Trust and data

Where your data lives
and how you stay in control.

Hosting, data export, deletion, AI transparency and payments at Trainera, in plain language. The privacy policy is the binding document; this page summarizes it.

Last reviewed 28 October 2026

Where the data is stored.

Servers and database in the EU

Trainera's servers and database run at Hetzner Online GmbH in Germany, in the European Union. They hold account, training, nutrition and health data, including data from connected devices such as Garmin.

Cloudflare in transit

Cloudflare protects the network and delivers content in front of our servers. It carries data in transit and does not store health data.

Uploaded files

Files you upload, such as photos and documents, are hosted on Google Cloud Storage.

Other service providers

Payments, email, push notifications, error monitoring and AI features use the providers named in the privacy policy, only as far as each service needs. Where data is transferred out of the EEA, Standard Contractual Clauses are used where required.

No sale of personal data

We do not sell, rent or trade your personal information to third parties for marketing.

How it is protected.

  • Encryption in transit (TLS) and at rest
  • Passwords hashed with bcrypt, never stored in plain text
  • Role-based access for admins, trainers, clients and gym owners
  • Rate limiting on login, password reset and API tokens

Your rights under the GDPR.

Access

Confirm what data we process about you.

Rectification

Correct inaccurate data.

Erasure

Ask us to delete your data.

Restriction

Limit how we use your data.

Portability

Receive your data in a portable format.

Objection

Object to processing based on legitimate interests.

Withdraw consent

Withdraw consent for optional features such as health app connections or AI features.

Body measurements, progress photos, medical conditions and data from health apps are health data under Article 9 of the GDPR. We process them only with the explicit consent you give with a separate checkbox when you create your account.

We answer privacy requests within 30 days and may first verify your identity. You can also lodge a complaint with your data protection supervisory authority.

Getting a copy of your data.

Clients: download it yourself

Sign in on the web, open Account Settings and choose Download my data under Account Management. You get one machine-readable JSON file with your profile, workouts, nutrition, measurements, links to your uploaded files and your community activity.

Trainers, gyms and everyone else

Email support@trainera.fit and ask for a copy of your data in a portable format.

Deleting your account.

How to delete

Use the account deletion option in Account Settings, or email support@trainera.fit. Requests are processed within 30 days.

What happens to the data

Account data is deleted or anonymized within 90 days of account deletion. Backups are kept for 30 days for disaster recovery, and chat messages for 30 days after deletion.

Records the law makes us keep

Transaction records are kept for the legally required period, typically 7 years for tax and financial reporting.

Health app data

Data from Apple Health and Garmin is kept for up to 30 days and deleted immediately when you disconnect the app.

AI, out in the open.

TRAI says it is an AI

TRAI, the assistant built into Trainera, tells users that it is an AI and not a human coach. This is the transparency obligation of Article 50 of the EU AI Act, which has applied since 2 August 2026.

What AI services receive

Messages to the AI coach are processed by OpenAI or Anthropic to generate the reply. Plan generation uses anonymized fitness context. Food photos are analyzed in real time and not permanently stored.

Health data stays out by default

Body measurements and health records are not sent to AI services without your explicit action.

Garmin data is never used by AI

Garmin data is not processed by any AI system, is not sent to TRAI or any AI provider, and is never used to train AI models.

Who processes your payments.

Cards

Processed by Stripe. Trainera never stores your full card number or security code.

PayPal

Processed by PayPal. We receive the transaction ID, payment status and payer email.

In-app purchases

Subscriptions bought in the iPhone or Android app are processed by the Apple App Store or Google Play.

Bank transfer

Bank details are used only to verify received payments and process refunds.

Questions about your data?

Send questions about your data to support@trainera.fit. The privacy policy is the binding document; this page summarizes it.

Trust and data FAQ

On servers and a database at Hetzner Online GmbH in Germany, in the European Union. Cloudflare protects the connection and carries data in transit without storing health data. Uploaded files are hosted on Google Cloud Storage.

Clients can download their data as one JSON file on the web: Account Settings, Account Management, Download my data. Trainers, gyms and anyone else can ask for a portable copy at support@trainera.fit.

Use the account deletion option in Account Settings or email support@trainera.fit. Requests are processed within 30 days, and account data is deleted or anonymized within 90 days of account deletion.

Yes. TRAI, the assistant built into Trainera, tells users that it is an AI and not a human coach, as Article 50 of the EU AI Act has required since 2 August 2026.

No. Garmin data is not processed by any AI system, is not sent to TRAI or any AI provider, and is never used to train AI models.

Card payments go through Stripe, PayPal payments through PayPal, and purchases in the mobile apps through the Apple App Store or Google Play. Trainera never stores your full card number.