Privacy policy
Includes the information notice required by Türkiye's Personal Data Protection Law (KVKK). Last updated: 30 September 2026.
This policy explains how your personal data is processed when you use the trainelo mobile app and the trainelo.app website.
Who is responsible?
trainelo is used by your studio. The studio creates and manages student and trainer records, so your studio is the data controller for them. trainelo is the data processor, handling that data on the studio's behalf and instructions. trainelo is responsible for the trainelo.app website itself.
What data we process
| Data | Examples | Entered by |
|---|---|---|
| Identity and contact | Full name, phone number, email | Studio |
| Account | Sign-in email, password (stored only in encrypted form) | Studio and you |
| Studio relationship | Session package, planned and completed sessions, attendance, cancellations | Studio and trainer |
| Body measurements (health data) | Weight, body circumferences, body-fat percentage and the trainer's comment | Trainer |
| Notifications | Notification preferences, a log of notifications sent, your device's push token | You and the app |
Body measurements are sensitive personal data (health data) under KVKK and are processed only with your explicit consent. If you don't want measurements taken, tell your studio.
Why we process it
- To show you and your trainer your package, sessions and measurement progress
- To send notifications such as session changes and measurement reminders
- To keep your account secure and answer support requests
We do not use your data for advertising, we do not sell it, and we do not share it with third parties for marketing.
Legal bases
Identity, contact, account and studio-relationship data are processed to perform the service agreement between you and your studio, and on the controller's legitimate interest (KVKK Art. 5/2-c and 5/2-f). Body measurements rely on your explicit consent (KVKK Art. 6).
Who we share it with
Only your own studio's administrators and trainers can see your data. We use the service providers below to run the service; each processes data only for that service and under contractual terms at least as protective as this policy:
- Supabase: database and authentication (servers in the European Union)
- Vercel: hosting for the website and the web admin panel
- n8n: automated delivery of notifications
- Meta (WhatsApp Business): message delivery, if your studio has WhatsApp notifications turned on
- Apple and Expo: delivering app notifications to your device
Some of these providers are located outside Türkiye, so data is transferred abroad under the conditions of Article 9 of KVKK. We don't share your data with anyone else unless required by law.
How long we keep it
Your data is kept for as long as your relationship with your studio continues. When your account is deleted, your data is deleted or anonymised within 30 days, subject to legal retention obligations.
Your rights
Under Article 11 of KVKK you can ask whether your data is processed, request information about it, have it corrected or deleted, learn who it was transferred to, object to processing, and claim compensation for damages.
- Delete your account: email support@trainelo.app from the address your studio has on file, with the subject "delete my account", or tell your studio. We complete requests within 30 days.
- Withdraw consent: you can withdraw consent to the processing of your measurements the same way.
- Stop notifications: turn off app notifications in your device settings; for WhatsApp notifications, contact your studio or us.
Security
All connections are encrypted (HTTPS). Each user can see only the data their role allows, and passwords are never stored in plain text.
Changes
If we update this policy we will change the date above, and announce significant changes in the app.
Questions and requests: trainelo · support@trainelo.app