Privacy

The short version

You keep a record of your training here, and we score it against published reference data. Your profile is private until you publish it, and then only the parts you unlock. Your age, sex, height and bodyweight are never published. Nothing is sold, and there is no advertising and no third-party tracking. You can delete your account, and everything in it, at any time.

What we keep

• Your account: your email address and a password, which is stored only as a one-way hash.
• Your profile: your name, handle, picture and description; your sports; and, if you give them, your date of birth, sex, height, bodyweight, training level, the goal you pick from a list and anything you add about it. Date of birth and sex choose the reference group you are compared with; bodyweight is what a lift is measured against. Whether you read weights in kilograms or pounds is kept too; the setup screen suggests one from your browser's language settings, which are read there and not stored.
• Your benchmarks: each test, its number as you typed it and in the unit you typed it in, its date, the bodyweight you lifted at, how a workout was scaled, and any notes. Scores are computed from these and kept as a history.
• Your training sessions: when each started and ended, the calendar day it started where you were (read from your phone's clock, or the date you type on the web), its title and notes, and each exercise in it with its sets -- the weight, reps, reps in reserve, time, distance or calories you enter, whether a set was a warm-up, whether you did it, and whether and when you shared it. A session can be made of parts with a format -- an AMRAP, a workout for time, an EMOM, intervals, a rest -- and then each part keeps what it took (its length, rounds, interval, work, rest or cap), what it came to if you say (a time, rounds and reps, whether the cap came first), any notes on it, the benchmark it was if you started it as one (Fran, Cindy), and what each movement in it was prescribed (reps or a scheme like 21-15-9, a load, a distance, a time or calories). A FitMoment can be the picture of one. Sets of 1 to 10 reps of a lift that is a benchmark test (a back squat, a bench press, a deadlift, the Olympic lifts) also estimate a one-rep max that your Fitness score uses, marked as estimated; it is worked out from your sets whenever your score is computed and never stored on its own.
• Your templates: the name you give each, and its exercises in order with how many sets and the reps, time or distance a set aims at -- or its parts with their formats and what each movement is prescribed, as a session's. They are kept privately and never published, to anyone; a session you start from one remembers which, until you delete the template.
• Exercises you add: the name you give each, what a set of it records, and its equipment and muscle if you choose them. They are yours alone -- nobody else can use them, and their name is shown only on a training session of yours that you share -- and they are never scored. Archiving one hides it from your lists but keeps it, and the sessions that used it, until you delete your account.
• FitMoments: the pictures and short clips you publish, with their title, date, the place you type, and a benchmark if you attach one -- with the day that benchmark was performed.
• The people you follow and befriend, the posts you like, the benchmarks you upvote, and when you last opened your notifications, to count what arrived since.
• Comments: the text you send, its author, date and the FitMoment, benchmark or training session it belongs to. Comments never change a score or its confidence.
• Your subscription, if you buy Track+: which plan you have, where you bought it (the App Store, Google Play or the website), until when it runs, whether it renews, and a record of each payment notice the store or payment service sent us. We never see your card, your bank details or your CPF. In a Track+ Crew, the buyer and the friends they seat see each other's names in the crew while their profiles are published, and nothing else about each other's plan or payments: a member is not told when the buyer's plan ends or whether it renews.
• Usage events: which parts of the app were used and when -- for example that onboarding was finished or a goal was set, on the web or a phone. They never contain what you logged.

