Privacy Policy

Last updated: 2026-10-22

This policy explains what data Trena processes, why and with whom. The controller is Maximo Andres Cobeaga (Argentina). Contact: maximocobeaga@gmail.com.

Summary

• We use your data only to make Trena work. We show no ads and do not sell your data.
• Health, GPS, photo and AI data are used only with your permission, and never for advertising.
• AI is optional: you can use Trena fully without it. Its suggestions do not replace a health professional.
• You can export everything and delete your account at any time.

What we process

• Account: email, sign-in identifier (Auth0 or Apple) and sign-up date. With Sign in with Apple you can hide your real email.
• What you log: workouts, sets, runs, meals, recipes, body measurements and weight, habits, notes, tasks, events and the files you attach (photos and videos).
• Health and nutrition data: weight, measurements, meals, goals and habits. This is sensitive data: we process it only to provide the service and, if you use AI, with your explicit consent.
• Location (GPS): during a run, if you allow it. The route is stored in your account only if you turn that option on.
• Apple Health: if you allow it, we read the workouts and summaries you choose to import and save your workouts there. This data is not used for advertising and is not shared with third parties for any purpose unrelated to Trena.
• Calendar and Reminders: if you link them, only the calendars and lists you pick.
• Subscription: status, plan, store and expiration dates. We never receive or store card data: payments are processed by Apple or Paddle.
• Technical: your devices’ names and types, and server logs (IP address, time, errors) for security and troubleshooting.

Why we use it

• To provide the service: store, sync and show your records (performance of contract).
• To manage your subscription and access (performance of contract).
• AI features you expressly request (consent).
• Security, abuse prevention and backups (legitimate interest).
• To meet legal obligations, such as tax rules.

Artificial intelligence

Trena offers optional AI features: estimating meals from photos, reading nutrition labels, interpreting what you write, and proposing records, routines or diets. For this:

• What is sent: only the text you write for that request, the date and time zone, and the photos you attach. We do not send your full history or data from other features.
• To whom: DeepSeek, an AI provider based in China. Your data is processed on its servers, outside your country. We ask for your explicit consent before the first use, and you can withdraw it at any time by writing to maximocobeaga@gmail.com.
• How the provider uses the data: DeepSeek processes data under its own API terms. We do not control that processing; read those terms on its website before deciding to use the feature.
• What we do not do: we do not use your data to train our own models or to build advertising profiles.
• Proposals: no AI proposal is saved until you review and apply it. Food, training or health suggestions are for guidance only: check them with a nutritionist or health professional before following them.
• Limits: AI has a monthly usage cap to prevent abuse and excessive costs.

Who we share it with

Only with providers we need to run the service, under contract and with the minimum information:

• Auth0 (Okta): sign-in and email verification.
• Apple: App Store purchases, Sign in with Apple and, with your permission, Health.
• Paddle: Merchant of Record for web purchases; processes your payment and billing data under its own policy.
• RevenueCat: subscription status across platforms (user identifier and purchases, no health data or content).
• DeepSeek: only when you use an AI feature, it receives what is described in the section above.
• Open Food Facts: when you scan a barcode, only the barcode number is looked up.
• Hosting provider: where the database and backups are stored.

Some of these providers are located outside your country. When that happens, transfers rely on the safeguards required by law or on your explicit consent, as with AI.

How long we keep it

• While your account has access.
• Locked account (no trial or subscription): 90 days, then everything is deleted.
• If you delete your account: it is removed from the main database immediately; backups expire on their own within 30 days.
• Billing records that the law requires to keep stay with Apple or Paddle.

Your rights

You can access your data, export it (Settings → Export), correct it, delete it (Settings → Account → Delete account), object to certain processing and withdraw permissions at any time in your iPhone settings or by writing to us. For any other request, write to maximocobeaga@gmail.com; we reply within 30 days. You may also complain to the data protection authority in your country.

Security

• Connections between the app, the web and the server are encrypted (HTTPS).
• Passwords and sign-in are handled by Auth0; Trena does not store passwords in plain text.
• Sessions can be revoked per device, and each account’s data is isolated from the others.
• Server access is restricted to the service owner, using SSH keys and no shared administrator passwords.
• AI usage limits prevent unexpected costs; manual features do not depend on AI.
• If we detect a breach affecting your data, we will notify you without undue delay and explain what happened.

Children

Trena is not directed to children under 16 and we do not knowingly collect data from them.

Changes

If we materially change this policy, we will notify you in the app or by email before it applies. If a change affects AI, we will ask for your consent again.