it, to respond to a valid legal request, or to protect the rights, safety or property of our users or others. If the app is ever transferred to a new owner, your data would move with it only under this policy's protections, and we would tell you first.
Exercise demonstrations and nutrition values in the app come from public datasets. Using them involves no sharing of your data.
7. Where your data is stored
Your data is stored on AWS infrastructure, and our providers may process it in other countries, including the United States, where data protection laws can differ from those where you live. Where the law requires it, we rely on our providers' contractual safeguards for these transfers, and we will follow any restrictions the Government of India places on transfers to particular countries.
8. How long we keep it
- Your account data is kept while your account exists.
- When you delete your account, we erase your profile, workouts, nutrition logs, measurements, progress photos, notifications, devices, sign-in records and the diagnostic logs linked to your account straight away, and remove your Google sign-in record from Firebase. Routine database backups may still hold a copy for up to 30 days before they expire automatically.
- Diagnostic logs are deleted automatically after 30 days.
- One-time codes expire within minutes and cannot be used after that.
- Messages to us are kept only as long as needed to handle your request, or longer if the law requires it.
9. Your rights and choices
Depending on where you live (including under India's DPDP Act and the EU/UK GDPR), you have the right to:
- Access a summary of the personal data we hold about you, and how we process it, and ask for a copy.
- Correct or update your data. Most of it can be edited directly in the app.
- Erase your data. Delete your account in the app under Profile → Delete account, or request deletion by email. This is permanent and cannot be undone.
- Withdraw consent at any time, as described in section 5.
- Object to or restrict certain processing, and receive your data in a portable format, where those rights apply.
- Nominate another person to exercise your rights if you die or become incapacitated (India).
- Raise a grievance with us (see section 15). If you're unhappy with our response, you can complain to the Data Protection Board of India or to your local data protection authority.
To use any right that isn't available in the app, contact us using the details below. We may need to confirm your identity first, usually by asking you to write from the email address on your account. We'll respond within the time the law allows, and in any case within 30 days.
Notifications: turn individual reminders on or off in the app's Profile settings, or turn off all notifications in your phone's settings.
10. Security
We protect your data with encrypted (HTTPS/TLS) connections, passwords and one-time codes stored only as hashes, sign-in tokens kept in your device's secure storage (iOS Keychain or Android Keystore), private photo storage that only your account can access, per-account access checks on every request, and limits on repeated sign-in attempts. No system is perfectly secure, so please use a strong, unique password. If a data breach affects your personal data, we'll notify you and the relevant authorities as the law requires.
11. Children
Personal Trainer is not intended for children under 13, and you can't create an account if you are under 13. If you are under 18 (or under the age of digital consent where you live), use the app only with the consent and supervision of a parent or guardian. We do not knowingly track children or target advertising at them. If you think a child has given us personal data without the right consent, contact us and we will delete it.
12. This website
This website uses no cookies, no analytics and no advertising trackers. It stores just one setting in your browser, your light or dark theme choice, and that setting never leaves your device. Our hosting provider (AWS) processes standard technical information, such as your IP address and browser type, so it can deliver the page and protect it from abuse.
13. Not medical advice
Personal Trainer, including its BMI, calorie and macro estimates, provides general fitness information only. It is not medical advice and does not diagnose or treat any condition. Talk to a qualified health professional before making significant changes to your exercise or diet.
14. Changes to this policy
We may update this policy as the app changes or the law requires. We will change the effective date at the top, and if a change is significant we will tell you in the app or by email before it takes effect.
15. Contact and grievances
For questions, requests to exercise your rights, or complaints about how we handle your data, email our grievance contact at vramvasu99@gmail.com. Please include the email address linked to your account so we can find it. We aim to acknowledge every request within 7 days.