Privacy Policy

Last Updated: September 23, 2026

We built TrainerBox as a free, ad-supported application. This service is provided to you at no cost and is intended to be used as provided.

This policy informs you about how we collect, use, and share your personal information. If you choose to use our service, you agree to the collection and use of information in accordance with this policy. We do not share your information with third parties except as described herein.

The terms used in this Privacy Policy align with those in our Terms of Service, unless otherwise defined in this policy.

Information Collection and Use

To enhance your experience with our service, we may request certain identifiable information from you. The information we collect is retained and used as described in this policy.

Our service utilizes third-party services that may collect information to identify you. These services help us provide and improve the application.

Account Information

Creating an account is optional. If you sign in with Google or Apple, we collect the email address and display name provided by that sign-in provider. We use them to identify your account, restore your Pro subscription across devices, and link cloud backups to your account. This information is stored by Firebase Authentication and shared with RevenueCat to manage your subscription. We do not use it for advertising and we do not sell it.

Third-Party Service Providers

We use the following third-party services:

• Firebase Authentication - For Google and Apple sign-in
• RevenueCat - For managing in-app purchases and subscriptions
• Firebase Crashlytics - For crash reporting and diagnostics
• Google AdMob - For displaying ads to free users

Account and Data Deletion

You can delete your account at any time from the Settings tab in the app, or by following the instructions on our account deletion page. Deleting your account removes your sign-in credentials, email address, and display name from our systems. Collections and decks stored on your device, and backups stored in your own Google Drive or iCloud, are not affected.

Log Data

When you use our service, we automatically collect diagnostic information in case of app errors. This log data may include details such as your device's IP address, device name, operating system version, app configuration, usage timestamps, and other analytics. This data is collected through third-party analytics services to help us improve the application.

Service Providers

We may engage third-party companies to:

• Facilitate our service delivery
• Provide services on our behalf
• Perform service-related tasks
• Analyze how our service is used

These providers have access to your personal information only to perform these tasks and are obligated to keep your information confidential.

Website Data

This policy also covers the TrainerBox website at trainerboxapp.com. The website sets no cookies and uses no analytics, advertising or tracking scripts, as described in our Cookie Policy. When you load a page, our web server records standard access logs containing your IP address, browser type, the page requested and the time. We use these logs only for security, abuse prevention and per-address rate limiting of our API. They are kept for a limited period and then deleted.

Shared Deck Links

When you create a share link for a deck in the app, the card list is uploaded to and stored on our server together with a short code. Anyone who has the link can view that card list, so do not include personal information in deck or collection names. If you create an updatable link while signed in, we also store your account identifier and an identifier for the collection so that the same link can be refreshed later. Shared decks contain no other personal information. They remain on our server until you ask us to delete them by emailing trainerbox@trainerboxapp.com.

Advertising

Free users see ads served by Google AdMob. AdMob may use your device's advertising identifier and approximate location to select and measure ads. Where the law requires it, the app asks for your consent before showing personalised ads, and you can withdraw that consent in the app. You can also limit ad tracking or reset your advertising identifier in your device settings. Pro subscribers do not see ads. Google's own privacy policy describes how it handles this data.

Data Retention

Account information is kept until you delete your account. Anonymous crash and diagnostic logs are kept by our crash reporting provider for up to 90 days. Website access logs are kept for a limited period for security purposes. Shared deck links are kept until you ask us to delete them. Purchase and subscription records are kept by RevenueCat and the app stores for as long as they are required for refunds, fraud prevention and legal obligations.

International Data Transfers

Our service providers, including Google (Firebase, AdMob) and RevenueCat, process data on servers located in the United States and other countries. Where data is transferred out of the region where you live, these providers rely on legal transfer mechanisms such as standard contractual clauses.

Your Rights

Depending on where you live, you may have rights under laws such as the EU and UK GDPR, the California Consumer Privacy Act and similar laws, including the right to access the personal information we hold about you, to correct it, to have it deleted, to receive a copy of it, to object to or restrict certain processing, and to withdraw consent you have given. We do not sell your personal information. To exercise any of these rights, email trainerbox@trainerboxapp.com from the address linked to your account. We will respond within the time required by applicable law, and usually within 30 days. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

Data Security

We value your trust and strive to protect your personal information using commercially acceptable security measures. However, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security, though we take precautions to protect your data.

External Links

Our service may contain links to other websites. We do not operate or maintain these external sites. We recommend reviewing their privacy policies before interacting with them. We assume no responsibility for the content, privacy practices, or policies of third-party websites or services.

Children's Privacy

Our service is not intended for anyone under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover a child has provided us with personal information, we immediately delete it from our servers. If you are a parent or guardian aware that your child has provided us with personal information, please contact us immediately.

Policy Updates

We may update this Privacy Policy periodically. We recommend reviewing this page regularly for changes. Any updates will be posted here, and the effective date will be updated accordingly. Your continued use of the service after changes constitutes acceptance of the updated policy.

Who We Are

TrainerBox is operated by ChaosLGS, which is the data controller for the personal information described in this policy. You can reach us at trainerbox@trainerboxapp.com.

Contact Us

If you have any questions or suggestions about our Privacy Policy, please contact us at trainerbox@trainerboxapp.com.