Privacy Policy

01

Scope and our role

Qonqur LLC, doing business as Traination ("Traination," "we," "us," or "our"), provides software that helps personal trainers, coaches, gyms, studios, and other fitness professionals ("Trainers") deliver coaching services to their customers ("Clients"). Trainers and Clients are referred to collectively as "Users" and individually as a "User." The website, web applications, mobile applications, integrations, and related services are referred to together as the "Service."

Some features described in this Policy may be introduced over time. We only collect information associated with a feature when that feature is available and a User chooses to use it.

This Policy applies to information Traination handles through the Service. It does not govern a third party's independent practices, including a Trainer's use of information outside Traination.

02

Information we collect

The information we collect depends on your role, the features you use, and your choices.

Information you provide

• Identity and contact information: name, email address, phone number, profile photo, date of birth, and other contact details.
• Account and authentication information: username, password or authentication credentials, account settings, preferences, and records of accepted terms and consents.
• Client age and consent confirmation: when a Trainer adds a Client, we collect the Trainer's confirmation that the Client is at least 13 and that the Trainer has obtained any parental or guardian consent required by law. We store the confirmation with the Trainer's account identifier and the date and time it was made.
• Trainer and business information: business name, role, qualifications, areas of practice, business size, branding, team membership, and information needed to administer a Trainer account.
• Client and coaching information: Trainer-Client relationships, programs, assignments, schedules, appointments, goals, check-ins, notes, workout history, exercise results, progress records, habits, nutrition information, and feedback.
• Health and wellness information: information a User chooses to enter about body measurements, weight, injuries, physical limitations, health conditions, nutrition, progress photos, or other wellness information. This information may be considered sensitive or special-category data under applicable law.
• Content and communications: in-app messages, emails, support requests, survey responses, reviews, comments, and files, images, audio, or video you upload or share.
• Transaction information: subscription plan, purchases, invoices, billing contact details, payment status, and limited payment-method information such as card type and last four digits. Full payment-card details are collected directly by our payment processor and are not stored by Traination.
• AI feature information: prompts, workout descriptions, nutrition images, documents, other inputs you submit, and the outputs generated for you.

Information collected automatically

• Device and network information: IP address, device identifiers, browser type, operating system, language, time zone, mobile network, and approximate location inferred from IP address.
• Usage and log information: pages and features viewed, links clicked, referring pages, session times, searches, interactions, crash data, and diagnostic and security logs.
• Cookie and similar technology data: identifiers and activity collected through cookies, pixels, local storage, software development kits, and similar technologies.

Information from other sources

We may receive information from other Users, your organization, payment processors, identity and sign-in providers, connected services such as Google, referral partners, and vendors that help us operate the Service. If a Trainer creates or invites a Client account, the Trainer may provide the Client's name, contact information, and coaching relationship details.

03

How we use information

We may aggregate or de-identify information so it no longer reasonably identifies an individual. We may use and disclose that information for analytics, research, reporting, and product development, and we will not attempt to re-identify it except as permitted by law.

04

Cookies and similar technologies

We and our vendors may use essential cookies to operate and secure the Service, preference cookies to remember settings, analytics technologies to understand performance and use, and marketing technologies to measure campaigns. Where required, we will ask for consent before using non-essential cookies.

You can manage cookies through browser settings and, where available, our consent controls. Blocking some technologies may affect Service functionality. The sign-up form is provided by GrowthSuite and may use its own technologies when the form loads. Blog content is delivered with help from ButterCMS.

Traination does not currently respond to all browser "Do Not Track" signals because there is no universal technical standard. Where applicable law requires recognition of an opt-out preference signal, such as Global Privacy Control, we will process it as required.

05

How we share information

We may disclose personal information to the following recipients for the purposes described:

• Users and organizations: information is shared as directed by Users and as needed to deliver coaching, communication, scheduling, progress tracking, and account administration. A Trainer may make Client information available to authorized staff or team members within the Trainer's organization.
• Service providers: vendors that provide cloud hosting, data storage, security, customer support, communications, analytics, content management, sign-up forms, payment processing, and other operational services. These providers are permitted to process information only for contracted purposes.
• Connected services: Google and other services you choose to connect, according to your instructions and permissions.
• AI providers: Google, through the Gemini API, and any replacement or additional provider disclosed when an AI feature is used, as described below.
• Professional advisers: lawyers, auditors, insurers, accountants, and similar advisers where reasonably necessary and subject to confidentiality obligations.
• Authorities and other parties for legal reasons: when reasonably necessary to comply with law or legal process, enforce agreements, investigate fraud or security concerns, or protect the rights, property, safety, and security of Traination, our Users, or others.
• Business transaction recipients: parties involved in a proposed or completed financing, merger, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate safeguards.
• Others with your direction or consent: when you ask us to share information or consent to a disclosure.

06

Google API data

If you connect a Google account, Traination will request only the permissions shown on Google's authorization screen and needed for the feature you choose. Depending on the feature, this may include basic Google account information for sign-in and Google Calendar data for booking, availability, and calendar synchronization.

• We use Google user data only to provide and maintain the user-facing feature you authorize.
• We do not use Google user data for advertising, sell it, or transfer it to data brokers or other unrelated third parties.
• We limit access to authorized personnel and service providers that need it to operate the authorized feature, protect the Service, comply with law, or act with your consent.
• Google Calendar data is not shared with the Gemini API or used in an AI processing pipeline.
• You can revoke Traination's access through your Google account's third-party connection settings or request deletion by contacting us.

Traination's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Revoking access stops future collection from Google but does not automatically delete information already imported into Traination. You can request deletion as described under Your choices and rights.

