Privacy Policy

1. What we collect

• Account details: first name, email address, password (hashed, never stored in readable form), timezone, unit preferences.
• Training setup: your goal, experience level, training location, available equipment, weekly availability and preferred coaching tone.
• Health-related information you choose to give: injuries and physical limitations, body measurements such as weight or waist, and how sessions felt. You decide what to enter. You can use the product without entering measurements.
• Training activity: plans, workouts, exercises, sets, reps, weights, timestamps and schedule.
• Conversations with Rex: the messages you exchange, plus durable notes Rex keeps about your preferences and constraints so you do not have to repeat them.
• Technical data: IP address, browser and device information, and usage events, for security and to understand how the product is used.
• Billing data: handled by Stripe. We store a customer reference and subscription status. We never see or store your card number.

2. Why we use it

• To build and adjust your training plans and give you coaching feedback.
• To show your history, progress and statistics.
• To send reminders, session follow-ups, weekly recaps and account emails.
• To take payment and manage your subscription.
• To keep the service secure, debug problems and improve the product.

Where the law requires a legal basis: we process your data to perform our contract with you, on the basis of your consent for health-related details and optional channels such as Telegram, and on the basis of our legitimate interest in keeping the service secure and functional. You can withdraw consent at any time.

3. AI processing

Rex is powered by a large language model provided by OpenAI. To generate a reply, a plan or a review, we send the relevant parts of your training data and your messages to OpenAI for processing.

• This can include injuries and body measurements you have entered, because that is what makes the coaching useful.
• We use OpenAI's API, under terms that do not permit your data to be used to train their public models.
• We do not sell your data, and we do not use it to build advertising profiles.
• If you would rather no health details were processed this way, do not enter them. The tracker still works.

4. Who else processes your data

• OpenAI: AI coaching features.
• Stripe: payments and subscription billing.
• Telegram: only if you connect it. Messages you exchange with Rex there also pass through Telegram, under their privacy policy.
• Acumbamail: sending transactional email.
• Cloudflare R2: storage for media and assets.
• Sentry: error monitoring. Payloads are scrubbed of secrets.
• Crisp: support chat, if you use it.
• Google Tag Manager: product analytics.

Some of these providers are outside your country, including in the United States. Transfers rely on the providers' standard contractual clauses.

5. How long we keep it

• Your account and training data are kept while your account exists, including after a trial or subscription ends, so your history is still there if you come back.
• Conversation history with Rex is summarised over time and older raw messages are pruned.
• When you delete your account we delete your personal data, except records we must keep for legal or accounting reasons, such as invoices.

6. Your rights

You can ask us to:

• give you a copy of your data;
• correct anything inaccurate;
• delete your account and data;
• restrict or object to certain processing;
• withdraw consent, for example by disconnecting Telegram or removing your measurements.

Email [email protected] and we will action it. You also have the right to complain to your local data protection authority.

7. Security

Traffic is encrypted in transit. Passwords are stored hashed. Access to production data is limited to what is needed to operate the service. No system is perfectly secure, so please use a strong, unique password.

8. Children

Trainer Rex is for adults. We do not knowingly collect data from anyone under 18.

9. Changes

If we change this policy in a way that materially affects you, we will tell you by email or in the app before it takes effect.

10. Contact

Privacy questions: [email protected]