Trainly Consumer Health Data Privacy Policy
Effective date: November 1, 2026
This policy is for people in the United States. It explains how Trainly Fitness Inc. (“Trainly”, “we”, “us”) handles “consumer health data”, as defined in:
Washington’s My Health My Data Act;
Nevada’s SB 370;
Connecticut’s consumer health data provisions.
It adds to our Privacy Policy, which covers everything else.
1. What consumer health data we collect, and why
Some of what you log in Trainly may count as consumer health data:
Workouts, exercises, sets, reps, weights, times and distances, and workout notes: To keep your training log, and to calculate personal records, streaks, boards and challenge results
Workout history you import from another app: The same as above
Bodyweight, where the app asks for it, stays on your phone and is not sent to us.
We collect this only as necessary to provide the features you ask for, which is why we do not ask for separate consent. If we ever want to collect or use it for any other purpose, we will ask for your consent first. We do not use it for advertising, we do not use it to make inferences about health conditions, and we do not use geofencing around places where health care is provided.
2. Where it comes from
From you, when you log or import it.
From trainers and gyms, who may record that you attended their session or class.
3. Who we share it with
We share consumer health data only:
with the people you choose, through your privacy settings (see section 5 of the Privacy Policy);
with these service providers (processors), which store or deliver it for us under contract:
Railway Corporation (hosting and database);
Cloudflare, Inc. (photos and videos you attach to workouts);
Clerk, Inc. (only the account it belongs to, not the health data itself);
if the law requires it.
We have no affiliates. We do not sell consumer health data, and we would never do so without your separate, signed authorisation as the law requires.
4. Your rights
You have the right to:
confirm whether we collect, share or sell your consumer health data;
access it, and get a list of all third parties and affiliates we have shared it with, with their contact information;
delete it (in the app, by deleting entries or your account, or by asking us). We pass deletion requests on to our processors. Deleted data is gone from our backups within 30 days;
withdraw consent to its collection and sharing, by deleting it and no longer logging it.
To use these rights, email support@trainlyfitness.com with the subject “Health data”. We will answer within 45 days, and may extend this once by 45 days where the law allows. If we decline your request, you can appeal by replying to our answer. We will tell you the result of the appeal in writing within 45 days. If your appeal is denied, you can contact your state’s attorney general (in Washington, at www.atg.wa.gov).
We will not treat you differently for using these rights.
5. Contact
Trainly Fitness Inc., Attention: Privacy Officer
c/o Osler, Hoskin & Harcourt LLP, Suite 2700, Brookfield Place, 225 – 6th Avenue S.W., Calgary, Alberta T2P 1N2, Canada support@trainlyfitness.com