Get the app

Privacy Policy

Last updated: November 2, 2026

This policy explains how Trenno (“the App”), published by NEXTSIGNAL SOLUTIONS LTD (“we”), handles your information. It covers the iPhone app, its Apple Watch companion and the web version at my.trenno.app, which use the same account and the same data, and this website, trenno.app.

Short version. Trenno works with an account. Your account details, your settings and the training data you log are stored on our servers in the European Union so that they sync between your devices and survive a lost phone. Google handles sign-in and the App's crash reports and usage statistics for us, and PostHog the usage statistics of the web version and this website; both may process that data outside the European Union, including in the United States (see “Transfers outside the European Economic Area”). We use your data to run the App and to hand to an assistant you connected, and for nothing else: we do not sell it and we do not track you across other apps or websites. People signed in to Trenno can see your profile page, with your finished workouts and your routines, and follow you, as far as your setting “Who can see your training” allows: Everyone (the default), Followers or Only you. Anyone else who opens it sees only your profile picture, your name, your username and how many people follow you and how many you follow, or with Only you only your username. The comments you write under a workout are shown to everyone signed in to Trenno who can open that workout. The private notes you add to your workouts are seen by you alone: never on your profile page, in a shared link, a feed or anywhere else other people look. Nothing else you log is visible to other people unless a routine or a workout is shared by link: a routine by you, a workout by you or by someone who can see it. Of the data the App reads from Apple Health, only your weight is stored in your account, while you keep the connection on, so that you can see it on the web; the rest never leaves your device. You can export everything at any time and delete your account, with everything in it, from inside the App.

Your account

To use the App you create an account, with Sign in with Apple or with an email address and a password. Sign-in is handled by Firebase Authentication, a service of Google. Through it, and from our apps, we receive and store:

  • your email address (with Sign in with Apple this may be the private relay address Apple creates for you), kept up to date when you change it, whether you have confirmed it, and the name Apple hands over or you enter;
  • a user identifier that links your account to your data, and the dates of your sign-ins;
  • which of our apps you created the account in (the iPhone app or the web app) and, for each of them, when you first and last used it, with its version and language.

Your password is never visible to us. It is stored by Firebase in a protected form, and we receive only the confirmation that you signed in.

What we store on our servers

Once you are signed in, the App keeps a copy of your training data and your settings in your account on our servers so they can be restored and synced:

  • Profile. First and last name, birth date, gender, a short bio and the social links you choose to enter, and the username you choose for the address of your profile page, if you choose one.
  • Training data. Workouts and the sets in them, exercises you create, routines, programs and plans, folders, notes, and the weigh-ins and body measurements you log in the App. A workout can also hold a private note: only you can see it, in the App and at my.trenno.app, and it is deleted with the workout or with your account.
  • Settings. The choices you make in the App and in the web version, so that every device you sign in on uses the same ones: the units, the first day of the week, the App's theme, the default rest timer, whether warm-up sets count in your totals and records, how the workout screen behaves, how you rate the effort of a set, the weight increase the App suggests, how your library is sorted and shown, who can see your training (Everyone, Followers or Only you, which decides what your profile page shows and to whom, who can follow you, and who can open the routines and workouts you share), which notifications you receive inside Trenno, and a separate visibility setting for your profile, which has no effect today, each with the time it was last changed. The App also keeps there the first day of the week your iPhone uses for its region, so that “System” in the web version starts your weeks on the same day, and the web version keeps your time zone there, as your browser reports it, for the workout reminders (see “Notifications”). Your answers to the questions the App asks when you start (your goals, why you train and what for, your level, what you want to use the App for, how many days a week you plan to train and for how long, and where and with what equipment you train) are kept the same way. They are used only to set up your own devices and to help you when you write to us. The language of the App, the Apple Health connection, the App's reminders on your iPhone and the choice about crash reports and usage statistics are not among them: each stays on the device where you set it (the choice about crash reports also reaches the Apple Watch paired with that iPhone, over the connection between the two, never through our servers).
  • Photos. The pictures you add to the App: progress photos, photos of a workout, the picture on an exercise you created, the pictures of your routines and programs (including the artwork they came with from Explore) and your profile picture, with the date and note of the entry they belong to.
  • Device identifiers. With your profile, every entry of your training data, every weight from Apple Health and every photo entry we store an identifier of the iPhone or Apple Watch that last changed it, a random value the App creates on that device, so that your devices can agree on which of two changes is the newer one; it is kept for as long as the entry, or its deletion marker, is kept.
  • Versions that were replaced. If you change the same entry, or your profile, on two devices before they have synced, the newer change wins and the other version is replaced. We keep the replaced version for 90 days, together with the time it was made and an identifier of the device it came from, so that the App can show you what was replaced and put it back. Nothing else is done with it.
  • Imports. When you import a file from another app on my.trenno.app, a record of that import: when it ran, the file's name, which app it came from, how many workouts or measurements it added and which entries it created, so that you can take the import back later. The file itself is read in your browser and is not sent to us. Taking the import back deletes this record.
  • Weight from Apple Health. If you connect Apple Health in the App, the weight the App reads from it, one value a day, with the time Health recorded it and the identifier Health gave that reading, so that you can see it at my.trenno.app. It is kept only while the connection is on (see “Apple Health”).

The data is stored in a database hosted by Amazon Web Services in Frankfurt, Germany (the eu-central-1 region), encrypted at rest with a key that only our account can use, and travels there encrypted. Server backups are encrypted the same way. They are kept for seven days, and a backup taken right before an update of our server for fourteen days; then they expire. We also keep one offline copy of the database on our own computer, whose disk is encrypted, so that the service could be restored if the cloud backups were ever lost. It is replaced when we take a newer one; until then an account deleted after it was taken remains in it, and it is used for nothing but such a restore. Deleted entries are kept as deletion markers for up to 90 days so that your other devices learn about the deletion, then removed. Replaced versions are kept for the same 90 days and removed by the same daily cleanup.

Photos are kept in a private storage bucket in the same region, encrypted at rest and reached only over an encrypted connection. The bucket has no public address: the App and the web version open a photo through a link our server signs for your account, valid for 15 minutes. That link tells the browser to keep no copy of the photo in its cache. A photo you replace or delete, or that was replaced by a change from another device, is kept for the same 90 days as the replaced versions and deletion markers that can still name it, so that the App can put it back, and is then removed from the bucket; a photo that was uploaded but never attached to an entry is removed after 7 days. Deleting your account removes all of them at once.

So that your pictures appear quickly, the App and the web version may also upload smaller copies of a photo or of your profile picture (at most 480 pixels on the longer side, or 1080 pixels for a photo of a workout) and keep them next to it in the same bucket. They are made on your device or in your browser from the picture itself, are reached the same way, and are removed together with it.

What stays on your device and in your iCloud

  • On your device. The App keeps its full database on your iPhone, so it works without a connection; changes sync when one is available. A workout you record with the Apple Watch companion is sent to your iPhone and stored there like any other workout.
  • In your private iCloud, if enabled. When you are signed in to iCloud, the App also mirrors that database into the private area of your own iCloud account. That storage belongs to you and is governed by Apple's Privacy Policy; we have no access to it. Once the App on an iPhone has moved your data to your account on our servers, it stops mirroring on that iPhone. The copy it mirrored until then stays in your iCloud until you delete your account or another account signs in to the App on that iPhone; the App then removes it.
  • Photos. Photos you attach (to an exercise, to a workout, as body-progress photos or as your profile avatar) are picked from your photo library or taken with the camera when you ask. They are kept on the device with the rest of your App data and, if you use iCloud, in your own iCloud. A copy is also kept in your account on our servers, as described above, so that your other devices and the web version can show it.
  • Backups. You can export your data as a JSON file. The file goes wherever you choose to save it; we receive no copy.

Apple Health

The App can connect to Apple Health. The integration is optional, off by default, and controlled by you, in the App's settings and in the Health permissions of your iPhone and watch:

  • Reading. With your permission the App reads your body measurements (weight, body fat, height, lean body mass, waist) to show them alongside your training, and, if you enable the recovery features, your sleep and workouts recorded by other apps or devices, to estimate muscle recovery.
  • Writing. With your permission the App saves your finished workouts (together with the calories you logged on cardio sets, written as Active Energy) and the body measurements you log in the App (weight, body fat, height, lean body mass, waist) to Apple Health.
  • Apple Watch. With your permission the Apple Watch companion reads your heart rate during a workout you record on the watch, to show it on your wrist, and saves that workout to Apple Health together with its active energy. Heart-rate readings stay on the watch, in memory, for the duration of the workout; they are not synced to your phone, to iCloud or to our servers.
  • Storage. On your device, data read from Apple Health is kept apart from the rest of your App data: it is not mirrored to iCloud and it is excluded from your device's backups. Only your weight leaves the device. One value a day is stored in your account on our servers while the connection is on, so that you can see it at my.trenno.app. It is removed from our servers when you turn the connection off in the App's settings or delete your account. If you revoke the App's access in iOS Settings instead, the App cannot tell, and the weight already stored stays until you turn the connection off in the App or delete your account. That weight is never mirrored to iCloud and never given to an assistant. Measurements you type into the App yourself are your own entries and sync like the rest of your training data.

Crash reports and usage statistics

The App uses two services of Google: Firebase Crashlytics and Google Analytics for Firebase.

  • Crash reports carry the state of the App at the moment of a crash, on the iPhone (its Live Activity included) or on the Apple Watch: the technical trace, the device model, the iOS or watchOS version, the App version, the amount of free memory and a per-installation identifier. They never include your name, your email address or your training data.
  • Usage statistics are a small, fixed set of events: a workout started or finished (with the number of exercises and sets and the duration), a plan started, an exercise added, the onboarding completed, an account created (with the method: Apple or email), and the screens opened. They arrive with the device model, the iOS version, the App version, the language, the country derived from the network address, and a per-installation identifier generated by the App. No advertising identifier is used, the identifier iOS gives every app of one developer (the identifier for vendor) is not collected, and the App never asks for tracking permission.

We use them to fix crashes and to understand which features are used. Google processes this data on our behalf under its Firebase data processing terms; crash reports are kept for 90 days, analytics data for the retention period we set in Firebase (at most 14 months).

Turning them off. In the App: Settings, then Data, then Help improve Trenno. Off takes effect at once on that iPhone and stops both: no crash report and no usage statistic is sent from it after that. The Apple Watch paired with that iPhone follows the same choice as soon as it next connects to it, and sends no crash report before it has received the choice. The choice is kept on that iPhone and on its paired watch.

