Privacy policy

BE is the app brand of Train-R. This notice applies to the BE app, the Train-R website, and related account services. The controller named for this service is Mason Bickers, operating Train-R. Contact info@train-r.com about privacy or your account.

We process account identifiers, your email address and display name, sign-in provider information, profile details, training goals and availability. When you use the relevant features, we also process workouts, activity records, nutrition and meal logs, weight entries, journal entries, check-ins, coach conversations, and attachments you submit. Fitness and wellbeing information can reveal sensitive information about you.

BE uses Firebase for account authentication and storage. If you choose Google or Apple sign-in, that provider authenticates you and supplies the identity information you authorise. We do not receive your Google or Apple password. If you connect Garmin or Strava, we receive the authorised activity and fitness data, which can include distance, duration, heart rate, GPS routes, sleep and other wellness metrics. We do not receive your Garmin or Strava password. Connecting a service is optional; disconnecting it stops future imports but does not automatically delete records already imported.

With your device permission, features can use location for recording and maps, the camera or photo library for meal logging and profile images, the microphone for voice logging, Bluetooth for heart-rate sensors, and notifications for reminders. You can change these permissions in device settings. Declining a permission may prevent the associated feature from working.

We use information to provide and secure your account, store and display your records, sync connected services, generate training plans and coaching responses, estimate meal nutrition, provide support, and diagnose errors. We use service logs and technical information for reliability and security. If you join the website waitlist, we use your email to respond about access. Optional website marketing tracking is controlled through the cookie choices described below.

When you request AI coaching, a generated plan or meal analysis, relevant profile and activity context, prompts, conversation content and submitted text or images may be sent to OpenAI to produce the result. Avoid submitting information you do not want processed for that request. We use service providers including Google/Firebase for authentication and storage, Vercel for website hosting, and OpenAI for AI features. The website uses Klaviyo for optional marketing tracking when you accept it. Providers process information under their applicable terms and arrangements. We do not sell your personal information.

Depending on the feature and applicable law, we process information to provide the service you request, with your consent for optional integrations and sensitive fitness or wellbeing data where required, for legitimate interests in security and reliability, or to meet legal obligations. A device permission is a technical permission and does not replace any consent required for processing sensitive data. You can withdraw optional permissions or disconnect services; this may affect those features.

Information may be processed in countries outside the UK or your country of residence through our hosting and service providers. Applicable transfer safeguards depend on the provider and service. Account records and imported activities are generally kept while your account is active. We retain information only as needed to operate the service, handle requests, and meet security or legal obligations. Some logs or backups may remain for those purposes after deletion. Contact us for details about a specific record or a deletion request.

You can edit supported profile fields, manage device permissions, disconnect integrations, and request account or data deletion at info@train-r.com. Depending on your location, you may have rights to access, correct, erase, restrict or object to processing, receive a portable copy of data, and withdraw consent. We may need to verify your identity before acting on a request. UK users can complain to the Information Commissioner’s Office at ico.org.uk; users elsewhere can contact their local data protection authority.

BE is intended for people aged 16 or over. We do not knowingly collect data from children under 16. Contact us if you believe a child has provided information. We will update the date on this notice when it changes and provide additional notice where required.