Privacy Policy

1. Introduction

TRN (Training Notation) is a fitness tracking app that lets you import, track, and export workout programs using the open .trn format. This policy explains what data we collect, why, and how we handle it.

2. Data Controller

Viktor Dedek, Prague, Czech Republic.

For privacy questions, contact privacy@trn.fitness

3. Data We Collect

On-device data

Your workout logs, exercises, programs, and settings are stored locally on your device in an SQLite database. We never access, transmit, or store this data on our servers. It stays on your phone.

Crash reports (Sentry)

When the app crashes, we collect a crash report via Sentry. This includes the crash stacktrace, device model, and OS version. No personal information is included. IP addresses are stripped.

Anonymous usage analytics (PostHog)

We collect anonymous usage events (e.g. "a workout was started", "a program was imported") via PostHog hosted in the EU. Events contain no personal data — only event names, generic properties (like exercise count), and a random anonymous ID.

4. What We Don't Collect

We do not collect your name, email address, photos, location data, contacts, health data, or any other personally identifiable information. There are no user accounts, no login, and no tracking across apps.

5. Purpose

• App stability — Crash reports help us find and fix bugs.
• Product improvement — Anonymous usage patterns help us understand which features are used and where people get stuck.

6. Legal Basis

We process crash reports and anonymous analytics under legitimate interest (GDPR Art. 6(1)(f)). We have a legitimate interest in maintaining app stability and understanding usage patterns. The data collected is minimal, anonymous, and poses negligible risk to your rights.

7. Third Parties

8. Data Retention

• Crash reports are retained for 30 days (Sentry).
• Analytics data is retained for 1 year (PostHog).
• On-device data is kept until you delete it or uninstall the app.

9. Your Rights

Under GDPR (Articles 15–22), you have the right to:

• Access the data we hold about you
• Request erasure of your data
• Request data portability
• Object to processing
• Lodge a complaint with the Czech supervisory authority (UOOU — Urad pro ochranu osobnich udaju)

Since we don't collect personal data, there is typically nothing to provide or delete. If you believe otherwise, contact privacy@trn.fitness.

10. Security

All data transmitted to Sentry and PostHog is encrypted in transit (HTTPS/TLS). On-device workout data is stored in a standard SQLite database and is not encrypted at rest.

11. International Transfers

Sentry may process crash data in the US under standard contractual clauses. PostHog analytics data is hosted in the EU and does not leave the EU.

12. Children

TRN is not directed at children under 13 (or 16 in certain EU member states). We do not knowingly collect data from children.

13. Changes to This Policy

We may update this policy from time to time. Changes will be reflected on this page with an updated date at the top. We recommend checking back occasionally.

14. Contact

For any privacy-related questions, reach out at privacy@trn.fitness