What my.trenno.app keeps in your browser

The web version stores a few things in the browser you open it in. They stay there, on your own device, in that browser's own storage. We cannot read them, and none of them is sent to us or to anyone else, except the sign-in note at the end of this list, which says nothing about you.

  • Your sign-in. Firebase Authentication keeps the signed-in session in the browser, so you are not asked for your password on every visit.
  • A copy of your account's data. Once you are signed in, the web version downloads the training data in your account and keeps a copy of it in the browser, together with a marker of how far it has read. That copy is what lets a reload, or a second tab, carry on from where the last one stopped instead of downloading your whole account again. It holds the same things the account holds: your workouts and their sets, your exercises, routines, programs and plans, your measurements, the records of your photos and the record of your imports.
  • Your settings. A copy of the settings kept in your account (see “What we store on our servers”), so that a page can show them before it has heard from our servers, and the ones that belong to this browser alone: its language, its theme, how you like the library page sorted and shown, which feed Home opens on, and whether usage statistics are on. Settings this browser kept before your account held them are offered to the account that signs in on it; until that account has taken them, the browser also notes which account they are for, so they never go to anyone else, and they are removed when that account logs out there.
  • An identifier for this browser, the one an exercise report carries, and, while a sign-up has not reached our servers yet, the name you typed on it. If our servers refused that name for a word they do not allow, a note of which part of it was refused (never the words themselves), until you next save your profile or log out.
  • A note that you are signed in. A cookie named trenno_signed_in. It says only that someone is signed in to the web version in this browser: no name, no email address and no account number. The web version sets it when you sign in and removes it when you log out, and it lapses at the latest a year after your last visit. This website, trenno.app, reads it in your browser so that Save on an exercise page saves it to your account instead of asking you to sign up. Your browser sends it along with requests to trenno.app and its other addresses, as browsers do with cookies; our servers drop it unread and never record it.

What removes it. Logging out removes the copy of your data at once, and so does deleting your account. A browser that is closed when you log out everywhere, or delete your account, on another device shows nothing of that copy from then on, and removes it the next time it opens my.trenno.app with a connection. A tab left open without a connection at that moment keeps showing that copy until it connects again, and then removes it. Signing in where somebody else was signed in removes whatever the previous account left before anything of the new one is read: the copy belongs to one account at a time, and only the account signed in now can reach its own. Clearing this site's data in your browser removes everything above, and the next sign-in downloads what it needs again. Your photos are not kept in the browser at all: each one is shown through a link that tells the browser to keep no copy.

Usage statistics on my.trenno.app

The web version keeps a small, separate record of how it is used, so we can see which parts people reach and where something stops working. It is handled for us by PostHog, on servers in the European Union. These statistics set no cookie and keep nothing in your browser.

Three things are recorded, and nothing else:

  • A page opened, as the shape of the address rather than the address itself. A routine's page is recorded as /library/routines/:id. The identifier of the routine you opened is taken out before anything is sent, so we can count how many people open a routine and never which one.
  • A step in one of three tasks: signing in, signing up, and importing a file from another app. Each is recorded as the name of the task and one word for the step reached, such as started, done or failed. It tells us where people give up, and nothing about what was in the file.
  • A screen that failed: which part of the app was refused, and the technical reason code, such as unavailable or rate limited. The message our server wrote is not included.

Each record carries your account identifier, the same one that links your data on our servers, together with the technical facts any web page receives: the browser and its version, the operating system, the screen size and the time zone. It also carries the country and city you connect from, which PostHog works out from the network address your browser connects from. PostHog uses the address for that and to filter out automated traffic, and then discards it: the address itself is not stored. The identifier is not your email address and not your name. Nobody but us can turn it back into a person, and when you delete your account it points at nothing. The records are kept for up to twelve months.

These statistics never carry your training in any form: no exercise, routine, program or folder name, no note, no weight, no repetition, no measurement, no photo and no date of a workout. They never carry your name, your email address, or anything you type. They do not carry the address bar as you see it, or the page you came from. There is no session recording, no automatic capture of what you click, and no advertising identifier of any kind.

Turning them off. Settings, then Privacy, then Usage Statistics. Off takes effect at once in that browser: nothing further is sent, and the software that would send it is not even loaded. The choice is kept in that browser, so it is made once in each browser you use.

Page visits on trenno.app

This website, trenno.app, counts page visits with the same service, PostHog, on its European Union cloud, without cookies and with no account involved at all, so those counts belong to nobody in particular. There is no session recording and no automatic capture of what you click. As on the web version, PostHog works out the country and city of a visit from the network address your browser connects from, uses the address to filter out automated traffic as well, and then discards it: the address itself is not stored. The counts are kept for up to twelve months. A browser that sends Do Not Track is not counted.

No analytics runs on the support page or on the legal pages, this policy and the terms, which are the pages the App opens: PostHog is not loaded on them, so a visit to them is not counted.

Security reports from our websites

The pages of trenno.app and my.trenno.app tell your browser what they may load, and the browser blocks anything else, for example a script that a browser extension tries to add to a page. When it blocks something, your browser may send our servers a short technical report about it. We keep one line from each report: which of the two websites, the kind of page without the rest of its address, what was blocked and the host it came from. Nothing in that line identifies you or your browser. The network address a report comes from is used only to limit how many reports one address can send and, for my.trenno.app, to count how many different addresses sent one in the last quarter of an hour, and is not stored. The lines are kept for 30 days.

