Privacy Policy

Train Weekly is provided by Flarmio ltd. Flarmio is the controller of personal data described in this policy. You can contact us at info@flarmio.com or Flarmio ltd, Ipsilantou 82, Athens 114 73, Greece.

You can use Train Weekly without creating an account. Your exercise plan, weekly targets, workout logs, rest-week choices, streaks, and settings are then stored locally on your device. Flarmio does not receive that local data through the account-sync service.

The home-screen widget reads the same locally stored training information on your device. It does not send that information to Flarmio by itself.

If you choose to create or use an account, we process your email address, a securely hashed form of your password, account and session identifiers, and the training information you choose to sync. Synced training information can include your exercises, targets, workout logs, completed weeks, rest-week choices, streaks, onboarding status, and settings.

We use this data to authenticate you, back up your training information, merge updates between your devices, restore your data, and provide account support. Creating an account is optional and is not required for the app's core local features.

If you use friend sharing, we process the email addresses involved in an invitation, the invitation status, and the connection between accepted friends. After both users are connected, each can view the other's synced training progress. We do not make this information public, and progress is shared only after an invitation is accepted.

Our hosting and security providers may process standard request information such as IP address, date and time, browser or device type, requested endpoint, and error or security logs when the app communicates with our servers. We use this information to deliver the service, protect accounts, prevent abuse, diagnose errors, and maintain reliability.

Train Weekly does not access or collect precise location, contacts, photos, camera or microphone content, health-platform data, advertising identifiers, or payment information. The app contains no advertising SDK and does not use personal data to track you across other companies' apps or websites.

We process optional account, sync, and friend-sharing data to provide the service you request. We process limited technical and security data for our legitimate interests in operating a reliable and secure service and preventing abuse. We process data when necessary to comply with legal obligations.

We use service providers acting on our behalf to host the web application and store optional account and sync data, including Vercel and Upstash. These providers process data under their contractual and security obligations. We may also disclose information when required by law or necessary to protect users, the service, or legal rights.

We do not sell personal data. We do not share Train Weekly data with advertisers or data brokers.

Our service providers may process data outside Greece or the European Economic Area. Where required, we rely on an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism and apply appropriate protections.

We use encrypted HTTPS connections, access controls, hashed passwords, expiring session tokens, and reputable cloud infrastructure. No storage or transmission method is completely secure.

Device-local data remains until you clear the app's data or uninstall it. Optional account and synced training data is kept while your account is active and is deleted when you use account deletion, except for limited information that must temporarily remain in protected backups, security logs, or records required by law. Login sessions expire after no more than 90 days unless renewed. Operational logs and backups are retained for limited periods set by the relevant service provider.

You can delete your account inside Train Weekly from Menu, Account sync, Delete account. This removes the online account, cloud backup, active sessions, pending friend invitations, and friend connections. Data stored only on your device remains there until you clear the app's data or uninstall it.

Depending on applicable law, you may request access to, correction of, deletion of, restriction of, or objection to processing of your personal data, and you may request a portable copy of data you provided. Email info@flarmio.com to exercise a right. We may need to verify your identity and will normally respond within one month.

You may complain to the Hellenic Data Protection Authority at 1-3 Kifisias, 115 23 Athens, Greece; telephone +30 210 6475600; email contact@dpa.gr; or www.dpa.gr. You may also contact your local supervisory authority.

Train Weekly is a general-audience fitness tool and is not directed to children under 13. If local law requires a higher minimum age for an optional online account, that higher age applies. If we learn that an ineligible child provided personal data, contact us so we can delete it.

We may update this policy when the app or legal requirements change. We will publish the new version on this page and update the effective date. Material changes will receive additional notice where required.

For privacy questions or requests, email info@flarmio.com. You can also read Flarmio's general privacy policy for information that applies across Flarmio products and websites.