Privacy Policy
Last updated: October 9, 2026
Data controller: Alejandro Cuéllar Borges (individual)
Contact: traineticapp@gmail.com
App: Trainetic (iOS and Android)
This privacy policy explains what personal data Trainetic ("the app", "we", "us") processes, for what purposes, for how long, and what rights you have, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
This is a translation of the original Spanish version. If there is any difference between the two, the Spanish version prevails.
1. Data we process
| Data | Purpose |
|---|---|
| Email address | Identifying you and giving you access to your account (sign-up and log-in), and sending you the verification code when you sign up |
| Username | Identifying you within the app and letting you log in with it instead of your email |
| Password | Authentication. It is stored encrypted; we never have access to it in plain text |
| Date of birth | Calculating your age to personalize your training and checking that you are at least 16 years old |
| Physical data: weight (and its history), height and gender | Personalizing your training and the app's calculations, and showing you how your weight changes over time |
| Training preferences: experience level, goal, available days, the days of the week you train, available equipment, session length, weekly split and preferred equipment type | Generating and adapting your training routine |
| Routines and workout logs: exercises, sets, reps, weights or plates, machine and its brand, effort, rest times, dates and notes | Saving your history, showing your progress and suggesting how to progress |
| Messages you send us from the app's help section: message type, your comment, the exercise or brand you suggest, what you were searching for, the app version and the operating system (iOS or Android) | Handling your suggestions and bug reports, improving the exercise catalog and replying to you by email |
Health data. Some of this data (weight, height and workout logs) may be considered health data under Article 9 of the GDPR. We only process it with your explicit consent, which you give us when you create your account, and only for the purposes listed above. You can withdraw your consent at any time by deleting your account.
We do not collect location data, contacts, photos or advertising identifiers. From your device, we only store the app version and the operating system (iOS or Android), and only when you send us a message from the help section. We do not use tracking cookies or third-party analytics for advertising purposes.
2. Legal basis
- Performance of a contract (Art. 6(1)(b) GDPR): your email, username and password are needed to provide the service and manage your account, and the messages you send us from the help section are needed to assist you.
- Explicit consent (Arts. 6(1)(a) and 9(2)(a) GDPR): to process your physical and training data, which is what allows us to personalize your routine.
3. Automatically generated routines
The app generates your routine automatically from your answers, following criteria based on scientific evidence on strength training. This does not produce legal effects or significantly affect you: it is a suggestion that you can freely change at any time (swap exercises, sets, rest times, etc.).
The app's recommendations are for guidance only and are not a substitute for advice from a doctor or a sports professional. If you have an injury or a health condition, consult a professional before you start.
4. Data processors
Your data is stored on servers provided by Supabase (Supabase Inc.), using infrastructure located in the European Union. Supabase acts as a data processor under Article 28 of the GDPR and has its own security measures and standard contractual clauses to ensure your data is protected. More information: supabase.com/privacy.
Emails with the verification code are sent through Resend (Resend, Inc.), which only receives your email address and the content of that email in order to send it. Resend acts as a data processor under Article 28 of the GDPR and, since it may process data outside the European Union, it does so with the appropriate safeguards provided for in the GDPR, such as standard contractual clauses. More information: resend.com/legal/privacy-policy.
We do not share or sell your data to any third party for commercial or advertising purposes.
5. Data retention
We keep your data for as long as your account is active. If you delete your account from the app (Profile → Settings → Delete account), your user account, your profile, your routines, all your workout logs and the messages you have sent us from the help section are deleted permanently and immediately from our servers, with no possibility of recovery.
6. Your rights
As a user, you have the right to:
- Access: know what data of yours we process.
- Rectification: correct inaccurate data (you can do this yourself in the app).
- Erasure ("right to be forgotten"): delete your data and your account.
- Portability: receive your data in a structured format.
- Objection and restriction: object to the processing or ask for it to be restricted.
- Withdraw your consent at any time, without affecting the lawfulness of the processing carried out before.
You can delete your account and all your data at any time from Profile → Settings → Delete account in the app. For any other request related to your rights, or if you don't have the app installed, see our account deletion page or write to us at traineticapp@gmail.com. We will reply within one month at the latest.
If you believe we have not handled your request properly, you can file a complaint with the Spanish Data Protection Agency (AEPD).
7. Security
We apply reasonable technical and organizational measures to protect your data: passwords are stored encrypted, communications between the app and the server are encrypted (HTTPS/TLS), and access to each user's data is restricted by database-level security policies (Row Level Security), so that no user can see or change another user's data.
8. Minors
Trainetic is intended for people aged 16 or over. When you sign up we ask for your date of birth, and the app does not let anyone under 16 continue. We do not knowingly request or collect data from anyone under that age. If we find that an account belongs to someone under 16, we will delete it along with its data.
9. Changes to this policy
We may update this policy from time to time. We will publish any changes on this page and show the date of the last update at the top. If the change is significant, we will let you know in the app.
10. Contact
If you have any questions about this policy or about how we process your data, write to us at traineticapp@gmail.com.