Privacy Policy
Last updated: October 2026
This Privacy Policy explains how Trainara collects, uses, stores, and protects personal data when you use the Trainara mobile application and related services.
- 1. Who we are
- 2. Scope of this Privacy Policy
- 3. Personal data we collect
- 4. How we use your data
- 5. Legal basis for processing
- 6. Artificial intelligence and automated processing
- 7. Data sharing and third parties
- 8. International data transfers
- 9. Data retention
- 10. Your rights
- 11. Data security
- 12. Cookies and tracking
- 13. Changes to this Privacy Policy
- 14. Contact
- Language precedence
1. Who we are
Trainara is a mobile application that provides training and nutrition recommendations for endurance athletes using artificial intelligence.
Data Controller:
Enrique Pérez Rivero
Spain
Email: support@trainara.com
For the purposes of the General Data Protection Regulation (GDPR), Enrique Pérez Rivero is the controller of your personal data.
2. Scope of this Privacy Policy
This Privacy Policy explains how Trainara collects, uses, stores, and protects personal data when you use the Trainara mobile application and related services.
By using Trainara, you acknowledge that you have read and understood this Privacy Policy.
3. Personal data we collect
We may collect and process the following categories of personal data:
3.1 Account and identification data
- Name or alias
- Email address
- Preferred language
- Geographic region or country
If you create or access your account with Sign in with Apple or Google, we receive from that provider your name, your email address (or a private relay address, e.g. one ending in @privaterelay.appleid.com, if you choose to keep your email private) and a unique account identifier. We use these data solely to create and authenticate your account. We never receive your password from these providers.
3.2 Athletic and performance data
- Height and weight
- Training data (e.g. workouts, power, heart rate, cadence)
- Physical activity history
- Training preferences and goals
Some of these data, such as heart rate, may be considered data concerning health. We use them only to analyse your training and adapt your plan, never for medical purposes.
3.3 Data from third-party integrations
If you connect external services, we may access data provided by:
- Garmin Connect
- Hammerhead (Karoo bike computers)
- Wahoo (ELEMNT bike computers)
- Intervals.icu
- Strava
From these services we receive the activities you record: the data of each activity (power, heart rate, cadence, speed, GPS location and altitude), its summary and, where the service provides them, the original activity file and the model of the device you recorded it with.
For Garmin Connect, we receive the activities you record from the moment you connect your account, not earlier ones. Before we process data received from Garmin with artificial intelligence, we ask for your explicit consent (see section 6.2).
Only data explicitly authorized by you through those services will be processed.
3.4 Acquisition data (where you came from)
When you create your account, we record which campaign the app install came from, so we know which campaigns bring us athletes:
- iOS: an Apple attribution token, which Apple resolves for us into the identifiers of the Apple Search Ads campaign you came from, or into “no campaign”.
- Android: the Google Play install referrer, which shows the link or campaign you installed the app from. If you came from a Meta ad (Instagram or Facebook), it includes the identifiers of the campaign, ad set and ad.
These data are not shared with third parties and do not include your name or email.
3.5 Ad measurement with Meta (Android only, and only with your consent)
If you installed the app from a Meta ad, we will ask you once whether we may measure that ad. Only if you agree does the app send Meta:
- That you installed and opened the app, and from which ad
- A few usage milestones: creating your account, receiving your first analysis, connecting a training account, and starting the trial or subscribing
- Your device’s advertising identifier and an anonymous identifier generated by the Meta kit
- Basic technical device information (model, operating system version, language, time zone)
We never send Meta your name, email, location, or any training or health data. If you do not agree, the app works exactly the same.
3.6 Data we send to Garmin
If you connect your Garmin account and authorise it, we send the cycling workouts in your plan (their structure, durations and power or heart-rate targets) and the routes you schedule to your Garmin Connect account, so you can follow them on your Garmin device.
- Before the first transfer, we explain which data will be transferred and why, and we ask for your express consent.
- Once the data are in Garmin, Garmin processes them as a controller under its Privacy Policy for Garmin Connect and Compatible Garmin Devices.
- Do not send these data to your Garmin Connect account if you are restricted from doing so.
- You can stop these transfers at any time by disconnecting your Garmin account in Synced accounts.
4. How we use your data
Your data are processed for the following purposes:
- To provide personalized training and nutrition recommendations
- To adapt recommendations to your goals, fitness level, and availability
- To improve the quality and relevance of our services
- To send your workouts and routes to your device, if you connect an account that supports it (for example, Garmin)
- To manage your user account
- To communicate with you regarding the service
- To ensure technical functionality and security
- To provide technical support, diagnose and fix the problems you report, and review the quality of the service, including with AI-assisted tools (see section 6.1)
- To know which campaigns new accounts come from, so we can invest in them better
- With your consent, to measure the effectiveness of our ads on Meta
5. Legal basis for processing
Under the GDPR, Trainara processes your personal data based on:
- Performance of a contract: providing the services you request
- Your consent: for optional data and third-party integrations
- Legitimate interests: improving and securing the service
- Your consent: ad measurement with Meta (section 3.5)
- Your explicit consent: processing with artificial intelligence of the data we receive from Garmin, including data that may be considered data concerning health (section 6.2), and sending workouts and routes to Garmin (section 3.6)
- Legitimate interests: knowing which campaign each new account comes from (acquisition data, section 3.4)
You may withdraw your consent at any time where processing is based on consent.