07

Gemini API and AI features

Certain Traination features, including the AI Workout Builder, AI-assisted nutrition tools, drafting, summaries, and recommendations, are powered by Google's Gemini API. When you choose to use one of these features, relevant input data may be sent to Google for processing. This may include workout descriptions, goals, coaching instructions, nutrition images, prompts, files, and the limited account or coaching context needed to generate the requested output.

Google processes this information under the terms and data-processing commitments applicable to the Gemini API. Google's handling of prompts and responses depends on the applicable service tier and configuration. For paid Gemini API services, Google states that it does not use prompts or responses to improve its products. Google may retain limited data for safety and abuse monitoring or to provide enabled functionality. Learn more in the Gemini API Additional Terms of Service and Google's Privacy Policy.

Traination does not sell AI inputs or outputs or use them for third-party advertising. Google Calendar data used for booking, availability, or calendar synchronization is not shared with the Gemini API or any other AI processing pipeline.

Do not include personal or sensitive information in an AI request unless it is needed for the feature. AI output can be incomplete or inaccurate and should be reviewed by a qualified person. AI-generated workout or nutrition content is not a medical diagnosis or treatment and is not a substitute for advice from an appropriately qualified healthcare professional. Users are responsible for reviewing AI output before relying on or assigning it.

Traination does not use AI output to make decisions that produce legal or similarly significant effects about you without meaningful human involvement where prohibited by law.

08

How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes in this Policy, including while an account is active and as needed to provide the Service, honor a Trainer's documented instructions, comply with legal, tax, accounting, and reporting obligations, resolve disputes, enforce agreements, prevent fraud, and maintain security.

Retention periods vary based on the type and sensitivity of information, the feature involved, the relationship with the User, and legal requirements. When information is no longer needed, we delete, de-identify, or securely isolate it. Backups may persist for a limited period before being overwritten. If a Trainer controls a Client record, Traination will follow the Trainer's lawful deletion instructions, subject to our independent legal obligations.

09

How we protect information

We use administrative, technical, and organizational safeguards designed to protect personal information against accidental or unlawful loss, misuse, unauthorized access, alteration, and disclosure. These safeguards may include encryption in transit, access controls, authentication, logging, vendor reviews, backups, and security monitoring appropriate to the risk.

No system or transmission is completely secure. You are responsible for protecting your account credentials, using a strong unique password, and promptly notifying us of suspected unauthorized access. Traination will notify affected individuals and authorities of a personal-data breach when required by law.

10

International data transfers

Traination and our service providers may process information in countries other than the country where you live. Privacy laws in those countries may differ. Where required, we use recognized safeguards for international transfers, such as adequacy decisions, standard contractual clauses, contractual commitments, and supplementary security measures. You may contact us for more information about applicable transfer safeguards.

11

Your choices and rights

• Account information: review or update available information through account settings or ask another authorized User or Traination for assistance.
• Marketing: unsubscribe through the link in a marketing email or contact us. You may still receive non-promotional messages about your account or the Service.
• Notifications: manage push notifications in your device or app settings. Some essential service notices cannot be disabled.
• Cookies: use browser settings and available consent controls to manage cookies.
• Connected services: disconnect integrations in Traination or the connected service. Google access can be revoked at Google Account permissions.
• Privacy requests: depending on your location, you may request access, a copy, correction, deletion, restriction, portability, or an objection to certain processing, and may withdraw consent without affecting earlier lawful processing.

Email requests to admin@traination.fit. If Traination processes the information only for a Trainer, we may direct the request to that Trainer. We may verify your identity and authority before completing a request. We will not discriminate against you for exercising a privacy right, and we may deny or limit a request where permitted by law.

12

Regional privacy rights

EEA, United Kingdom, and Switzerland

Where applicable, you have rights to be informed, access personal data, correct inaccurate data, request deletion or restriction, receive portable data, object to processing based on legitimate interests or for direct marketing, and withdraw consent. You may also lodge a complaint with your local data-protection authority. We encourage you to contact us first so we can try to resolve your concern.

Our legal bases are summarized above. Where we rely on legitimate interests, we consider whether those interests are overridden by your rights. When we process health or other special-category information as a controller, we rely on explicit consent or another condition permitted by law.

California and other US states

Subject to legal thresholds and exceptions, residents of California and certain other states may have rights to know or confirm processing, access and obtain a copy, correct, delete, opt out of sale, targeted advertising, or certain profiling, limit certain uses of sensitive personal information, appeal a denied request, and receive equal service and pricing.

The categories collected in the preceding 12 months may include identifiers; customer records; commercial and transaction information; internet or network activity; approximate geolocation; audio, visual, and similar content; professional information; inferences; account credentials; and health and other sensitive information you choose to provide. We collect these categories from you, other Users and organizations, connected services, vendors, and automatically from devices. We use and disclose them for the business purposes and to the recipient categories described in this Policy. We retain them as described in the Retention section.

We do not sell personal information or share it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of people under 16. An authorized agent may submit a request where permitted by law, but we may require proof of authority and verification of the consumer's identity.

13

Children's privacy

The Service is not intended for children under 13, and children under 13 may not create an account or use the Service. Traination does not provide a method for verifying parental consent and therefore does not knowingly collect personal information from children under 13. Trainers must not invite a child under 13, create a Client account or record for them, or enter their personal information in the Service. When adding a Client, a Trainer must confirm that the Client is at least 13 and that the Trainer has obtained any parental or guardian consent required by law. Higher minimum ages may apply in some countries.

If we learn that we collected personal information from a child under 13, we will delete or otherwise address it as required by law. If you believe we may have received such information, contact us.

14

Changes to this Policy

We may update this Policy to reflect changes to the Service, our practices, or applicable law. We will post the updated version and revise the date above. If a change materially affects how we use personal information, we will provide additional notice through the Service, by email, or as otherwise required, and obtain consent where required.