Error reports from my.trenno.app

When something goes wrong in the web version, it tells our servers, so that we can fix it before you have to tell us: a page that could not be shown, a part of the web version that could not be loaded after an update, a page that kept loading, a problem nothing in the page handled, or your account's data that could not be synced. Each report is three words from a fixed list and nothing more: what went wrong, the part of the web version it happened in (such as Home, a workout's page or Progress, never the page's address), and which release of the web version was running. It carries no account identifier, no name, no email address, nothing you typed, none of your training and no page address, and the line we keep from it says nothing about you or your browser, so it is sent whether or not usage statistics are on. A browser tab sends each kind of report at most once. We keep one line from each report for 30 days. The network address a report comes from is used only to limit how many reports one address can send and to count how many different addresses sent the same kind in the last quarter of an hour, and is not stored.

Routines you share

Apart from your profile page (see “Your profile page and the people who follow you”), nothing you log in Trenno is visible to other people unless you choose to share it. When you share one of your routines at my.trenno.app, we create a link to a page on my.trenno.app. Who can open it follows “Who can see your training” in Settings, then Privacy: with Everyone, anyone who has the link, signed in or not; with Followers, only the people who follow you, signed in to Trenno; with Only you, nobody but you. Those who can open it see the routine as it is now, including the changes you make to it later: its name, its notes, its exercises with your notes on them, and the planned sets with their repetitions, times or distances and the rest between them. They can also save a copy of it to their own Trenno account, and when they do, you are told who saved it (see “Notifications”). The page does not show your name, your email address, your profile, the weights you set, or any of your workouts, measurements or photos, and it asks search engines not to index it.

Choosing Only you closes every link you have shared, at once; choosing Followers or Everyone opens the same links again, for the people that choice allows. Copies that people have already saved stay in their accounts. A routine has one link: sharing it again gives the same link. Deleting the routine or your account stops the link. We keep the link with your account; the link of a routine you deleted is kept for up to 90 days, like other deleted entries, and then removed. The link's address ends in a code of 12 letters and digits, which is never given to another link: we keep the code on its own, with nothing that connects it to you or to the routine. Addresses of routine links shared from earlier versions of Trenno no longer open.

Anyone who can open a shared routine's page can report it to us with the link at the bottom of that page. A report keeps the words its sender chose to write, if any, the link, the routine's name at that moment and when it was sent, and nothing about the person who sent it. We keep each report and its text until we delete it after review, and we do not publish it. If you delete your account, your routine's name is removed from the reports about it.

Workouts you share

Every finished workout in your account has its own link, which you can share at my.trenno.app. Someone signed in to Trenno who can open one of your finished workouts on your profile page can share its link too, the same one you would share. We do not keep who shares a link. Who can open the link follows “Who can see your training” in Settings, then Privacy: with Everyone, anyone who has the link, including people who are not signed in to Trenno; with Followers, only the people who follow you; with Only you, nobody but you. The page shows the workout with its exercises, sets, weights, notes, effort and type, the photos you attached to it and how many personal records it set; your name, your username, your profile photo, how many finished workouts you have, how many people follow you and how many you follow; and how many people liked it. To people signed in to Trenno it also shows who liked it and its comments (see “Comments”). It never shows your email address, the private note you added to the workout, your list of personal records or any of your other workouts, and it asks search engines not to index it. The photos are opened through links our server signs for the person viewing the page, valid for 15 minutes, like your own.

With Followers, someone who has the link but does not follow you, signed in or not, sees your name, your username, your profile photo and those three numbers, and that your workouts are only for your followers, but nothing of the workout; if they are signed in to Trenno, they can ask to follow you from there. With Only you, the link says that the workout is private and shows nothing of it or of you.

When the link is pasted into a messenger or a social network, the preview it shows is made from the link's address on trenno.app: with Everyone, your name, the workout's title and your profile photo; in every other case only the name Trenno and our own picture. That service fetches the preview from our server and may keep it under its own privacy policy. When someone who is not signed in opens a shared workout or its preview, the network address they come from is used only to limit how many times one address can do so, and is not stored.

Choosing Only you closes the link at once, and choosing Followers or Everyone opens the same link again, with the likes and comments the workout already has. Deleting the workout or your account stops the link. The link's address ends in a code of 12 letters and digits, which our server gives the workout when it first stores it as finished and which stays with that workout: it is kept with the workout in your account and removed with it, up to 90 days after you delete the workout, like other deleted entries. The code is never given to another link: we also keep it on its own, with nothing that connects it to you or to the workout. Addresses of workout links shared from earlier versions of Trenno no longer open.

Anyone who can open a shared workout can report it to us from its page. A report keeps the words its sender chose to write, if any, the link, the workout's title at that moment and when it was sent, and nothing about the person who sent it. We keep each report and its text until we delete it after review, and we do not publish it. If we find that a shared workout breaks our rules, we can turn its link off. If you delete your account, your workout's title is removed from the reports about it.

