TrainRoutine privacy policy
Last updated: August 22, 2026.
This policy explains how TrainRoutine processes data when you use the website and its account features. The Android app has a separate, dedicated privacy policy.
1. Data we process
You can browse the catalog without creating an account. Server infrastructure may process basic technical logs needed to provide and protect the service, such as IP address, date, requested URL, User-Agent and response codes.
2. Account and favorites
If you create an account, we store your email address, an optional display name, selected language, a non-reversible password hash, creation/update dates and last sign-in. We also store the exercises and workouts you mark as favorites.
3. Purposes and legal basis
We process account data to provide the features you request, such as signing in and saving favorites. Security and technical operation rely on our legitimate interests and applicable obligations. Marketing and optional processing for analytics, measurement or advertising depend on your choice and on the consent required in each region.
4. Measurement and Analytics
TrainRoutine is configured to support Google Analytics 4. For signed-in users, if you deny optional data processing, TrainRoutine does not load analytics while that session remains signed in. Region-specific consent signals also apply.
5. Advertising
TrainRoutine is configured to support advertising through Google AdSense. Ad loading and personalization depend on site configuration, your optional-data preference while signed in and the consent required in your region.
Google Ads Settings · How Google uses data from partner sites and apps
6. Cookies and local storage
Authentication uses a session cookie named tr_session, HTTP-only, SameSite=Lax and Secure over HTTPS, configured for up to 30 days. localStorage may store the light/dark theme preference. Google Analytics, AdSense or a consent platform may use additional storage where applicable.
7. Consent and preferences
Creating an account records that you have read the Privacy Policy and the current policy version. Permission to receive news/offers and permission for optional usage-data processing are separate, optional choices that can be changed from Account.
8. Providers and international transfers
We do not sell your personal data. Hosting, database, security, analytics and advertising providers may process information only as needed to provide their services. Some providers, including Google, may process data outside the European Economic Area using the applicable safeguards and transfer mechanisms.
9. Retention
Account data, favorites and consent choices are retained while the account remains active. The last-sign-in date remains with the account. Infrastructure technical logs are kept only for the period needed for operation, diagnosis, security or legal compliance.
10. Account deletion
You can delete your account directly from Account after confirming your current password. Deletion removes the TrainRoutine user and associated favorites. Technical logs managed by infrastructure may be retained only for periods required for security, operation or legal obligations.
11. Your rights and contact
Where applicable, you may request access, correction, deletion, restriction, objection or portability and withdraw optional consents by writing to [email protected].
Spanish Data Protection Agency (AEPD)
12. Android app
The Android app uses TrainRoutine.com as its primary service and has a dedicated policy describing the data and features actually used by the app, including accounts, favorites, consent choices, analytics, advertising and local storage.
13. Changes to this policy
We may update this policy when features, processed data, providers or legal requirements change. The current version will remain available at this URL.