Privacy Policy
This Privacy Policy describes how Training Program (the “App”, “we”, “us”, or “our”) collects, uses, stores, shares, and deletes information when you visit or use the App at https://training-programs.com.
Access is restricted. The App is a private service for invited clients and authorized users only. It is not an open public product available to everyone. Visiting the homepage or this privacy page does not grant account access. Only Google accounts that we have explicitly authorized can sign in and use authenticated features. Unauthorized accounts are denied access.
By using the App, you agree to this Privacy Policy. If you do not agree, please do not sign in or use the App’s authenticated features.
1. Who we are
Training Program is a web application that generates personalized strength and hypertrophy workout programs, tracks training progress, supports rescheduling sessions, and optionally syncs workouts to Google Calendar. The App is operated by Andriy Kolihanov for a limited set of authorized users/clients. Contact details are listed in Section 14.
2. Scope of this policy
This policy covers:
- Visitors who view the public homepage and this privacy policy without signing in
- Authorized users (invited clients) who authenticate with Google to create and manage workout programs
- Authorized users who optionally grant Google Calendar permission to schedule workouts
People without authorization may still open the public pages, but they cannot create an account, store programs, or use Google Calendar sync through this App.
3. Information we collect
3.1 Information from Google Sign-In
When you choose “Sign in with Google”, Google provides us with information associated with your Google Account that you authorize, which typically includes:
- Full name (or given name and family name)
- Email address
- Google user identifier
- Profile image URL (if provided by Google)
- Optional phone number if present on your Google Account and shared by Google
We use Firebase Authentication to process sign-in. We do not receive or store your Google password.
3.2 Workout and program data you provide
After sign-in, you may create and store training data such as:
- Program name and program type (strength / hypertrophy)
- Start date, program length (weeks), and selected workout days
- Optional per-day workout start times and calendar scheduling preferences
- Current one-rep max (1RM), goal weight, strength level, workout style (gym / calisthenics)
- Available plate inventory and bar weight for strength programs
- Workout completion status, exercise completion, manual adjustments to sets/reps/weight
- Reschedule dates, times, and optional notes (for example illness or travel)
- Program status (active, completed, archived) and related timestamps
3.3 Google Calendar information (optional)
Only if you enable calendar scheduling / sync, the App requests Google OAuth
permission for the scope
https://www.googleapis.com/auth/calendar.events.
With that permission, the App may:
- Create workout events on your primary Google Calendar
- Update those events when you resync or reschedule workouts
- Store limited private extended properties on events (such as program/workout identifiers) so the App can update the correct events
The App does not request access to read your entire email, Drive files, or unrelated Google services. Calendar access is used solely to schedule and maintain workout events you choose to sync.
3.4 Technical and usage data
To operate the App securely, our hosting and authentication providers may process standard technical data such as IP address, browser type, device information, authentication tokens/cookies/local storage needed to keep you signed in, and diagnostic logs related to errors or security.
4. How we use information
| Purpose | Data used |
|---|---|
| Authenticate you and keep you signed in | Google account identifiers, email, auth tokens |
| Generate and display personalized workout programs | Program settings, goals, equipment, schedule |
| Track progress and reschedules across devices | Completion flags, adjustments, reschedule records |
| Optional Google Calendar sync | Workout dates/times, titles, durations, OAuth access token |
| Provide support and respond to deletion requests | Email and account identifiers you provide when contacting us |
| Secure and maintain the App | Technical logs and authentication metadata |
We do not sell your personal information. We do not use Google user data for advertising, credit scoring, or unrelated profiling.
5. Legal bases (where applicable)
Depending on your location, we process personal data based on:
- Contract / service delivery — to provide the App features you request after signing in
- Consent — for optional Google Calendar access (you can revoke it anytime in your Google Account)
- Legitimate interests — to secure the App, prevent abuse, and improve reliability
6. Where data is stored and who processes it
We use Google infrastructure to run the App:
- Firebase Authentication — sign-in and session management
- Firebase Realtime Database — storage of user profile and program data under your user ID
- Firebase Hosting — delivery of the App and this privacy policy
- Google Calendar API — optional creation/update of workout events in your calendar
These services are provided by Google LLC / Google Cloud and are subject to Google’s terms and privacy policies in addition to this policy.
7. Google API Services User Data Policy
The App’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular:
- Google user data is used only to provide or improve user-facing features that are prominent in the App
- We do not transfer Google user data to third parties except as necessary to provide/improve those features, for security, or as required by law
- We do not use Google user data for serving advertisements
- We do not allow humans to read Google user data unless you give us permission for support, it is necessary for security/compliance, or the data is aggregated and anonymized for internal operations
8. Data sharing
We share data only in these situations:
- Service providers — Google/Firebase as our hosting, authentication, database, and (optionally) Calendar platform
- Legal requirements — if required by applicable law, regulation, or valid legal process
- Safety — to protect the rights, safety, and security of users or the App
We do not sell personal data and do not share it with data brokers.
9. Data retention and deletion
We retain your account profile and program data for as long as your account remains active and the App continues to store it to provide the service.
In-app deletion (recommended): while signed in, open the account menu and choose Delete account & data. After two confirmations and a fresh Google sign-in check, the App permanently deletes:
- Your Firebase profile and authentication account for this App
- All programs, workout progress, adjustments, and reschedule history
- Matching copies under production and staging database paths, when present
Synced Google Calendar events are not deleted automatically. Remove those events in Google Calendar if you no longer want them, and revoke the App at myaccount.google.com/permissions.
You may also request deletion by emailing andriykolihanov@gmail.com from the Google account email you use to sign in. We will delete or anonymize Firebase-stored profile and program data associated with your account within a reasonable period (typically within 30 days), unless we must retain limited records for security or legal reasons.
You can also:
- Revoke the App’s Google access at myaccount.google.com/permissions
- Delete synced workout events directly in Google Calendar
- Sign out of the App at any time
10. Security
We rely on Google Firebase authentication and access controls so that each user’s program data is stored under their authenticated user ID and protected by Firebase security rules. No method of transmission or storage is 100% secure; we work to reduce risk through provider security features and least-privilege access.
11. Children’s privacy
The App is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.
12. International users
The App may be accessed from different countries. Your information may be processed on servers operated by Google in locations outside your country of residence. Where required, appropriate safeguards are provided by Google’s contractual and compliance frameworks for their cloud services.
13. Changes to this policy
We may update this Privacy Policy to reflect product, legal, or operational changes. When we do, we will revise the “Last updated” date above. Material changes may also be highlighted on the App homepage. Continued use after an update constitutes acceptance of the revised policy.
14. Contact
Privacy / data requests / support:
andriykolihanov@gmail.com
App homepage: https://training-programs.com
This privacy policy URL: https://training-programs.com/privacy.html