Your profile page and the people who follow you

Every account has a profile page on my.trenno.app that other people can open, at an address made of your username, if you choose one, or otherwise of a code that does not reveal who you are. Who sees what there is decided by your setting “Who can see your training”, in Settings, then Privacy:

  • Everyone (the default). Anyone signed in to Trenno sees your page: your profile picture, your name, your username, your bio, the social links you entered (Instagram, TikTok, YouTube and your website), how many finished workouts you have, how many people follow you and how many you follow; your finished workouts, newest first, each as a shared workout's page shows it (see “Workouts you share”) and with the number of personal records it set, and their photos again in a row at the top of the page; how much you trained in each of the last 12 weeks (the number of workouts, their time and the total weight lifted); and your routines, each as a shared routine's page shows it (see “Routines you share”), which they can save a copy of to their own account. They can follow you at once, and open the lists of your followers and of the people you follow.
  • Followers. Anyone signed in to Trenno sees your picture, name, username, bio, social links and the three numbers. Following you is a request that you accept or decline; your workouts and their photos, your routines, your last 12 weeks and the two lists are shown only to the people whose request you accepted.
  • Only you. Anyone signed in to Trenno who opens your page sees only your name, your username and your profile picture, and that your profile is private: not your bio, social links or numbers, and none of your workouts or routines. Someone who is not signed in sees only your username. Nobody can follow you or ask to.

When you switch to Everyone, every request waiting for you is accepted; when you switch to Only you, they are all declined. People who already follow you stay your followers and see what the new setting lets them see. Your page never shows your email address, birth date or gender, your measurements or your progress photos, and of your personal records only how many each workout set. The people who can see your workouts can also open “Compare” in the App, which sets their training beside yours: for each exercise from the Trenno library, your best estimated one-rep max with the set it came from, your heaviest weight, the date of each, and how that one-rep max changed week by week. People who are not signed in and open your page see only your profile picture, your name, your username and how many people follow you and how many you follow, or with Only you only your username; to see more of it or to follow you, they need to sign in. Only a workout shared by link, by you or by someone who can see it, can show them part of it (see “Workouts you share”). Whatever you choose, when you follow someone your name, username and profile picture appear in the list of their followers, which the people who can see their page can open. The workouts people can see on your page also reach them in their feed at my.trenno.app: the people who follow you see them under Following, and while your setting is Everyone, everyone signed in to Trenno sees them under Community, where your account may also be suggested to others under People to follow.

Whatever you choose, people signed in to Trenno can also find your account by searching for your username or your name. The result shows your name, username and profile picture, as the list of someone's followers does, and opening it shows your page as your setting allows: with Only you, the same name, username and profile picture and nothing else. People you have blocked, and people who have blocked you, do not find you. What someone types into the search is not stored.

We keep each follow and each follow request with the two accounts it joins: who follows whom, and when it was asked for and accepted. A request stays until it is accepted or declined, or its sender cancels it; a follow stays until one of you ends it, by unfollowing or by blocking.

Your username is yours while you use it. A username once used is not given to anyone else, so that an old link to your page cannot lead to another person. A username you change or remove stays recorded with your account, and only you can take it again; when you delete your account, only the name itself is kept, without anything that links it to you. If we find that your username breaks our rules, we can remove it from your account: it stays recorded with your account, and nobody can take it, you included. The one exception to the first rule is a username no longer in use that a brand or a person shows us is theirs: we can release it so that they can take it, and a link to the page that used it then leads to them.

Anyone who can open your page can report you to us for harassment, spam, inappropriate content or impersonation, and anyone who sees your name or profile photo in a list of likes can report that name or photo; either way they can add details if they choose to write them. A report does not block you or change your account, and you are not told about it. It keeps the reason, the words its sender chose to write, if any, your name and profile photo as they were at that moment, and nothing about the person who sent it. If we find that your name, photo, username, bio or social links break our rules, we can remove them from your profile without changing anything else of your account, and we can suspend an account that breaks our rules (see “Offensive words and suspended accounts”). We keep these reports until we delete them after review, and we do not publish them; if you delete your account, your name and photo are removed from them.

Likes

People who can see a workout, through its link or on its author's profile page, can like it, and you can like the workouts others show you, though not your own. Everyone who can open a workout sees how many people liked it and the names and profile photos of those who did, so your name and profile photo are shown beside the workouts you like, where the people who see them can report them to us (see “Your profile page and the people who follow you”). We keep each like with your account and the workout it belongs to; a like you take back is deleted, and so are your likes, and the likes of your workouts, when you delete your account. A workout you delete is shown to nobody, its likes included.

Comments

When you are signed in to Trenno and can see a finished workout, through its link or on its author's profile page, you can comment on it, reply to a comment and like comments and replies. A comment is plain text of up to 1000 characters. Everyone signed in to Trenno who can see the workout sees its comments, the name and profile photo of each person who wrote one, when they wrote it, and how many people liked it and who they are, so your name and profile photo are shown beside your comments. Who can see a workout follows its author's “Who can see your training”: when the author chooses Only you, its comments are hidden with it, and nothing is deleted; the author of a workout can always read, write and delete the comments on it, except a comment that a block (see “Blocking”), our review or the suspension of its writer's account hides: until it is shown again, the author can neither see it nor delete it. We keep each comment and reply with your account and the workout it belongs to, with the time you wrote it, and each like of a comment with your account.

