TrainerDojo

Privacy Policy

Last updated: 18 August 2026

TrainerDojo ("we", "us", "the app") is online-training software used by personal trainers and their clients. This policy explains what personal data we collect, why, how we protect it, and the rights you have over it. We aim to collect only what the service genuinely needs.

Who is responsible for your data

TrainerDojo is operated by Vladimir Lilov, an individual based in Bulgaria (European Union), who is the data controller. For any privacy question or request, contact [email protected].

What we collect

Account information — name, email address, password (stored hashed), role (coach or client), and your coach–client relationships.
Training & health data you enter — workouts, exercises, sets/reps, body weight and measurements, macro and calorie targets, habits, check-ins, and progress photos you choose to upload.
Messages — the content of messages exchanged between coaches and clients within the app.
Payment information — if you subscribe, payments are processed by Stripe. We do not store your card number; we keep a subscription and customer reference from Stripe.
Technical & usage data — basic logs and device/browser information needed to operate, secure, and debug the service, and privacy-friendly, aggregate analytics.

How we use it

To provide the core service: programming, nutrition, check-ins, messaging, progress tracking, and the coach–client connection.
To create and secure your account and authenticate you.
To process subscriptions and send essential service emails (e.g. verification, password reset, invites, important notices).
To maintain, improve, and protect the service against abuse.

Health Connect (Android app)

The TrainerDojo Android app can read your daily step count from Android Health Connect, so the step target in the app fills in automatically instead of you typing it. This is optional: it only happens on Android, only after you tap Connect and grant permission in the Health Connect screen, and you can revoke that permission at any time in Android Settings → Health Connect, or stop using the feature and log steps by hand.

What we read — daily step totals only (android.permission.health.READ_STEPS). We request no other Health Connect data type, and we never write anything back to Health Connect.
How it is used — the daily total is saved to your TrainerDojo account as your step log for that day and shown to you and to your trainer, exactly as a step count you had entered yourself. Nothing else is derived from it.
How long we keep it — with the rest of your training data, for as long as your account exists (see How long we keep it below). Deleting your account deletes it.
What we never do — we do not use Health Connect data for advertising or marketing, we do not sell it, we do not transfer it to data brokers or information-resellers, and we do not share it with any third party beyond the processors listed below, which host the service on our behalf.

Legal bases (GDPR)

Performance of a contract — to deliver the service you sign up for.
Legitimate interests — to keep the service secure, reliable, and improving.
Consent — where required, e.g. optional communications; you can withdraw it at any time.
Legal obligation — e.g. keeping billing records where the law requires.

Service providers (processors)

We share data only with providers that help us run the service, under appropriate safeguards, and never sell your data:

Cloudflare — hosting, database, and file/photo storage.
Stripe — payment processing for subscriptions.
Brevo — transactional email delivery.

International transfers

Some providers may process data outside the European Economic Area. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your personal data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records (e.g. billing) to meet legal obligations.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. You can exercise these rights — including account deletion — from within the app or by emailing [email protected]. You also have the right to lodge a complaint with your local supervisory authority; in Bulgaria this is the Commission for Personal Data Protection (КЗЛД, cpdp.bg).

Security

We protect your data with encryption in transit, hashed passwords, and access controls. No system is perfectly secure, but we work to keep your information safe and to notify you of any breach affecting your rights as required by law.

Cookies & local storage

We use cookies and browser storage that are necessary to sign you in and keep the app working (for example, your session). We do not use them for third-party advertising.

Children

TrainerDojo is not directed to children. You must be at least 16 years old (or the age required in your country) to use the service.

Changes to this policy

We may update this policy from time to time. We will change the "last updated" date above and, for significant changes, give notice within the app or by email.

Contact

Questions or requests: [email protected].

← Back to TrainerDojo