TrainRoutine app Privacy Policy
Last updated: August 22, 2026.
This policy describes data processing in the TrainRoutine Android app and in the web/PWA experience that uses the same TrainRoutine.com service. It is separate from the general website policy so that the app has its own public privacy document.
1. Data controller and contact details
Service operator: Daniel Peña Gómez
Country: Spain
Contact email: [email protected]
You can use the email published on this page for privacy and data-protection questions or requests.
2. Data collected and processed by the app
The app can be browsed without creating an account. If you register or sign in, we process only the data needed to provide the account, favorites and configured preferences.
- Account data: email address, optional display name, language, non-reversible password hash, creation/update dates and last sign-in date.
- Preferences and consents: acceptance of the Privacy Policy and its version, optional permission to receive news/offers, and optional permission for usage-data processing for measurement, analytics, advertising and service improvement.
- Account-linked usage data: identifiers of exercises and workouts saved as favorites and the date they were saved.
- Technical data: the server and, when enabled and permitted, Google Analytics or Google AdSense may process technical information such as IP address, User-Agent, language, device, browser and interaction data required for security, measurement or advertising. TrainRoutine does not store those details as user-profile fields.
- Local device data: an HTTP-only session cookie keeps you signed in and localStorage may store the light/dark theme preference.
3. Purposes and legal basis
Account and favorite data are used to authenticate you and restore your favorites. Technical data are used to operate, protect and diagnose the service. Marketing and optional-data preferences are based on your choice and can be changed from Account; they are not required to create an account or browse the catalog.
4. Data displayed publicly
TrainRoutine does not publish your email address, favorites, password or password hash as part of a public profile. The current version has no public user rankings.
5. Analytics, advertising and third parties
The app uses the TrainRoutine web service and is prepared for Google Analytics 4 and Google AdSense. When enabled and when the required consent basis exists, Google may process cookies, identifiers and technical data under its own policies. Hosting, database, CDN, security or infrastructure providers may process only the data required to provide their services.
Google Privacy Policy · How Google uses data from partner sites and apps
6. International transfers
Some infrastructure, analytics or advertising providers may process information outside the European Economic Area. Where applicable, those transfers must use the safeguards required by applicable law and the mechanisms offered by each provider.
7. Data retention
Account data, favorites, consent choices and the last-sign-in date are retained while the account remains active. Infrastructure technical logs may be retained for periods needed for security, operation or legal compliance. Deleting the account removes the user and associated favorites from the TrainRoutine database, except information that must be retained by law.
8. Account and data deletion
You can delete your account from the Account section after signing in and confirming your current password. Deletion removes the user and, through the associated database relationship, their favorites. It is not merely an account deactivation.
9. User rights
Where applicable, you can request access, correction, deletion, restriction, objection or portability and withdraw optional consents by writing to [email protected].
Spanish Data Protection Agency (AEPD)
10. Security
Passwords are not stored in plain text: they are stored using PHP password_hash and checked with password_verify. Sessions use HTTP-only cookies, SameSite=Lax and Secure when the connection is HTTPS. Sensitive operations use CSRF protection, and account deletion or password changes require the current password. No technical measure can eliminate all risk.
11. Changes to this policy
We may update this policy if app features, processed data, providers, advertising, analytics or legal requirements change. The current version will remain available at this TrainRoutine-specific URL.