Privacy policy

Last updated 2026-10-21.

TrainRec is made by Manifest Post, Inc., which is responsible for your data (the "controller" under European law). Your workout and food log is health information, and we treat it that way.

In short

• We never sell your data, and there are never ads in TrainRec.
• Your assistant sees your log only after you say yes, and you can disconnect it whenever you like.
• We never send marketing notifications.
• You can get a copy of your data, or delete it, whenever you want.

What we keep

• Your account: the ID and email address Apple gives us when you sign in (often a private relay address), your settings such as weight unit and time zone, and when you agreed to these terms.
• Your log: the workouts, food, targets and plans that you or your assistant add.
• Connections: which assistants you've connected, when you connected them, when each was last used, and which changes each one made.
• Your plan: whether you're on a paid plan. Apple or Google handles your payment details, and we never see your card.

What we don't keep

We don't keep your IP address, device details, location or crash reports, and there's no analytics in the app. The short health questions before your first workout stay on your phone. We never see your answers.

Our hosting provider sees your IP address as your phone connects, as any host does, and keeps short-lived system logs.

Why we keep it

We use your data to run TrainRec for you. That means storing your log, showing it to you and to the assistants you connect, and sending you messages about your account. We also use it to keep the service secure and to meet our legal duties. That's all.

If you're in the European Economic Area or the UK, these are our legal reasons. We need your account data to provide the service you asked for (contract). Your log is health data, so we keep and use it only with your explicit consent. The app asks for it before you start, and keeps nothing in your log until you agree. You can withdraw that consent by deleting your log or your account. We keep the service secure because we have a legitimate interest in doing so. We keep some records because the law requires it.

Connecting an assistant

Your assistant cannot see your log until you say yes. When you connect one, the app asks first. Nothing is shared until you agree.

When you connect your own assistant, that company gets what your assistant reads from your log, under your own account with them. TrainRec asks you first, and nothing is shared until you say yes. That company's own privacy policy covers what it does with your data. You can disconnect your assistant whenever you like.

Who else handles your data

A few companies help us run TrainRec, such as our hosting provider. They may use your data only to provide their service to us. Every one of them, and what each receives, is on the subprocessors page. We update that page before anything changes.

We share data with others only when you ask us to, or when the law requires it. If Manifest Post, Inc. is ever sold or merged, your data would go with TrainRec and this policy would still protect it. We'd tell you first.

Where your data is stored

Manifest Post, Inc. is in the United States. Your data is stored and handled in the United States and in other countries where our providers work. When data leaves the European Economic Area or the UK, we rely on the safeguards the law allows, such as the European Commission's standard contractual clauses.

How long we keep it

We keep your data while your account is open. You can delete your account in the app at any time (You, then Delete account). That deletes your account and your whole log at once, except anything the law makes us keep. Our backups are kept for 5 days, so any copy in them is gone within 5 days.

Your rights

Wherever you live, you can download everything we keep about you, right in the app (You, then Download my data). You can also ask us to show you your data or send you a copy, and to correct it or delete it. Write to hello@trainrec.app. We'll answer within 30 days, and we won't treat you differently for asking.

If you're in the European Economic Area or the UK, you can also object to how we use your data, or ask us to limit it. You can complain to your local data protection authority.

If you live in a US state with a privacy law, such as California, you have the rights that law gives you. We don't sell your personal information or share it for targeted ads.

Consumer health data

Some US states, including Washington and Nevada, have laws about consumer health data. Your log counts as that kind of data. We collect it from you and your assistant to keep your log, and we use it only for the reasons on this page. We share it only with the services on the subprocessors page and the assistants you connect. We never sell it. You have the rights described above. You can stop us collecting it by deleting your log or your account.

Is this covered by HIPAA?

No. HIPAA covers doctors, hospitals, health insurers and the companies that work for them. TrainRec is none of those, and it isn't medical care. We still protect your log as health information, because laws in places like the EU, the UK, California and Washington treat what you eat and how you train as sensitive.

Children

TrainRec is for adults. You must be at least 18 to use it, and we don't knowingly keep data about anyone younger. If you think a child has used TrainRec, tell us and we'll delete their data.

Keeping your data safe

We protect your data with care, and we limit who at Manifest Post, Inc. can see it. If a breach puts your data at risk, we'll tell you and the authorities, as the law requires.

This website

This site sets no cookies and has no ads or tracking pixels. If we count visits, we use Cloudflare Web Analytics, which keeps no personal data.

Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before it applies.

Contact

Write to hello@trainrec.app about your data or this policy.