Privacy Policy

This Privacy Policy explains what TrackYourRecord collects, why it is collected, how it is used, and how it is protected.

TrackYourRecord is designed for personal strength-training data, coach review, and temporary video feedback. Privacy and access control are core parts of the Service.

Information we collect

TrackYourRecord may collect and process the following types of information:

• Account data: email address, display name, login details, account status, role, and plan status.
• Profile data: optional information such as age, sex, bodyweight, training experience, preferred units, training frequency, and settings.
• Training data: workouts, exercises, sets, reps, weights, bodyweight logs, PRs, notes, recommendations, and progress data.
• Coach connection data: coach invitations, accepted coach relationships, access status, consent records, revocation records, and related timestamps.
• Coach feedback: written feedback submitted by a connected coach.
• Videos: short technique videos uploaded by trainees for coach review.
• Operational and security logs: audit events such as login-related events, coach invitations, video uploads, signed URL requests, feedback submission, video deletion, permission changes, and other system events needed for security and support.
• Technical data: device/browser information, app usage events, error logs, and basic diagnostic information needed to operate and secure the Service.

Why we collect this information

We use this information to:

• Create and manage user accounts.
• Allow trainees to log workouts and track progress.
• Provide plan-based access to features.
• Allow a trainee to connect with a coach.
• Allow a connected coach to view permitted trainee data and provide feedback.
• Store and process temporary training videos for coach review.
• Protect the Service from misuse, unauthorized access, and security incidents.
• Debug problems and improve reliability.
• Maintain audit records for security, support, and abuse prevention.

TrackYourRecord does not sell your personal data.

Who can see your information

Access depends on your role, plan, and permissions:

• You can see your own account, training data, videos, notes, feedback, and settings.
• A connected coach can see trainee data that is made available through TrackYourRecord while the coach connection is active. This may include profile information, workout history, progress data, bodyweight logs, PRs, recommendations, notes, active videos, and feedback history.
• If you revoke coach access, that coach should no longer be able to access your current data through TrackYourRecord, subject to normal technical processing time.
• TrackYourRecord admins may access account data, plan status, coach connection metadata, video metadata, audit logs, and other operational information for support, abuse prevention, and system administration.
• TrackYourRecord admins do not have normal playback access to private training videos unless specifically required for technical support or legal/security reasons.

Training videos

Training videos are temporary review assets. They are not intended for permanent storage.

Videos are stored in a private storage bucket and are accessed through short-lived signed URLs. Public video URLs are not used.

Video retention rules:

• If a video is uploaded and not reviewed by a coach, it is scheduled for deletion after 7 days.
• If a coach submits feedback, the trainee can review the feedback and video, then manually delete the video.
• If the trainee does not delete the reviewed video manually, it is scheduled for deletion 3 days after coach review.
• After deletion, the actual video file is removed from storage.
• Video metadata and coach feedback may remain for training history, audit, support, and security purposes.

See the Video Deletion Policy for more details.

Coach access and consent

A coach can access trainee data only after the trainee invites the coach and grants permission through TrackYourRecord.

By connecting a coach, the trainee authorizes TrackYourRecord to make relevant training data available to that coach while the connection is active.

The trainee may revoke coach access at any time. Revocation prevents future access through TrackYourRecord, but it cannot control any information the coach may have already seen, remembered, or separately recorded outside the Service.

Legal basis and consent

Where applicable, TrackYourRecord processes personal information based on one or more of the following:

• The need to provide the Service requested by the user.
• The user's consent, including coach access consent and video review consent.
• Legitimate operational and security interests, such as fraud prevention, debugging, and audit logging.
• Legal obligations where applicable.

Security

TrackYourRecord uses technical and organizational measures intended to protect user data, including:

• Supabase authentication.
• Row-level security on user data tables.
• Role-based access controls.
• Private storage for videos.
• Short-lived signed URLs for private video playback.
• Server-side authorization checks.
• Audited server functions for sensitive actions.
• Restricted access to administrative tools.

No system can guarantee absolute security. Users are responsible for keeping their login credentials secure.

Data retention

Training data is generally retained while the account remains active, unless deleted or modified through available account features.

Videos are retained only during the temporary review window described above and in the Video Deletion Policy.

Audit logs and operational records may be retained for longer periods where needed for security, abuse prevention, legal compliance, debugging, or support.

If an account deletion request is approved, TrackYourRecord will delete or anonymize personal data where reasonably possible, subject to technical, legal, security, and audit-log retention requirements.

Your choices and rights

Depending on your location and applicable law, you may have rights to:

• Access your personal data.
• Correct inaccurate profile information.
• Delete certain information.
• Revoke coach access.
• Delete uploaded videos according to the video deletion flow.
• Request account deletion.
• Object to or restrict certain processing.
• Request a copy of your data.

To make a privacy or data request, contact the TrackYourRecord team through the in-app support page.

International processing

TrackYourRecord may use infrastructure providers, authentication services, hosting providers, storage providers, and other technical services that operate in different countries.

By using the Service, you understand that your data may be processed outside your country of residence, subject to the safeguards and practices of the relevant providers.

Children

TrackYourRecord is not intended for children under 16. Users must be at least 16 years old to use the Service.

AI features

TrackYourRecord may include AI-related features in the future, but AI video analysis is not active in the current MVP unless explicitly stated in the app.

If AI features are added later, this Privacy Policy should be updated to explain what data is processed, how it is used, and what choices users have.

Changes to this policy

TrackYourRecord may update this Privacy Policy as the Service evolves. Material changes will be communicated where practical. Continued use of the Service after an update means you accept the updated policy.

Contact

For privacy questions, support requests, or data requests, contact the TrackYourRecord team through the in-app support page.