Train at Home/Gym
Privacy policy
Last updated: 13 November 2026
This explains the information Train at Home/Gym uses and the choices you have. It applies to the app and trainathomegym.com.
Profile and training information
The app stores your questionnaire answers, goals, available equipment, schedule, selected plans, workout history, effort feedback, preferences and unfinished session on your device. Answers may include an age group, height, weight and limitations that affect exercise. This information supports training features; it is not used for advertising targeting.
Your account and saved data
Google sign-in is handled through Supabase Auth. We receive an account identifier and email address. You choose a nickname and a built-in avatar; uploading a personal photo is not required. After account setup, saved app data is sent to the Railway backend when you are online. Signing into the same account on another device can restore the last successfully saved version. Unsynced changes may remain only on the original device.
Data travels over HTTPS. This is not end-to-end encryption: authorized operators and infrastructure providers may access server data to operate the service. Guest data remains local unless you move it into an account.
Verification emails
Resend delivers transactional email verification codes. It receives the destination email address, nickname, message language and email content, including the code. Health profiles, plans and workout history are not included. Open and click tracking are disabled for these messages. Email verification does not subscribe you to marketing messages.
Support correspondence
Resend also receives support emails and processes the sender's email address, message and any optional attachments you include. Do not send passwords, verification codes or medical information. An email alone does not authorize account changes or deletion; we first verify account ownership. Deleting your account does not automatically erase support correspondence. It is retained as needed to handle your request and meet applicable requirements.
Advertising is a choice
On supported Android builds, Yandex advertising is enabled only after a choice in Settings. SDK personalized-data consent and location consent are disabled. We do not send questionnaire answers, health information, nicknames, email addresses, plans or search queries to the advertising network for targeting.
If advertising is enabled, Yandex can process technical delivery information such as IP addresses, device and service information, ad interactions and diagnostics. Limited-data advertising does not mean anonymous advertising. The choice is saved on this device and can be changed under Advertising privacy settings. Declining does not remove access to training features.
Reminders and this website
Workout reminders are scheduled locally on your device with your permission. You can turn them off in the app or system settings. This public website has no analytics or advertising scripts, cookies or forms collecting training information. The hosting provider may still process technical request information to deliver pages, maintain security and diagnose problems.
Service providers
The service uses Google, Supabase, Railway, Resend and, if advertising is enabled, Yandex. Depending on the provider, information may be processed outside your country.
Retention, deletion and your choices
Data is kept while needed for your account and app features or until you request deletion. Once deletion is confirmed, active account data, the cloud snapshot, nickname, avatar and sign-in identity are removed. The server retains a minimal record containing the deleted account's technical identifier so old sessions cannot automatically recreate it. This record contains no workout profile or email address.
Local guest data, exported files and copies on other devices need separate removal. Provider operational records and backups may remain under their retention rules and applicable requirements; we do not promise immediate removal of every copy. See account and data deletion instructions.
Contact support to request access, correction or deletion. We verify account ownership before disclosing or deleting data. Do not send a password, sign-in code or detailed medical information.