Privacy Policy ✱

When you submit the contact form, we store the details you provide: your name, email address, phone number, gym or studio name, role, an approximate trainee-count range, and an optional free-text message. We also store a one-way cryptographic hash of the submitting IP address, together with the submission time. The raw IP address itself is never stored — only an irreversible hash, used solely to detect and limit repeated automated submissions.

This information is used for two purposes only: to follow up about a possible sales conversation for an invite-only product, and to detect and prevent spam submissions. It is not used for anything else.

A small number of service providers process data on our behalf: Clerk for authentication, Supabase for database hosting, Vercel for application hosting, and Resend for transactional email delivery. These four are the only providers that receive contact-form data.

Contact-form submissions are kept for as long as needed to complete the sales conversation or, if no conversation follows, for a limited retention period before deletion. Data is not kept indefinitely without reason.

You can ask to see, correct, or delete the information held about you at any time by contacting us using the details below. These requests are handled manually today; a self-service way to export or erase your own data is planned for a future update.

If you are a trainee, you can act on this directly: your profile lets you correct your own personal details, and its Privacy & data section lets you review and change your consent choices, request a full copy of everything held about you, and ask for your account to be erased. Each gym is the controller for its own trainees' data and publishes its own privacy contact on that same profile page — that is the right place to start, whether you already have an account or need to sign in first.

Beyond the contact form described above, a small number of service providers process data across the product on our behalf:

Clerk

Authentication and account sign-in

Supabase

Database and file storage

Vercel

Application hosting

Resend

Transactional email delivery

Two things are kept regardless of how long everything else lasts: payment, dues, subscription and package records are kept for 7 years, as required by Israeli tax law, with their amounts intact, and the activity log is kept indefinitely and is never edited — even a request to erase an account still appears in it. Everything else follows the schedule below; where a period has not been finalized yet, it says "still being set" rather than showing a number nobody has approved.

Health and tracking data

While you are an active trainee, plus a retention tail that is still being set

Training and nutrition records

While you are an active trainee, plus a retention tail that is still being set

Forms and check-ins

While you are an active trainee, plus a retention tail that is still being set

Chat and notes

While you are an active trainee, plus a retention tail that is still being set

Payment and invoice records

7 years, as required by Israeli tax law

Consent records

Kept as evidence that consent was given or withdrawn; how long after you stop being active is still being set

Activity log

Kept indefinitely, and is never edited

Stored media

While you are an active trainee, plus a retention tail that is still being set

Questions about this notice, or a request about your data, can be sent to hello@trainvo.app.