sTrain Privacy Policy

If you connect a sapplify Account

If you connect a sapplify Account to sTrain, the sapplify Account Privacy Policy and sapplify Account Terms of Service additionally apply to account-related features, including sign-in, your profile, account-level Pro entitlement and cross-device sync.

1. Introduction

In short: sTrain is local-first. Your workout log stays on your device by default. We do not show ads, sell your data or use third-party analytics SDKs. The app sends limited first-party usage analytics, and it sends feedback only when you choose to submit it. If you connect a sapplify Account and enable sapplify Sync, your workout data is also copied to our servers.

This Privacy Policy explains how the sTrain mobile application ("sTrain", "the App") handles information. By using sTrain, you acknowledge that you have read and understood this policy.

Data Controller

Anthony Eli Rasch - sapplify
PO Box 004
91501 Nove Mesto nad Vahom
Slovakia
ICO: 56665032

Email: contact@sapplify.com
Privacy inquiries: privacy@sapplify.com

Data Protection Officer

sapplify operates at a scale that does not require a Data Protection Officer under Article 37 GDPR. Send data-protection inquiries to privacy@sapplify.com.

2. Definitions

Personal Data: Information relating to an identified or identifiable person, including identifiers that can distinguish one installation or account from another.
Workout Data: Training plans, sessions, exercises, sets, repetitions, weights, durations, distances, notes and statistics you create in sTrain.
Device Identifier: A random identifier generated by the App for first-party usage analytics. It is not derived from hardware or an advertising identifier.
Local Storage: Data stored on your device.
sapplify Account: An optional identity used across sapplify apps.
sapplify Sync: An optional feature that copies App data between your devices through our servers.

3. Data Collection

Workout data you enter

sTrain stores training programs, exercises, workout sessions, sets, repetitions, weights, durations, distances, notes and generated statistics locally on your device. We do not receive this workout data unless you enable sapplify Sync.

Settings and local records

The App stores preferences such as theme, language, units, timer and keep-awake settings, onboarding state, legal acceptance and local Pro status.

Usage analytics and error reports

sTrain sends first-party analytics to our servers in Ireland: App identifier and version, platform, a randomly generated device identifier, session identifier, event names and event values. While signed in, your account identifier may be attached. Unhandled errors may be reported with technical context needed to diagnose them. We use no third-party analytics SDK and send nothing to advertising networks. Analytics rows leave the live database after 30 days for a statistical archive with the account identifier removed.

Optional feedback

If you submit feedback, we receive your message and category, App version, device model, operating-system version, locale and any email address you optionally provide.

Account and Sync

If you sign in or enable Sync, the account and synced workout data described in the sapplify Account Privacy Policy is processed on our servers.

What we do not collect

Advertising identifiers or cross-app tracking data
GPS location
Contacts, calls or messages
Camera, microphone or biometric data
Payment-card details
Data for advertising or sale to data brokers

4. Legal Basis for Processing

Local workout data is processed at your direction to provide the App. For server-side processing, we rely on:

Contract performance (Article 6(1)(b) GDPR): account sign-in, Sync and Pro entitlement.
Legitimate interests (Article 6(1)(f) GDPR): limited first-party analytics, error diagnosis, fraud prevention and responding to feedback. Our interest is maintaining and improving the App without advertising or behavioural profiling.
Consent (Article 6(1)(a) GDPR): where we specifically ask for it, including information you voluntarily include in feedback.
Legal obligation (Article 6(1)(c) GDPR): when applicable law requires processing.

You may object to processing based on legitimate interests by contacting privacy@sapplify.com.

5. Workout Processing

Statistics, streaks, personal records, progress charts and activity-calendar totals are calculated on your device from the workout data you entered. sTrain does not use machine learning, make automated decisions with legal or similarly significant effects, or send your workout data elsewhere for analysis.

6. Data Transmission

sapplify Sync

Only after you sign in and enable Sync, sTrain copies your workout data to our servers so it can reach your other devices. The sapplify Account Privacy Policy describes server location, security, retention and deletion.

First-party analytics and errors

The limited technical and usage information described in Section 3 is transmitted to our servers over HTTPS/TLS.

Feedback

Feedback is transmitted only when you submit it. If you submit while offline, it may be queued locally and sent when connectivity returns.

Purchases and external links

The App communicates with the applicable app store to offer or verify Pro and may open sapplify web pages in your browser.

7. App Permissions

Internet: account sign-in, Sync, analytics, feedback, purchases, update checks and external links.
Documents or storage: only when you choose to import, export, back up or share workout files. Older Android versions may expose this as a storage permission.
Wake lock: optionally keeps the screen awake during a workout.

sTrain does not require location, contacts, phone, SMS, camera, microphone or media-library access for its core operation.

8. Purchases & Payments

sTrain Pro is offered as a one-time in-app purchase. Apple App Store, Google Play or Huawei AppGallery processes the transaction and may provide us with a purchase token or entitlement status so the App can unlock and restore Pro. We do not receive or store your payment-card details. The store provider handles payment information under its own privacy policy.

10. Third-Party Services

sTrain uses or links to services with their own privacy policies:

Apple, Google and Huawei: App distribution, purchases, restoration, updates and applicable sign-in.
Supabase: infrastructure used for account, Sync, analytics and feedback services, hosted in the European Union.

Review the relevant provider policies: Apple, Google, Huawei, and Supabase.

11. Data Security

Local data is protected by your operating system and App sandbox. Network traffic uses HTTPS/TLS, and server data is protected by access controls and encryption in transit and at rest. No system is perfectly secure. Protect your device and exported files, and keep the App and operating system updated.

12. Data Retention & Deletion

Local workout data: remains until you delete it in the App or uninstall the App.
Synced data and account records: follow the retention and deletion rules in the sapplify Account Privacy Policy. Deleting your sapplify Account removes server-side account data across sapplify apps.
Analytics: live rows are retained for 30 days, then archived statistically with account identifiers removed.
Feedback: retained as needed to respond, investigate and maintain a record of the issue.
Purchase records: the store provider retains transaction records under its own policy; we retain only entitlement information needed to provide Pro.

Exported files are outside the App and must be deleted separately.

13. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, port or object to processing of personal data, withdraw consent, and complain to a supervisory authority. You can view, edit, export and delete local workout data inside sTrain. Account and synced data can be managed through the account controls described in the sapplify Account Privacy Policy. Contact privacy@sapplify.com for other requests. We may need to verify your identity.

14. Children's Privacy

sTrain is not directed to children under 13. We do not knowingly create accounts for or collect personal data from children below the applicable digital-consent age without valid authorization. If you believe a child supplied personal data, contact privacy@sapplify.com.

15. International Users

Our server infrastructure is hosted in Ireland in the European Union. App-store, authentication or device-platform providers may process information in other countries under their own policies and safeguards. Users outside the EEA should understand that information described in this policy may be processed in the EU.

16. Data Breach Notification

If a personal-data breach affecting our systems is likely to risk your rights and freedoms, we will notify the competent authority and affected users where required by law. Local-only workout data that never reached our systems cannot be part of a breach of our servers.

17. Changes to This Privacy Policy

We may update this policy when the App, our services or legal requirements change. We will update the dates above and may provide an in-app notice or require renewed acknowledgement for material changes. The English version is authoritative.

18. Governing Law

This policy is governed by the laws of the Slovak Republic and applicable European Union data-protection law. You may lodge a complaint with the Slovak data-protection authority (Urad na ochranu osobnych udajov Slovenskej republiky) or the supervisory authority where you live.

19. Contact Us

For questions, concerns or requests about this Privacy Policy or sTrain: