Privacy Policy
This Policy describes the privacy practices of the Training R service (“Training R”, “we”, “us”): what information we use to operate the platform, how we use it, which technical providers support the service and what controls are available to people who use Training R.
Last updated: August 26, 2026.
1. Scope
This Policy applies to the Training R public website, private member area, administration panel and features related to the delivery of the personalized training service.
Third-party websites and services accessed from Training R —for example, the authentication provider or WhatsApp— have their own privacy practices and policies.
2. Information Training R uses
Account and identity information
- Name and email address.
- Account identifier generated through the authentication system.
- Role, account status, plan or membership status and language preference.
Training R does not receive or store your sign-in password. Authentication is handled by Auth0 by Okta.
Programming and training information
- Training level, usual training days, rest preference and programming settings.
- Programs, weeks, days, exercises, sets, repetitions, RIR, prescribed loads and programming notes.
- Training records: load used, repetitions completed, completed or incomplete sets, clusters, rest periods, duration and session status.
- Performance history and body-weight records that the member chooses to enter.
- Goals and other context added to personalize programming.
Technical and security information
- Session identifiers, access and activity timestamps, and technical hashes used for security.
- Audit records of administrative actions and use of the “View as client” feature.
- Technical connection information that infrastructure providers may process to deliver and protect the service.
Communications
If a person contacts Training R through WhatsApp or another external channel, Training R receives the information that person chooses to send through that channel. Transmission and processing within that service are also subject to the provider's own practices.
Payments
The current Training R platform does not store card numbers, bank credentials or complete payment-method information. If an external payment provider is used, that provider processes the information needed for the transaction under its own terms and privacy policy.
3. How we obtain information
Information may be provided directly by the member, entered by a Training R professional or administrator to configure the service, generated through use of the private area, or received from the authentication provider during sign-in.
4. How we use information
- Create and administer accounts and memberships.
- Authenticate users and maintain secure sessions.
- Create, adapt and display training programs.
- Record sessions, loads, repetitions, rest periods, body weight and progress history.
- Allow the Training R team to manage programs and provide follow-up.
- Respond to questions and provide support.
- Prevent unauthorized access, investigate errors and protect the platform.
- Maintain and improve service operation.
We do not sell or rent personal information. The current version of Training R also does not use training information for behavioral advertising and does not include advertising-tracking tools.
5. Service providers and third parties
Training R uses specialized providers to operate parts of the platform. Information is limited to what is needed for the function each provider performs.
- Cloudflare: web infrastructure, function execution, D1 database, R2 storage, content delivery and network security. Cloudflare Privacy Policy.
- Auth0 by Okta: user authentication and identity. Okta Privacy Policy.
- WhatsApp: external contact channel opened only when the person chooses to use it. WhatsApp Privacy Policy.
Infrastructure providers may operate systems in different locations. As a result, delivering the service may involve technical processing of information outside the country from which a user accesses Training R.
6. Cookies and necessary technologies
Training R uses cookies and equivalent mechanisms that are necessary for authentication, security and session continuity. We currently do not set our own advertising analytics, remarketing or ad-personalization cookies.
| Cookie | Purpose | Approximate duration |
|---|---|---|
tr_session | Keep the member or administrator authenticated. | Up to 7 days. |
tr_impersonation | Temporarily allow an authorized administrator to use “View as client”. | Up to 4 hours. |
During sign-in, Auth0 may use its own cookies on its domain to complete authentication and apply its security controls.
If Training R later adds analytics, advertising or other non-essential technologies, this Policy and the relevant controls must be updated before those technologies are activated.
7. Security
Training R applies technical measures intended to limit access to information and reduce the risk of unauthorized use. These include role-based access control, sessions using random tokens stored as hashes on the server, production session cookies configured as HttpOnly, Secure and SameSite=Lax, audit records for administrative actions, and private access to exercise media.
No Internet-connected system can guarantee absolute security. Measures are therefore reviewed and adjusted as the service evolves.
8. Retention
We retain account, programming and training-history information while it is needed to provide the service and maintain the records used by the member and Training R team for follow-up. Information may be retained longer where needed for security, auditing, incident resolution or operational continuity.
Access sessions and other technical records have their own lifecycles and may expire or be deleted before training history.
9. User controls
Certain preferences can be changed in the private area, including language, usual training days and rest settings. To request access to account information, correction of data, account closure or deletion of information that cannot be managed directly through the platform, users can contact Training R through the channels published on the website.
10. Training information and external communications
Training R is a training platform, not a medical record or diagnostic system. If a person chooses to communicate injury history or other information relevant to adapting training, we recommend limiting it to what is necessary for that purpose and using the channels agreed with the professional.
Videos, messages or files voluntarily sent through WhatsApp are not automatically uploaded to the Training R platform; they also remain subject to the operation and policies of that external service.
11. Changes to this Policy
We may update this Policy when Training R features, providers or internal practices change. The current version will be published on this page together with its update date.
12. Contact
For questions related to privacy, account information or use of the platform, contact Training R through the channels published on the website.