SECURITY AND PRIVACY
How we protect your business and your subscribers’ data
Each workspace is isolated at the database layer, sign-in supports authenticator apps and passkeys, provider keys are encrypted, and sensitive actions are logged. Subscribers choose what their coaching data is used for and can export or delete it.
Sign-in security
- Authenticator app codes, required again for sensitive actions.
- Passkeys and one-time recovery codes.
- A list of signed-in devices, with remote sign-out.
Workspace isolation
Every trainer’s workspace is separated at the database layer, so one trainer’s subscribers, teaching and records are never visible to another. Subscribers see only their own records.
Keys, logs and transport
- Provider keys are encrypted at rest.
- Sensitive actions are recorded in audit logs.
- Every page is served over HTTPS with security headers.
- Private previews and app pages are kept out of search engines.
Consent, export and deletion
- Separate choices for coaching data, marketing and optional analytics.
- Coaching-data consent can be withdrawn with one action.
- Trainers and subscribers can download their data and request deletion.
AI disclosure
Subscribers accept a digital coaching disclosure when they join, and digital guidance is always labelled.
Platform operators and audit
Platform operators work in separate administration tools. Every operator change needs a fresh authenticator check, and operator actions are recorded in an audit log.
Payments
Subscribers pay by card through Stripe checkout, so card numbers are handled by the payment provider rather than stored in trainsyou. Payouts go only to a verified UAE bank account, with a short hold after the account changes.
Frequently asked questions
Are sensitive actions protected?
Yes. Sensitive actions ask for your authenticator code again and are recorded in an audit log.
Who can see my Trainer Brain?
You and team members whose role allows coaching screens. Your teaching is private to your workspace and never used for another trainer.
Can I download my data?
Yes. Trainers and subscribers can download their data and request deletion from their settings.
Who can see my subscribers’ data?
You and the team members whose role allows it. Other trainers cannot. Platform operators use separate, audited tools that require step-up sign-in.
Is wearable data sent to the AI?
Only when the subscriber’s permission and your policy allow that use.
Last updated
YOU ALREADY HAVE THE EXPERIENCE