Privacy Policy

Effective Date: July 6, 2026 | Last Updated: July 6, 2026

This Privacy Policy describes how Your IT On Call LLC (“we,” “us,” “our,” or “Track and Train”) collects, uses, shares, and protects personal information when you use the Track & Train mobile application (the “App”) and our website at trackandtrain.app (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, mobile phone number, date of birth, profile photo
• Fitness Data: Height, weight, body measurements, fitness goals, workout history, exercise logs, progress photos
• Training Relationship: Trainer name, training plan details, session schedules, check-in responses
• Communications: Messages exchanged with your trainer, support requests, feedback

1.2 Health and Fitness Data from Apple Health and Health Connect

With your explicit, per-data-type permission, the App can read from and write to Apple Health (HealthKit) on iOS and Health Connect on Android. We only request access to the specific data types needed to power features you use. We request access to the following categories:

Data we may READ (with your permission):

• Steps and walking/running distance
• Active energy / calories burned
• Workouts and exercise sessions (activity type, duration, intensity)
• Heart rate and resting heart rate
• Height, body weight, and body fat percentage
• Sleep analysis

Data we may WRITE (with your permission):

• Workouts and exercise sessions you log or complete in the App
• Body weight and body measurements you enter in the App

You grant and revoke this access per data type through your device's operating system:

• iOS: Settings → Health → Data Access & Devices → Track & Train
• Android: Health Connect → App permissions → Track & Train

Denying or revoking a permission disables only the App feature that relies on it; the rest of the App continues to work.

1.3 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Usage Data: App features accessed, session duration, interaction with notifications, login timestamps

1.4 Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve functionality, analyze traffic (via Google Analytics or similar), and remember your preferences. You can control cookies through your browser settings. We do not use any cookies or tracking technologies on health or fitness data.

2. How We Use Your Information

We use your personal information to:

• Provide and maintain the Services (account management, trainer-client connectivity, workout tracking)
• Read and sync your health and fitness data from Apple Health / Health Connect to display progress, personalize training, and inform your trainer's coaching
• Write workouts and measurements you record back to Apple Health / Health Connect (when you enable this)
• Send service notifications via push, email, and SMS (if opted in): invitations, appointment reminders, training plan updates
• Facilitate communication between trainers and clients
• Improve and personalize the App experience
• Analyze usage trends and troubleshoot technical issues
• Comply with legal obligations and enforce our Terms of Service
• Respond to support requests and feedback

We do not use your health, fitness, or SMS opt-in data for marketing or advertising purposes. We do not use health and fitness data for any purpose other than providing and improving the health and fitness features you use.

3. How We Share Your Information

We do not sell your personal information, and we do not sell or rent health and fitness data under any circumstances. We share data only as follows:

3.1 With Your Trainer

Your trainer can view the fitness data, workout logs, progress photos, health metrics you have chosen to share, and messages you share within the App. You control which data is shared with your trainer.

3.2 Service Providers

We use third-party service providers to operate the Services:

• Firebase (Google Cloud): Backend infrastructure, authentication, database hosting
• Twilio: SMS delivery (phone number shared only when you opt in to SMS)
• Expo Push Notifications: Push notification delivery
• Netlify: Website hosting
• Analytics providers: Usage analytics (anonymized where possible; health and fitness data is never sent to analytics providers)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

3.3 Legal Requirements

We may disclose information if required by law, legal process, or government request, or to protect our rights, safety, or property.

4. Apple Health and Google Health Connect: Limited Use Commitments

Health and fitness data obtained through Apple HealthKit or Android Health Connect is subject to the following commitments, in addition to everything else in this policy. We will never:

• Use it for advertising, marketing, or any use-based data mining
• Sell, rent, or license it to any third party, data broker, or advertising network
• Use it to determine eligibility for employment, insurance, credit, or any similar decision
• Share it for unauthorized social sharing or any purpose you have not consented to
• Transfer it to third parties except as required to provide the Services (Section 3.2), to your trainer at your direction (Section 3.1), or as legally required (Section 3.3)

iCloud restriction (Apple): In compliance with Apple's requirements, we do not store any personal health information collected from HealthKit in Apple iCloud. Health data synced to our backend is stored in our secured Firebase (Google Cloud) infrastructure, not in iCloud.

Data accuracy: We do not write false or inaccurate data into Apple Health or Health Connect. We only write data that you have logged or entered.

On-device vs. backend: Health data read from Apple Health / Health Connect is processed on your device and synced to our Firebase backend only to the extent needed to display your history, personalize your program, and share with your trainer at your direction. It is encrypted in transit and at rest.

5. Not a Medical Device

Track & Train is a fitness tracking and coaching app. It is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease or health condition. The information provided by the App is for general fitness and wellness purposes only and is not a substitute for professional medical advice. Always consult a qualified healthcare provider before beginning any exercise or nutrition program. Do not use the App to make medical decisions.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. If you or your trainer deletes your account, we will delete or anonymize your data within 90 days, except for records we must retain for legal, tax, or audit purposes (typically up to 7 years).

Health and fitness data: Health and fitness data synced from Apple Health / Health Connect is retained only while your account is active and you have the relevant feature enabled. When you disable a health permission, delete the associated data in the App, or delete your account, the corresponding health data is deleted from our systems within 90 days. Deleting your account also stops all further reading and writing of Apple Health / Health Connect data. Revoking a permission at the OS level immediately stops new data collection for that type.

You may request deletion of your data at any time by contacting us at [email protected].

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability (GDPR, CCPA)

You can request a copy of your personal data, including health and fitness data, in a portable format.

7.2 Correction

You can update or correct your account information within the App (Settings → Profile).

7.3 Deletion

You can request deletion of your account and personal data, including all health and fitness data.

7.4 Health Data Permissions

You can grant or revoke access to individual health data types at any time through your device (iOS: Settings → Health → Data Access & Devices; Android: Health Connect → App permissions).

7.5 Opt-Out of SMS

You can disable SMS at any time (Settings → Notification Preferences or reply STOP).

7.6 Do Not Sell or Share My Personal Information (CCPA)

We do not sell or share personal information, including health data.

To exercise your rights, contact us at [email protected] or (919) 217-4927. We will respond within 30-45 days as required by applicable law.

8. Children's Privacy (COPPA)

The Services are not intended for children under 13 (or under 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately at [email protected] and we will delete it.

Trainers may not invite clients under 13 (or 16 in the EU) without verifiable parental consent. We do not collect or process a minor's health data without verifiable parental or guardian consent.

9. Data Security

We use industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/SSL) and at rest (Firebase encryption)
• Access controls and authentication (Firebase Auth)
• Health data isolation and least-privilege access controls
• Regular security audits and monitoring

However, no method of transmission over the Internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

10. International Data Transfers

Your information may be stored and processed in the United States or other countries where our service providers operate. By using the Services, you consent to the transfer of your data to these jurisdictions. We take steps to ensure adequate protection under applicable laws (e.g., GDPR Standard Contractual Clauses).

11. SMS Privacy (TCPA/CTIA Compliance)

See our dedicated SMS Privacy Policy for details on SMS opt-in, opt-out, and data handling.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Material changes will be communicated via email or in-app notification. Your continued use of the Services after changes are posted constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us: