TrainFlow ("TrainFlow", "we", "us") is a personal training app operated by SA Academy. This policy explains what information we collect through the TrainFlow mobile app (the "Service"), why we collect it, and the choices you have.

1. Information we collect

We collect information you provide directly, and a small amount generated by using the Service:

• Account information — full name, email address,country ios2 + mobile number, date of birth, and gender. Email and mobile are used to sign in and to recover your account.
• Profile — an optional profile photo, stored as a link you provide (we do not host or process uploaded images).
• Health and fitness data — the training programs assigned to you, the workouts and sets you complete, and the weights, reps, and rest times you log. This is the core data the Service exists to record.
• Subscription status — whether your account currently has an active subscription, set by your trainer. We do not process payments or store payment card details in the Service.
• Support messages — anything you send through the in-app "Contact Us" feature, including which category you selected and the messages exchanged with your trainer.
• Technical data — your password, stored only as a salted hash we cannot reverse; and the IP address and timestamp associated with sign-in sessions, kept for account security (detecting suspicious logins, stopping abuse).

We do not use advertising or analytics SDKs, and the Service does not access your device's camera, photo library, contacts, or location.

2. How we use your information

• To create and maintain your account and authenticate you.
• To show your trainer's assigned programs and record your workout progress.
• To let your trainer manage your subscription and respond to your support inquiries.
• To keep the Service secure and diagnose problems.

3. Who we share it with

Your account, program, and workout data is visible to your trainer/the administrators who manage the platform — that visibility is how the coaching relationship works. We do not sell your information, and we do not share it with advertisers or data brokers. We use third-party infrastructure providers (for example, hosting and email delivery) strictly to operate the Service; they process data on our behalf and are not permitted to use it for their own purposes.

4. Data retention and deletion

We keep your account and workout data for as long as your account is active, so your training history stays available to you and your trainer. You can delete your account yourself at any time from Profile → Delete Account in the app — it's immediate, with no waiting period. See Account Deletion for exactly what's removed, what's kept, and why.

5. Your choices

• You can review and update your profile information at any time from the Profile screen.
• You can delete your account yourself in the app (see section 4), or ask us to export your data using the contact details below.
• You can stop using the Service at any time; ask your trainer or us to deactivate your account.

6. Security

Traffic between the app and our servers is encrypted in transit (HTTPS). Passwords are hashed, never stored or logged in plain text. Access to administrative tools is restricted to authorized trainers/admins. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

7. Children's privacy

The Service is not directed at children under 16, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will remove it.

8. Changes to this policy

We may update this policy as the Service changes. We'll update the "Last updated" date above when we do; material changes will be communicated in-app.

9. Contact us

Questions about this policy, or a request to access or delete your data: [email protected]