6. Artificial intelligence and automated processing
Trainara uses artificial intelligence models to generate recommendations related to training and nutrition.
- AI-generated outputs are informational and supportive only
- They are not medical advice and do not replace professional judgment
- Final decisions on training, nutrition, and health remain your responsibility
Automated processing does not produce legal or similarly significant effects on you.
6.1 AI tools for support and service improvement
In addition to the AI that generates your recommendations, we use AI tools provided by Anthropic (Claude) to help us run and improve Trainara. We use them to:
- Analyse aggregated statistics on how the app is used (for example, how many people complete each step of the initial setup)
- Diagnose the support requests you send us and prepare a proposed fix
- Review the quality of conversations with the in-app coach, to find where it fails to understand athletes
Before any data reaches these tools:
- Your name, email address and other direct identifiers are removed, and your account is replaced by a pseudonymous code
- Only the data needed for that specific task is sent
These tools do not make decisions about you. Every proposal they produce is reviewed and approved by a person before anything changes in the app.
Legal basis: our legitimate interest in keeping the service working and improving it. You can object to this processing at any time by writing to support@trainara.com.
6.2 AI transparency statement
Trainara processes your training data with artificial intelligence, including the data we receive from Garmin and from the other accounts you connect.
- Purpose: to analyse each session, create and adapt your training and nutrition plan, and reply to you in the coach chat.
- Who: OpenAI, which processes the data in the United States as our service provider and only to provide that service to us.
- Which data: your activity metrics (power, heart rate, duration, distance, elevation…), your athletic profile (FTP, zones, goals and availability), what you write to the coach, and the name or alias we address you by.
- Model training: we do not use your data to train artificial intelligence models, and OpenAI does not use the data it receives through its API to train its models.
- Support: the Anthropic tools described in section 6.1 only receive pseudonymised data.
Garmin data: we only process them with artificial intelligence if you give your explicit consent, which we ask for when you connect your Garmin account. You can withdraw it at any time in the app’s privacy settings or by disconnecting your Garmin account. Because session analysis and plan adaptation rely on this artificial intelligence, without that consent we cannot analyse the activities received from Garmin. Withdrawal does not affect the lawfulness of processing carried out before it.
7. Data sharing and third parties
We do not sell your personal data.
Your data may be shared only with trusted service providers strictly necessary to operate Trainara, including:
- Cloud infrastructure and hosting providers (Scalingo, in France, and Amazon Web Services, in Spain)
- Artificial intelligence providers (OpenAI, section 6.2)
- AI tools used for support and service improvement (Anthropic, section 6.1)
- The training platforms you connect (Garmin, Hammerhead, Wahoo, Intervals.icu, Strava), from which we receive your activities
- Garmin (Garmin International, Inc. and Garmin Würzburg GmbH), if you connect your Garmin account and authorise sending workouts and routes (section 3.6)
- Meta Platforms Ireland Ltd., only if you agree to ad measurement (section 3.5). For the collection and transmission of those data, Trainara and Meta are joint controllers; from then on, Meta processes them as a controller under its own privacy policy
All third parties are subject to appropriate data protection obligations.
8. International data transfers
Some service providers may process data outside the European Economic Area (EEA), including artificial intelligence providers located in the United States, such as OpenAI and Anthropic.
Where applicable, such transfers are safeguarded by appropriate legal mechanisms, such as standard contractual clauses.
Data shared with Meta may be transferred to the United States under the EU-U.S. Data Privacy Framework.
Workouts and routes you send to Garmin may be processed outside the EEA under Garmin’s privacy policy.
9. Data retention
We retain personal data only for as long as necessary to provide the service or until you request deletion, unless a longer retention period is required by law.
Acquisition data and the record of your answer on ad measurement are kept for as long as your account exists.
If you disconnect a training account, or revoke Trainara’s access from Garmin, we stop receiving new activities and sending workouts. Sessions already imported remain in your history, as they are part of your training, until you ask us to delete them or delete your account.
10. Your rights
Under the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a data protection authority
To exercise your rights, contact us at support@trainara.com. These rights include the data we receive from the accounts you connect, such as Garmin.
You can withdraw your consent for Garmin data at any time by disconnecting your account in Synced accounts or in the app’s privacy settings.
11. Data security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.
However, no system can be guaranteed to be 100% secure.
12. Cookies and tracking
Trainara does not use cookies. On iOS, the app does not use tracking technologies.
On Android, the app includes Meta’s software development kit (SDK) for the ad measurement described in section 3.5. It stays switched off and sends nothing until you give your consent, which is only asked of people who installed the app from a Meta ad.
You can withdraw your consent at any time in Athlete Settings → Privacy → Ad measurement. From then on the app stops sending data to Meta; withdrawal does not affect the lawfulness of processing carried out before it. If you agree, our subscription provider (RevenueCat) also tells Meta when you start your trial or subscription.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
If significant changes are made, we will inform you through the application or by other appropriate means.
14. Contact
If you have any questions about this Privacy Policy or how your data are handled, you can contact us at:
Language precedence
This Privacy Policy is available in multiple languages. In case of discrepancies, the English version shall prevail.