What is published, and to whom

Nothing, until you publish your profile. Then your name, handle, picture, description and sports are public, and people can find you by name or handle. Your fitness score, rank chart, highlights, FitMoments, activity and training days each stay private until you unlock that block. Activity is the benchmarks you log. A training session is never published unless you share it, one session at a time, when you finish it or later from its page: then your friends see it in their Community, and can like it and comment on it -- its title, when it started and ended, for each exercise its name, how many sets you did and your best set, and each part's format, what it took and came to and what its movements were prescribed, never its notes -- and nobody else, not on your public profile and not anyone signed out. A session you do not share is seen by you alone, friends included, and you can take a shared one back at any time. You can also share a session as a picture, to WhatsApp, Instagram or anywhere else: our server draws it from that session when you ask -- its title, day, length, sets, volume and best sets, each part's format and what it came to with its movements, with your name, picture and handle, and a link and QR code to your published profile (or to this site while you have none) -- and sends it only to you. Our server keeps no copy; your phone keeps the last one you shared in the app's cache, replaced by the next, because the app you hand it to may read it after you close the share sheet. Posting it shares nothing here; what happens to it after that is up to you and the app you post it with. On your phone the caption with that link is also copied, for the apps that do not take one. Training days are the days you trained -- for each one, how many sessions you finished and how many sets you did, shared or not, which draws your calendar, weekly rhythm and streak. They show when you train, which is why they have a lock of their own; they never show what you lifted, the time of day or your notes. Friends -- people you and they have both accepted -- see the locked blocks too. Accepting a friendship makes each of you follow the other, and ending it, from either side, ends both; the follower and following counts on a published profile count friends as both. Your email, date of birth, sex, height, bodyweight and notes are never published; a strength highlight shows the multiple of bodyweight you lifted, never the weight.

Coaches

Any adult with a published profile can turn on coach mode -- choosing Coach when you sign up publishes your profile then, under the handle you pick there, as the screen says -- and their profile then shows a Coach badge, and “CREF verified” with a date only after we have checked their registration number by hand. A coach invites you by your handle. The invitation lists everything they will see, and nothing is shared until you accept: the training they assign you -- a session, or a four-week plan whose sessions not yet done they can withdraw -- and whether you did it, and -- while they pay for Coach+ -- everything you log and everything on your profile, including your date of birth, height, bodyweight, notes and locked blocks. A coach only ever reads; nothing they do changes your log. Coaching is for people 18 and over, by the date of birth on your profile.

Either of you can end the link at any time, and what they see ends at once; training they assigned stays yours as your own templates. “Trainer: @coach” appears on your public page only if you turn it on. When a coached student pays for Track+, their coach is credited a share of what reaches us; the coach sees the amount, never the student's payment details. The app does not keep a student's data on the coach's phone.

Your plan

A Track+ member can make a four-week plan toward a score they pick for one capability. We keep the capability, the target, the score it started from, the days you chose and each session as one of your own templates, dated, with the loads worked out from your own results. It is private: nobody else sees it, except a coach you accepted while they have Coach+, who sees what it aims at and when, and can make one for you and change it before it reaches you -- never while you are following a plan of your own or another coach's, which only you, or the coach who made it, can end. Ending a plan removes its sessions you have not done; what you did stays. A plan never changes your Fitness score: its retest is an ordinary result.

Friend groups

Groups are for people 18 and over, by the date of birth on your profile, which is checked only for yourself when you make or join one. A Track+ member can make a group of up to 25 of their friends around a goal for up to 120 days, ranked on one count the creator chooses: training days, sessions, working sets, or each person's change in their own Fitness score. An invitation shows what joining shares before you accept: while you are in the group, everyone in it sees your name, picture and handle and your count -- never what you lifted, your notes or anything about your body, and never your Fitness score itself. A count that rises shows the others the days it rose, so a group can tell which days you trained while you are in it; the creator can move the end date only later, never back a day at a time. Members need not be each other's friends. If you make your profile private, the group keeps your place and drops your name, the creator's included.

The creator sees who they invited and who joined. Anybody can leave at any time and their count goes with them; the creator can remove anyone and delete the group, and deleting an account removes its groups and memberships. Groups are never public, and the app does not keep a group's standings in its offline cache.

Conversations between friends

Your Community feed shows only posts from current accepted friends. You can like these posts and join their conversations. Following someone or a reference athlete alone does not put their posts in your feed.

