TrainerDay

TrainerDay Privacy Policy

Who we are

TrainerDay Inc

We won't sell or provide your personal information

To any 3rd-party without your consent. Ok if we sell the company then I guess they will get it too but you will know about that if it happens.

What personal data we collect and why we collect it?

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor's IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here. After approval of your comment, your profile picture is visible to the public in your comment.

Plans & Workouts

This is a community workout website. We store this information so be careful not to include anything you don't want someone else to see.

Mobile Training App Data Collection

1. Types of Data Collected:
Our app collects the following types of personal and sensitive user data:

Personal Information: This includes data like email addresses, names, and performance metrics (workout data, heart rate, power output, etc.).

Health & Fitness Data (including Heart Rate): Our app collects health-related data that is used for performance analysis. This includes heart rate data received from connected sensors (chest straps, watches, etc.), power output, cadence, speed, and other fitness metrics. Heart rate and similar health data is stored with your account and used to power features like workout tracking, training analysis, and personalized recommendations.

Location Information: Our app collects location information partially because connecting to Bluetooth requires location services, and secondly we collect user IP and related location information (city, country) for generalized user demographic reviews.

2. Data Usage:
The personal and sensitive user data we collect is used solely for:

Enhancing User Experience: By analyzing performance metrics, we deliver personalized workout recommendations.

Aggregated Data: We may use your data in aggregated, anonymized form for analytics, research, product improvement, and to benefit other users in our community. When we do this, your data is combined with data from many other users in a way that makes it impossible to identify you as an individual. For example, we may analyze trends across age groups, publish general statistics, or use aggregated data to help other users understand how they compare to the broader community. We will never use or share your data in any way that could identify you personally.

Analytics and Reporting: We track app and site performance, usage statistics, and user interactions to improve our services. This runs on our own self-hosted analytics — the data stays on our servers and is not sent to a third-party analytics company.

3. Third-Party Sharing:
We do not sell your data, and we do not share your personal or sensitive data with any third-party companies for advertising or marketing purposes. We do rely on a small number of service providers to run TrainerDay. They process data only on our behalf and only to provide their service to us:

  • DigitalOcean — hosting. Our application servers and our managed PostgreSQL and MongoDB databases run there, so this is where your account, workouts and training data are stored.
  • Amazon Web Services (AWS) — email delivery (SES) for account, notification and newsletter email, and file storage (S3) for app downloads and static files.
  • Cloudflare — the CDN and security layer in front of trainerday.com. Web traffic passes through it, so it processes request metadata such as your IP address and browser user agent and keeps short-term access logs. It also stores our map images and tiles.
  • Sentry — crash and error monitoring. When something breaks, the error report can include your numeric TrainerDay user id and technical detail about what failed.
  • Stripe, Authorize.Net, PayPal, and Apple and Google in-app purchases — payment and subscription processing, depending on how you subscribed. We never receive or store your full card number.
  • Anthropic and OpenAI — only the text needed for an AI feature you use, with no name, email or account id attached. See How we use AI below.

4. Data Storage and Security:
Your account and training data is stored on private servers and managed databases hosted by DigitalOcean, secured by x509 certificates to ensure encrypted and secure transmission of data. This means that all communication between our app and our servers is encrypted, protecting user data from unauthorized access or breaches. Some non-database files — app downloads, static assets and map images — are stored with AWS S3 and Cloudflare, as listed above.

5. Data Retention and Deletion:
We retain personal and sensitive data for as long as you use the app. Upon request or account deletion:

  • All personal data will be permanently deleted from our servers.
  • Any performance metrics or sensitive data associated with your account will also be removed.
  • Anonymous usage data may be retained for internal analysis to improve the app but will not be tied to any individual user.
  • We provide users with full control over their data, including the ability to delete all personal data upon request.

6. Secure Data Handling Procedures:
To ensure that your data is handled securely, we have implemented the following measures:

  • Encryption: All sensitive data is encrypted both in transit.
  • Access Control: Access to stored data is restricted to authorized personnel only.
  • Regular Audits: We conduct periodic audits of our security protocols to ensure compliance with data protection regulations.

Cookies

If you leave a comment on our site, you may opt-in to save your name, email address and website in cookies. These are so you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we create a cookie that has information about your account but not any personally identifiable information about you.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies and screen options cookies last for a year.

We also track anonymous site usage information via standard 3rd-party analytics services.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

How we use AI

A few features send text to an AI provider (Anthropic or OpenAI) to do one small job — turning the goals you type into plan settings, or rewriting a workout in % of FTP. Only the text needed for that job is sent: never your name, email or account id. If you connect TrainerDay to an AI assistant yourself, it receives only the day-level summaries you approve on the connection screen, never original activity data. Its own privacy policy applies from there; disconnect it and that stops. We do not train AI models on your data.

Services you connect

You can connect TrainerDay to other training platforms and devices — Garmin Connect, Strava, TrainingPeaks, Dropbox, MyWhoosh, Fitbit, Apple Health and Google Health Connect among them. These connections only exist if you set them up, and you can disconnect them at any time.

Activity data from those services stays with us. Our APIs and any AI assistant you connect only ever report aggregated metrics from it — never a provider's original activity records — and it is never used to train AI models.

How long do we keep your data?

If you leave a comment, register or create a workout, the data and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information. We also keep all workout and plans you create indefinitely.

What rights you have over your data

If you have an account on this site or have left comments, created a workout, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we must keep for administrative, legal, or security purposes.

Where we send your data

We may check visitor comments through an automated spam detection service.

Your contact information

TrainerDay Inc
2531 Sahalee Drive West
Sammamish, WA 98074
hello@trainerday.com

Addendum — October 9, 2026

AI, vendors and analytics: added How we use AI and Services you connect; replaced the third-party sharing section with the full list of service providers we rely on (DigitalOcean, AWS, Cloudflare, Sentry, payment processors, Anthropic and OpenAI); and removed Mixpanel, which we no longer use — site and app analytics are now self-hosted.

FitScore: removed the December 22, 2025 addendum about FitScore. FitScore never went past testing, so no rider's data was ever used that way.