Privacy Policy

TrainX holds the things you put into it: your account, your goal, your workouts, your meal photos, your messages with your coach, and your progress numbers. We do not sell any of it and we do not use it to advertise to you. Your coach sees what you share with your coach. Nobody else does.

You can delete your account, and everything in it, from Preferences on this site at any time.

TrainX is a fitness coaching app operated by Axilerate Technologies, Mahadevapura, Bangalore, India. For anything in this policy, write to hello@trainxapp.com.

• Account details — your email address, your name, your password (stored only as a cryptographic hash, never in readable form), and whether you signed up as a trainee or a coach.
• Profile details — anything you choose to add: a photo, a bio, specialties and years of experience if you coach, and your height and starting weight if you train.
• Training data — your fitness goal, the days you train, the workout plans assigned to you, session attendance, and the progress entries you record such as weight and measurements.
• Meals — the meals you log and the photos you take of them, along with whether your coach approved them.
• Messages — the chat between you and your coach, stored so that both of you can read it later.
• Points — the points you earn and what earned them.
• Subscription state — whether your account is on the free or paid plan, and when the paid period ends. Card and UPI details are never seen or stored by us; they go to the payment provider directly.
• Device notification token — if you allow push notifications, so a reminder can reach your phone.

We do not collect location, contacts, health-app data, or anything from other apps on your device. TrainX has no advertising or analytics trackers.

• To run the service you asked for: showing you today’s plan, delivering your messages, and keeping your history.
• To let your coach do their job — see your goal, assign your plan, and approve your meals.
• To keep your account secure and to know which plan you are on.
• To send the reminders you turned on. You can turn them off at any time.
• To meet legal and tax obligations on payments.

Under India's Digital Personal Data Protection Act, 2023, our basis for holding this data is the consent you give when you create an account and when you turn on an optional feature such as notifications. You can withdraw that consent by turning the feature off or by deleting your account.

Your coach. If you connect to a coach, that coach sees your name, photo, goal, training days, assigned plans, meal logs and photos, attendance, progress entries and your messages with them. They see nothing about your conversations with any other coach. If you disconnect from a coach, they lose access.

X-Guru. X-Guru is an automated coach built into TrainX, not a person and not an AI service. It builds plans from a fixed library using your goal, your training days and your food preference. Nothing you log is sent outside TrainX to produce them.

Our service providers. A small number, each handling one job:

• Supabase — the database, authentication and photo storage behind TrainX.
• Expo — delivery of push notifications to your device.
• Razorpay — payment processing for subscriptions. They receive your payment details; we receive only the result.
• Apple and Google — if you install the app from their stores.

We do not sell personal data, and we do not share it with advertisers or data brokers. We disclose data to authorities only where the law requires it.

Data is stored on Supabase infrastructure in the region configured for our project, which may be outside India. It is transmitted over encrypted connections and protected at rest by the provider.

• Every request is checked by row-level security rules in the database itself, not just in the app. A trainee can read only their own rows; a coach can read only rows belonging to clients linked to them.
• Passwords are hashed by Supabase Auth and are never visible to us.
• Entitlements such as your paid plan are written only by our billing webhook and cannot be granted from a phone or a browser.
• All traffic between your device and our servers uses TLS.

No system is perfect. If a breach affects your data we will notify you and the Data Protection Board of India as the law requires.

For as long as your account exists. When you delete your account, your profile, plans, meal logs and photos, messages, points and progress entries are deleted with it. Records we are required to keep for tax or accounting purposes — invoices, for instance — are retained for the period the law specifies and nothing more.

Backups roll off on their own schedule, so a copy may persist in an encrypted backup for up to 30 days after deletion.

• See it — ask us for a copy of everything TrainX holds about you.
• Correct it — edit your profile in the app or in Preferences here.
• Delete it — Preferences → Close your account. It is immediate and cannot be undone.
• Withdraw consent — turn off notifications, disconnect from a coach, or delete your account.
• Nominate someone — under the DPDP Act you may nominate a person to exercise these rights if you die or become incapacitated. Write to us to do so.
• Complain — to our grievance officer below, and to the Data Protection Board of India if we do not resolve it.

TrainX is not for anyone under 18. We do not knowingly create accounts for children. If you believe a child has an account, write to us and we will remove it.

Emmanuel M Shine
hello@trainxapp.com
Mahadevapura, Bangalore, India

We reply to grievances within 30 days.

If this policy changes in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top always shows the current version.