You can delete your own comments, and the author of a workout can delete any comment on it that is not hidden. Comments cannot be edited. A deleted comment is removed together with its likes; if it had replies, the words “Comment deleted” take its place, without your name or your words, so that the replies still make sense. When a workout is deleted, its comments are shown to nobody, and they are removed with their replies and likes when the workout's deletion marker is, within 90 days. When you delete your account, your comments, your replies and your likes of comments are deleted in the same way, and so are the comments on your workouts. A block hides comments as “Blocking” describes.

Anyone who can see a comment can report it to us for harassment, spam, inappropriate content or impersonation, with details if they choose to write them. A report does not hide the comment or change your account, and you are not told about it. It keeps the reason, the words its sender chose to write, if any, the comment's text as it was at that moment and when it was sent, and nothing about the person who sent it. The comment's text stays in the report even if the comment is deleted later, until we delete the report after review, and we do not publish it. If we find that a comment breaks our rules, we can hide it: nobody else sees it any more, and you see “Removed by Trenno” in its place. If you delete your account, your comments' text is removed from the reports about them.

Notifications

In the Trenno app on your iPhone and at my.trenno.app you get notifications inside Trenno: a bell with a dot when something new has arrived, and a list of what happened. Our server creates a notification when someone likes one of your workouts, comments on one of your workouts, replies to your comment or likes it, follows you or asks to follow you, accepts your request to follow them, or saves a copy of a routine you shared by link. It records who did it, what it is about (your workout, the comment or your routine) and when; the notification of a comment or a reply shows you its words. On a day your plan sets a workout, you also get a reminder naming the routine, at 7:00 in your time zone. Notifications are not pushed to your phone or sent by email.

Only you see your notifications, and each one shows only what you can still see: if the workout or comment it is about is deleted or hidden, or you can no longer open it, it is not shown. What you do creates notifications for other people in the same way: when you like or comment on someone's workout, reply to or like their comment, follow them or ask to, accept their request, or save a copy of a routine they shared by link, they see your name, username and profile photo and what you did. Nothing creates a notification to yourself, or between two people when one of them has blocked the other (see “Blocking”).

You choose which notifications you receive at my.trenno.app, in Settings, then Notifications: likes, comments, followers, saves and workout reminders, each on its own. Turning one off stops new notifications of that kind; turning it on again does not bring back the ones you missed.

We keep each notification for 90 days after the event it tells of, and then delete it. We also keep the time you last opened your notifications, so that the dot shows only what is new. A like that is taken back takes its notification with it, and deleting your account deletes the notifications to you and from you.

Blocking

You can block another person. From then on neither of you, while signed in, can open the other's profile page or shared workouts, follow the other, or like or comment on the other's workouts; the likes, follows and follow requests between the two of you are deleted, and so are the likes either of you gave the other's comments and the notifications between you; neither of you sees the other in a list of likes, followers or people followed; and nothing either of you does creates a notification for the other.

Neither of you sees the other's comments or replies, on anyone's workout, or can reply to them or like them. The comments themselves stay: on a workout of either of you, the other's comments and replies are hidden from everyone while the block lasts; on anyone else's workout, the other people who can see it still see them.

We keep the list of the people you block with your account, so that this holds on every device, until you unblock them or delete your account. The person you block is not told; while they are signed in, your page and their links to your workouts simply stop working for them. A person you block still sees what you show to everyone when signed out; choose Followers or Only you to close it. Unblocking brings back the comments the block hid, but not the likes, follows, requests or notifications that were deleted.

Offensive words and suspended accounts

Before a comment or a reply, a username, or the name, bio or social links on your profile are saved, our servers check them against a list of offensive words, including Russian ones written in Latin letters. A real first or last name that happens to look like one of them is accepted as a name. A username and your social links are also checked for such words run together inside them, and your first and last name are also checked together, as others see them. A text that holds one is not saved and nothing of it is kept: you see why at once, with your text still there to change. Nothing else you log, such as a workout's title, its notes or a routine's name, is checked.

If an account breaks our Terms of Use, for example as reports about it show, we can suspend it. A suspended account keeps working for its owner: its training syncs, its history stays, and it can still be exported or deleted. What other people would see or receive from it is held back: its profile page and the routines and workouts it shared by link no longer open for them, its comments and replies are hidden, it is left out of every list of likes, followers, people followed and follow requests and out of their counts, and nothing it does reaches anyone's notifications. It cannot comment, like, follow or ask to, accept a follow request, change its name, username, bio or social links, or share a routine by link. Nothing is deleted, and lifting the suspension brings all of it back.

We keep the record of a suspension with the account: when it started and when it was lifted, which of our reasons applied (harassment, spam, inappropriate content or impersonation), our own note and the report it came from. It is deleted when the account is deleted; our log of what moderators did keeps only that the account was suspended and lifted, when, for which reason and from which report. To ask about a suspension, write to support@trenno.app.

When we remove a username, a bio or social links, our log of what moderators did keeps which of them it was, when, and the account or the report it came from, never the words themselves. When we release a username, it keeps the username, the account that used it while that account exists, when, and whether a brand or a person claimed it.

Assistants you connect

You can connect an AI assistant, such as ChatGPT or Claude, to your account. You do it yourself: the assistant sends you to my.trenno.app, where you sign in and see what it asks to do, and nothing is shared until you choose Allow. For ChatGPT, installing the Trenno plugin from ChatGPT's plugin directory starts these same steps.

  • What it may do. Read your training (workouts, with their notes and the private notes you added to them, exercises, records, routines and programs) and create new routines and programs, which go into a folder of their own in your Library. It reads your weigh-ins and body measurements only if you tick that box. An assistant can never delete anything, change a workout you have done, change an existing routine or program, or change your settings.
  • What leaves our servers. Only what the assistant asks for within what you allowed, and only while the connection lasts: summaries and pages of your training, never your whole account at once. No assistant receives anything from Apple Health: your weight from Apple Health is on our servers but is never handed to an assistant, and nothing else from Apple Health is on our servers.
  • After it leaves. What the assistant reads is then processed by the company behind it (OpenAI for ChatGPT, Anthropic for Claude) under that company's own terms and privacy policy, as part of your conversations with the assistant. We do not control that processing.
  • What ChatGPT sends along. ChatGPT may add hints to the requests it makes, such as your language or an approximate location. We do not use them and do not keep them.
  • What we keep. The connection itself (which assistant, what you allowed, when you connected and when it was last used), the codes that let the assistant in, of which we keep only a one-way fingerprint, and a list of what the assistant did in the last 90 days, such as “Read 12 workouts”, without the content. The list is shown to you in Settings → Security at my.trenno.app. Routines and programs an assistant creates are stored in your account like the ones you make, marked with an identifier of the connection that created them.
  • Disconnecting. Disconnect an assistant at any time in Settings → Security at my.trenno.app, and it loses access at once. “Log out everywhere” and deleting your account disconnect every assistant too. You can also disconnect it in the assistant's own settings.

Exercise reports

You can report an inaccurate or incomplete exercise from its page. The report carries the text you type, the exercise's catalog identifier and name, the App version and build, your language, a per-installation identifier and, if you are signed in, your user identifier.

Messages you send with Feedback or Report an issue

At my.trenno.app you can write to us from any page with Feedback, at the right edge of the window, or with Report an issue, in Settings. The message carries the text you type, the page of the web version you wrote it from and its address (with the code that opens a shared routine or workout taken out), the version and build of the web version, your language, the identifier of this browser that an exercise report carries and, if you are signed in, your user identifier. It also carries what your browser reports about itself, so that we can see the problem the way you saw it: the browser, its version and your operating system as your browser names them (its user agent), the size of the window and of the screen, the screen's pixel density, your time zone, the languages your browser prefers and whether the page was shown in the light or the dark theme. Nothing else about your device is sent with it.

We use exercise reports and these messages to answer you and to fix what they tell us about, and we do not publish them. We keep each one in our inbox for twelve months after it arrives, and then delete it. If you delete your account, the ones you sent while signed in are kept until then, but they lose your user identifier, the identifier of the browser or the installation they came from and the details your browser reported, so they are no longer linked to your account.

Catalog updates

The App downloads updates to the exercise catalog and its illustrations from our servers. These requests carry no account information, only the standard technical information any server receives, such as the network address, the App version and the language.

Other things the App does

  • Web pages. When you open this policy, the terms or the support page from the App (its About screen or the sign-up screen), the pages load from our website like any web page in a browser. That request carries the standard technical information any website receives and nothing from your App data. No analytics runs on these pages, so the visit is not counted (see “Page visits on trenno.app”).
  • Reminders on your iPhone. Optional workout reminders are scheduled locally on your device by iOS. No message is sent through us. They are separate from the notifications inside Trenno (see “Notifications”).
  • Links to other services. The App can open a YouTube search for an exercise in your browser. Once you follow such a link you are on a third-party site, subject to its own terms and privacy policy. We share no information with it.

Who processes your data

We do not sell your data and we do not share it for advertising. The companies that process it on our behalf, each bound by a data processing agreement, are:

  • Google LLC (Firebase Authentication for sign-in, Firebase Crashlytics and Google Analytics for Firebase for crash reports and usage statistics);
  • Amazon Web Services EMEA SARL (hosting of our servers and database in Frankfurt);
  • PostHog, Inc. (usage statistics for the web version at my.trenno.app and the page-visit counts of this website, trenno.app, processed on its European Union cloud).

Apple processes the data you keep in iCloud and in Apple Health under its own terms; we are not party to that processing. An assistant you connect is not one of the companies above either: it receives what you allowed at your request, and its company processes it under its own terms (see “Assistants you connect”).

Transfers outside the European Economic Area

Our servers, the database and your photos are in Frankfurt, in the European Union. Two of the companies above are based in the United States and may process data there:

  • Google LLC. Firebase Authentication, which handles sign-in, runs only in Google's data centers in the United States. Crash reports and usage statistics from the App may be processed in any country where Google or the companies it works with operate, the United States included.
  • PostHog, Inc. The usage statistics of the web version and the page-visit counts of this website are stored on PostHog's European Union cloud, and PostHog may also process them outside the European Economic Area, the United States included.

Both companies take part in the EU-U.S. Data Privacy Framework, under which the European Commission decided on July 10, 2023 that personal data transferred to a company taking part is adequately protected, and the data processing terms we have with them include the European Commission's standard contractual clauses for any transfer the Framework does not cover. Both companies are listed at dataprivacyframework.gov, and you can ask us for a copy of the clauses at the address below.

