Privacy Policy

1. Introduction

Welcome to Trainko (hereinafter referred to as "the App"). We are firmly committed to protecting your privacy and personal data. This Privacy Policy explains how we handle, store, and safeguard your personal information when you use the App, its local HTTP service, Apple HealthKit integration, Apple Watch companion app, Live Activities and Widgets, iCloud sync, and membership subscription services.

Please read this Privacy Policy carefully. By using the App, you acknowledge that you have read and agreed to all provisions described herein.

2. Information We Process

The App follows a strict "local-first, data-minimization" architecture. Unless you explicitly enable multi-device iCloud sync, all your fitness data is stored exclusively on your device and is never uploaded to any external proprietary server. The categories of data we process include:

2.1 Training & Fitness Profile Data

• Daily workout plans, exercises, recorded sets, reps, weights, rest durations, and workout logs entered by you or created by your configured AI Agent via API;
• Physical profile metrics, including biological sex, body weight, height, body fat percentage, and date of birth;
• Customized gym equipment configurations and weight plate settings.

2.2 Apple Health (HealthKit) & Apple Watch Sensor Data

When you enable "Auto Sync" and grant authorization through the iOS system dialog, the App exchanges data with Apple Health and Apple Watch:

• Read Access: Body weight, height, body fat percentage, heart rate, biological sex, and date of birth — used solely to personalize your workout metrics and display real-time heart rate zones;
• Write Access: Active energy (calories), workout heart rates, and workout sessions (HKWorkoutSession) — used to log your workout achievements into Apple Health;
• Apple Watch Companion Workouts: Heart rate and metric data collected during workouts on your Watch sync directly to your iPhone via WatchConnectivity or HealthKit. No data is ever routed through any developer-owned server.

We strictly prohibit using your HealthKit data for advertising, marketing, or data broker sales. You can revoke or customize HealthKit permissions at any time via iOS Settings → Privacy & Security → Health → Trainko.

2.3 Live Activities & Widgets

• During active workouts, the App utilizes ActivityKit to project exercise names, current sets, and rest timers onto the Dynamic Island and Lock Screen;
• All status renderings take place entirely on-device, and Lock Screen visibility respects your system settings under iOS Settings → Face ID & Passcode → Allow Access When Locked.

2.4 In-App Purchases & Subscription Credentials

When you purchase a Trainko Membership, all financial transactions are processed directly by Apple App Store (StoreKit 2):

• The App developer never collects, accesses, or stores your credit card numbers, bank details, billing address, or payment credentials;
• The App only receives cryptographically signed JWS transaction tokens from Apple locally on your device to verify your subscription entitlements (such as active plan, expiration date, and auto-renewal status).

2.5 iCloud Multi-Device Sync (Members Only)

When you enable "iCloud Sync" as a member, your workout logs and configurations sync seamlessly between your Apple devices signed into the same Apple ID:

• All data is stored directly in your personal Private CloudKit Database hosted by Apple;
• Data in transit and at rest is secured by Apple's encryption standards. The App developer has no technical means to inspect, access, or decrypt your personal iCloud data;
• You can disable iCloud sync at any time in the App settings.

3. Data Storage & Security

• On-Device Storage: Workout records and health data are persisted in a sandboxed SwiftData database on your local device. User preferences are stored in system UserDefaults;
• Zero Proprietary Cloud Servers: The App operates without a centralized user account system or remote database backend, eliminating the risk of centralized data breaches;
• API Key Isolation: The API Key used to authenticate your local AI Agent is stored securely in your device sandbox and never leaves your local network.

4. Local HTTP Service

The App includes a local HTTP service listening exclusively on the loopback interface (localhost) to communicate with your authorized AI Agent.

• API Key authentication is mandatory for all requests. Do not share your API Key with untrusted parties;
• If you suspect your key has been compromised, you can regenerate a new key instantly in Settings, immediately invalidating the previous one;
• You can turn off the local HTTP service at any time in Settings → API Service.

5. Workout Share Graphics & Social Media

Workout cards and periodic achievement graphics are rendered entirely on your device. If you choose to save or share these graphics to third-party platforms, please be aware that they contain personal exercise indicators and historical data; such sharing is purely voluntary on your part.

6. Third-Party Sharing & Trackers

In accordance with our privacy commitment:

• Aside from native Apple system frameworks (HealthKit, WatchConnectivity, ActivityKit, CloudKit, and StoreKit), the App contains zero third-party commercial advertising SDKs, tracking analytics, or behavioral profiling tools;
• We never sell, rent, monetize, or disclose your personal fitness data to any third party.

7. Data Subject Rights

You retain complete sovereignty over your information:

• Access and Correction: You can view or adjust all personal profiles, gym setups, and workout logs inside the App at any time;
• Deletion: Swipe left to delete individual workout entries, or erase all data at once via Settings;
• Portability & Backup: Premium members can export all training data to an encrypted local backup file (.tkbk).

8. Children's Privacy

The App is intended for adult fitness enthusiasts capable of safely undertaking physical exercises. If you are under 18, please use the App only under the supervision of a parent or legal guardian.

9. Changes to this Policy

We may periodically update this Privacy Policy. The latest version will always be published inside the App and on our official support page, marked with its effective date.

10. Contact Us

If you have any questions or feedback regarding this Privacy Policy, please contact us at:

Email: trainko.support@gmail.com