A post's author and their current friends can read and comment on its conversation. Following someone alone does not reveal comments or their counts. Access is checked again when you open a conversation or send a comment; ending a friendship or making a profile private removes the other person's access. Comments from a profile that becomes private are hidden from other people. Conversation text is not published on public profiles and is not saved in the phone's offline cache.

Your notifications show you, and only you, which of your current friends liked, corroborated or commented on your FitMoments, benchmarks and training sessions -- their name, picture and handle, the comment's text and when -- beside the friend requests waiting on you. A friend who makes their profile private or is no longer your friend leaves them. They are never sent by push or email, and the app does not keep them in its offline cache.

You can delete your own comments, and a post's author can remove comments on it. Deleting a post deletes its conversation; deleting an account deletes the comments that account wrote too.

On your phone

The app keeps your sign-in in the phone's secure storage, and a copy of your data so it works without a signal. Benchmarks and FitMoments you log offline wait on the phone until they can be sent. A training session you are in the middle of is kept only on the phone, saved as you go so it survives the app closing, and nothing of it is sent until you finish it -- a picture or clip you took for it waits with it, and is sent as its FitMoment when you do, or deleted with it if you discard it. The clocks a session runs -- the rest between sets, a block's AMRAP, EMOM or intervals -- are kept with it on the phone, and the notifications they schedule for while the app is closed are local to the phone; they go nowhere. Signing out removes the copy of your data; anything still waiting stays on the phone for your account and is sent the next time you sign in.

If you connect Health Connect, the app reads your weigh-ins, and your runs, rows and rides with their distance, on the phone. Nothing from Health Connect is sent anywhere unless you accept it: a weigh-in you choose to use becomes your profile's bodyweight or a lift's, and a workout you log becomes a benchmark, noting its distance and the app that recorded it. The app never writes to Health Connect, and you can withdraw its access there at any time.

The camera and your photo library are used only when you take or choose a picture or a clip.

Open training reads the screenshots you choose on the phone itself, with Google's ML Kit text recognition, which runs on the phone: the pictures are never uploaded, and the copies the app makes to read them are deleted once read. ML Kit sends Google details of its own use -- the phone's maker, model and system and the machine-learning hardware it has, the app's name and version, an identifier for this installation, the version of the recogniser, how long reading took, each picture's size and format, the size of what it read, and the kind of each event and any error -- and Google does not list the pictures or their text among them. What is saved is only the training you review and confirm -- a template of yours dated for the day, and any exercise it named that you did not have yet, as one of your own.

Who handles it

Your data is stored by the database and file-storage service this app runs on, and emails -- sign-in links and password resets -- are sent through an email service. Subscriptions bought in the app go through the App Store or Google Play and RevenueCat, which tells us what you bought and until when; it knows your account only by a random identifier, not your name or email. Subscriptions bought on the website go through Asaas, a Brazilian payment service, which collects your CPF and your card or Pix details itself and receives your name and email so the receipt reaches you. They process it for us and for nothing else. We do not sell it, share it with advertisers, or use it to train anything. Open training's text recognition is Google's ML Kit, which runs on the phone; the details of its own use it sends Google, described above, are Google's, under Google's terms, and carry nothing of your account.

Deleting it

Delete your account from Settings, on the web or in the app. Your profile, benchmarks, training sessions, templates, scores, goals, the exercises you added, FitMoments with their files, follows, friendships, likes and comments and upvotes are deleted at once, and you are signed out everywhere. There is no grace period and no copy kept. Usage events stay as anonymous counts with your account removed from them. The record of a payment stays, because tax law requires it, with your account removed from it. Deleting your account cancels a subscription bought on the website; if the payment service will not cancel it at that moment, we are told and cancel it by hand. It does not cancel one bought in the App Store or Google Play, which you cancel there.

Contact

Questions, or a request about your data: [email protected].