Why we process it, and on what basis

  • To run the App, keep your account and sync your training data: performance of our agreement with you (the Terms of Use).
  • To show your profile page, with your finished workouts and your routines, and your follows to other people, as far as your setting “Who can see your training” allows, and your comments to the people who can see the workout they belong to: performance of our agreement with you. To keep a username you stopped using from being given to anyone else: our legitimate interest in links to a page never leading to the wrong person. To release a username no longer in use to a brand or a person who shows us it is theirs: their legitimate interest, and ours, in their name not being held by someone else.
  • To fix crashes and the problems you write to us about, correct the catalog and understand which features are used and which pages of this website are read: our legitimate interest in keeping the App working and improving it. Crash reports and usage statistics can be turned off in the App, the web version's usage statistics in the web version, and this website counts no visit from a browser that sends Do Not Track; the sections above say where. The web version's error reports carry nothing about you, and are sent to find and fix what fails.
  • To answer you when you write to us: our legitimate interest in providing support.
  • To review the reports we receive and act on them (hide a comment, remove a name, a photo, a username, a bio or social links, turn a link off or suspend an account that breaks our rules), and to check what other people will read for offensive words before it is saved: our legitimate interest in keeping Trenno safe for the people who use it.
  • To hand an assistant you connected what it asks for, within what you allowed: your request when you connect it, as part of our agreement with you.

How long we keep it

Your account and the data in it are kept for as long as the account exists. Your weight from Apple Health is kept only while the connection is on: turning it off in the App's settings removes it from our servers. When you delete your account, the data is deleted from our servers, together with the sign-in record at Firebase, and expires from server backups within seven days, or within fourteen days from a backup taken right before an update of our server. Deletion markers and versions replaced by a newer change from another device are kept for 90 days and then removed, together with the photos they name, and so is the list of what a connected assistant did; a connection you end is removed 90 days after it ends. Notifications are kept for 90 days after the event they tell of. Exercise reports, and messages sent with Feedback or Report an issue, are kept for twelve months after they arrive and then deleted. Deleting your account does not delete them sooner, but the ones you sent while signed in lose your user identifier, their per-installation identifier and the details your browser reported. Reports of shared routines and shared workouts, of a person, their name or their photo, and of a comment, with its text as it was, are kept until we delete them after review. Follows and follow requests are kept until they end, and are deleted with either account. Your comments are kept until you or the author of the workout delete them, or the workout or your account is deleted. The record of a suspension is kept until the account is deleted. A username you stopped using, or that we removed, stays recorded with your account; once the account is deleted, only the name is kept, without anything that links it to you, so that it is not given to anyone else unless we release it for a brand or a person who shows it is theirs. Crash reports and usage statistics follow the periods stated above, and the web version's usage statistics and this website's page-visit counts are kept for up to twelve months. The lines kept from our websites' security reports, and from the web version's error reports, are kept for 30 days. Support correspondence is kept for as long as needed to answer you.

Your control over your data, and your rights

  • Access and export. Everything you log is visible in the App, and Settings exports it as a file at any time. The export from my.trenno.app also carries your account's own records: your email address, the apps you used, your imports, your weight from Apple Health, the likes you gave, the comments you wrote and the comments you liked, the people you blocked, the people you follow and the follow requests you sent, the usernames you used, the assistants you connected and what they did, and the messages you sent us. The export leaves out what you deleted: a workout or routine you deleted, and your likes and comments on that workout. It does not include the links to your routines and workouts.
  • Correction. Edit your profile and any entry in the App; the change syncs.
  • Deletion. Delete individual entries in the App, or delete your account in Settings → Account → Delete account, in the App or at my.trenno.app. This removes your account and everything in it from our servers and cannot be undone, so both offer to make a backup file first. The App then removes your data from the iPhone and from its iCloud copy: at once on the iPhone you delete it from, and on any other iPhone signed in to the account once the App there learns of the deletion, after offering a backup there too. Removing the App without deleting your account deletes only its local data; the iCloud copy is then managed through your Apple ID settings (Settings → Apple Account → iCloud → Manage Account Storage).
  • Who sees your training. Choose Everyone, Followers or Only you, and see and unblock the people you blocked, in Settings → Privacy, in the App or at my.trenno.app.
  • Apple Health. Turn access off at any time, in the App's settings or in iOS Settings → Health → Data Access & Devices. Only turning it off in the App's settings removes the weight from Apple Health stored in your account (see “Apple Health”).
  • Crash reports and usage statistics in the App. Turn them off in the App, in Settings → Data → Help improve Trenno.
  • Usage statistics on the web. Turn them off at my.trenno.app, in Settings → Privacy → Usage Statistics.
  • Page visits on trenno.app. Turn on Do Not Track in your browser, and this website counts none of your visits.
  • Assistants. See and disconnect the assistants you connected, with what each did in the last 90 days, at my.trenno.app in Settings → Security.
  • Notifications. Choose which notifications you receive inside Trenno at my.trenno.app, in Settings → Notifications.

If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to ask us for a copy of your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Write to the address below and we will answer within one month. You may also lodge a complaint with your data protection authority; ours is the Commissioner for Personal Data Protection of Cyprus.

Children

The App is not directed at children under 13, and we do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has created an account, write to us and we will delete it.

Changes to this policy

If the way the App handles your information changes, this policy will be updated before that version ships, and the change will be described here with a new date.

Contact

NEXTSIGNAL SOLUTIONS LTD, support@trenno.app