Privacy Policy

The Service is operated by Ruslan Tkalenko, an individual entrepreneur (фізична особа-підприємець) registered in Ukraine (“we”, “us”). We are the controller of your personal data. For any privacy question, write to privacy@traininghub-pro.com.

• Account and profile — email, name, password (stored only as a hash), role (athlete or coach) and, if you add them, photo, date of birth, gender, country, sport and bio.
• Activity Data — trainings, plans and calendar events: date, type, duration, distance, pace, elevation, heart rate, GPS route, shooting results, training load and notes. It is added by you, your coach or a service you connect, such as Strava.
• Wellness Data — daily check-ins (fatigue, soreness, stress, sleep, morning heart rate, HRV), weight, height, heart-rate zones, illness, injury and menstrual cycle notes.
• Usage Data — IP address, browser and device information and server logs, collected automatically.
• Beta requests — the name, email and role you send through the form on the home page.

Wellness Data and heart rate are data concerning health — a special category of personal data. We process them only with your explicit consent.

Profile photos are stored at a public link: anyone who has the exact link can open the image.

We use your data to run your account and training diary, calculate analytics such as heart-rate zones and training load, connect you with your coach, import activities from services you connect, send service emails and keep the Service secure.

We do not sell your data, do not use it for advertising and do not use your Activity or Wellness Data to train artificial-intelligence models.

• Contract — to provide the Service you signed up for (Art. 6(1)(b) GDPR).
• Explicit consent — to process your health data (Art. 9(2)(a) GDPR; Art. 7 of the Law of Ukraine “On Personal Data Protection”). You give it with a separate checkbox at sign-up.
• Legitimate interests — security, abuse prevention and improving the Service (Art. 6(1)(f) GDPR).
• Legal obligation — when the law requires us to keep or disclose data (Art. 6(1)(c) GDPR).

Account data and health-data consent are required to use the Service: without them we cannot create your diary or provide check-ins, heart-rate zones and training load.

Your activity and wellness data is private by default. It is only visible to other users of the Service that you explicitly grant access to.

A coach sees your data only after you accept their invitation. By accepting, you explicitly consent to that coach seeing your trainings (including those imported from Strava, except activities that are private on Strava), check-ins, health data and analytics, and adding trainings, plans and notes to your diary. You can pause or end the connection at any time, and the coach then loses access.

Coaches may use athletes' data only for coaching and must keep it confidential. Your name, email, photo and bio are visible to users you are connected with, users you invite and users who invite you. A coach can find you only by your exact email address to send an invitation; there are no public profiles and no athlete search.

If you connect Strava, we import your Strava profile (name and photo) and your activities, including private ones, with details such as heart rate, GPS route, speed and elevation.

Strava data is visible only to you and to coaches you have connected with. Activities you keep private on Strava (visible to "Only You") are shown only to you, never to your coach. We do not sell Strava data, share it with other third parties, show it publicly or use it for artificial intelligence.

If you delete an activity on Strava, we delete it from the Service too, or remove the Strava data from a training you entered yourself. When you disconnect Strava, in the Service or in your Strava settings, we stop importing and delete all Strava data: the access tokens, your Strava profile, trainings imported from Strava and Strava data in trainings you entered yourself.

Strava's own processing is governed by the Strava Privacy Policy. The Service is not affiliated with or endorsed by Strava.

To run the Service we use Supabase (database and authentication; your data is stored in the EU region), Vercel (hosting) and Resend (service emails), as well as an email provider for our mailbox. Supabase, Vercel and Resend are US companies; transfers to them are protected by safeguards such as the EU Standard Contractual Clauses.

Route maps are loaded from OpenStreetMap directly by your browser, so OpenStreetMap sees your IP address.

We access data from Ukraine to operate and support the Service. New integrations (for example Garmin or Polar) will receive data only after you connect them, and we will update this Policy first. We may disclose data if required by law or a competent authority.

We keep your data for as long as your account exists, and you can delete individual entries at any time. When you delete your account, your data is erased immediately and backup copies are overwritten within 30 days. Server logs are kept for a limited time, and beta requests for up to 12 months.

You have the right to access, correct and delete your data, to receive a copy of it in a machine-readable format, to restrict or object to processing and to withdraw consent at any time.

Most of this you can do yourself: edit or delete entries, or delete your whole account in Profile → Danger Zone. For anything else, write to privacy@traininghub-pro.com from the email address of your account; if you write from another address, we may ask you to confirm your identity. We reply within 30 days, free of charge.

Withdrawing your health-data consent means deleting that data — by deleting your account or by asking us to delete your Wellness Data. Earlier processing is not affected.

You can lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua) or with the data protection authority of your EU country (list of authorities).

The Service is intended for users aged 16 and over. Athletes under 16 may use it only with the consent of a parent or legal guardian, who agrees to the Terms of Use and to the processing of the child's health data on the child's behalf. We may ask the parent or guardian to confirm this consent by email. If we learn that a child under 16 uses the Service without such consent, we will delete the account.

We use only the cookies and browser storage the Service needs to work: to keep you signed in, remember your language and display settings and protect the Strava connection. We use no analytics, advertising or tracking cookies, so there is no cookie banner.

We protect your data with encryption in transit, database access rules that let each user see only their own data and the data shared with them, and encrypted storage of integration tokens. No system is completely secure; if a data breach occurs, we will notify the authorities and you where the law requires it.

We may update this Policy. The date at the top shows when it was last changed, and we will notify you of material changes by email or in the Service before they take effect.

This Policy is available in Ukrainian and English. Both versions are equally valid; for users in Ukraine the Ukrainian version prevails.

Ruslan Tkalenko, Ukraine. Email: privacy@traininghub-pro.com.