Privacy Policy

Effective Date: February 1, 2026 | Last Updated: February 4, 2026

This Privacy Policy describes how Your IT On Call LLC (“we,” “us,” “our,” or “Track and Train”) collects, uses, shares, and protects personal information when you use the Track & Train mobile application (the “App”) and our website at trackandtrain.app (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, mobile phone number, date of birth, profile photo
• Fitness Data: Height, weight, body measurements, fitness goals, workout history, exercise logs, progress photos
• Training Relationship: Trainer name, training plan details, session schedules, check-in responses
• Communications: Messages exchanged with your trainer, support requests, feedback

1.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Usage Data: App features accessed, session duration, interaction with notifications, login timestamps

1.3 Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality, analyze traffic (via Google Analytics or similar), and remember your preferences. You can control cookies through your browser settings.

2. How We Use Your Information

We use your personal information to:

• Provide and maintain the Services (account management, trainer-client connectivity, workout tracking)
• Send service notifications via push, email, and SMS (if opted in): invitations, appointment reminders, training plan updates
• Facilitate communication between trainers and clients
• Improve and personalize the App experience
• Analyze usage trends and troubleshoot technical issues
• Comply with legal obligations and enforce our Terms of Service
• Respond to support requests and feedback

We do not use your fitness data or SMS opt-in for marketing purposes without your separate consent.

3. How We Share Your Information

We do not sell your personal information. We share data only as follows:

3.1 With Your Trainer

Your trainer can view the fitness data, workout logs, progress photos, and messages you share within the App.

3.2 Service Providers

We use third-party service providers to operate the Services:

• Firebase (Google Cloud): Backend infrastructure, authentication, database hosting
• Twilio: SMS delivery (phone number shared only when you opt in to SMS)
• Expo Push Notifications: Push notification delivery
• Netlify: Website hosting
• Analytics providers: Usage analytics (anonymized where possible)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

3.3 Legal Requirements

We may disclose information if required by law, legal process, or government request, or to protect our rights, safety, or property.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. If you or your trainer deletes your account, we will delete or anonymize your data within 90 days, except for records we must retain for legal, tax, or audit purposes (typically up to 7 years).

You may request deletion of your data at any time by contacting us at [email protected].

5. Your Privacy Rights

Depending on your location, you may have the following rights:

5.1 Access and Portability (GDPR, CCPA)

You can request a copy of your personal data in a portable format.

5.2 Correction

You can update or correct your account information within the App (Settings → Profile).

5.3 Deletion

You can request deletion of your account and personal data.

5.4 Opt-Out of SMS

You can disable SMS at any time (Settings → Notification Preferences or reply STOP).

5.5 Do Not Sell My Personal Information (CCPA)

We do not sell personal information.

To exercise your rights, contact us at [email protected] or (919) 217-4927. We will respond within 30-45 days as required by applicable law.

6. Children's Privacy (COPPA)

The Services are not intended for children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately at [email protected] and we will delete it.

Trainers may not invite clients under 13 (or 16 in the EU) without verifiable parental consent.

7. Data Security

We use industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/SSL) and at rest (Firebase encryption)
• Access controls and authentication (Firebase Auth)
• Regular security audits and monitoring

However, no method of transmission over the Internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

8. International Data Transfers

Your information may be stored and processed in the United States or other countries where our service providers operate. By using the Services, you consent to the transfer of your data to these jurisdictions. We take steps to ensure adequate protection under applicable laws (e.g., GDPR Standard Contractual Clauses).

9. SMS Privacy (TCPA/CTIA Compliance)

See our dedicated SMS Privacy Policy for details on SMS opt-in, opt-out, and data handling.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Material changes will be communicated via email or in-app notification. Your continued use of the Services after changes are posted constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us: