Privacy policy

Version 1.3 · last updated 29 October 2026

trail is run by Vaibhav Sharma ("we"). This policy explains what personal data trail collects, why, who can see it, and your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

• Account details: name, email address, password (stored only in scrambled form by our login provider), and whether you are a coach, a client or an independent athlete.
• Details your coach adds: phone number, age (as a birth year), height, gender and starting weight.
• Your plan and progress: diet, workouts, medicines and supplements, what you tick off each day, the weights and reps you log, body weight and measurements.
• Weekly check-ins: your ratings and notes, and progress photos if you choose to add them.
• Messages between you and your coach, and your coach's private notes about you.
• Plan and payment records your coach keeps (plan dates, amounts, how it was paid). We do not take or store card or bank details.
• Coaches' payment details: the UPI ID and payee name a coach chooses to add, used only to make payment links for their own clients. Payments go directly between client and coach; trail never handles money.
• Community posts and comments you choose to write, the community name you pick, and reports you make about posts.
• Reminder settings (times and time zone) and a technical address for your phone's notifications.

Medicines, supplements, body measurements and photos are sensitive health information. We collect only what the app needs to work.

Why we use it

Only to run trail for you: to show your plan, track your progress, let you and your coach talk, and send the reminders you ask for. We never sell your data, never use it for advertising, and never share it with anyone except as described here.

Your consent

We process your data on the basis of your consent, which you give when you create your account or first log in. You can withdraw it at any time by deleting your account (or, for clients, by asking your coach to remove you). Withdrawing consent stops all further processing.

Who can see your data

• Clients: you and your own coach only. Other coaches and clients can never see it.
• Independent athletes: only you.
• Coaches: you see only the clients you added.
• Community: anything you post or comment in the Community tab is seen by everyone using trail, shown with your community name (your first name and last initial unless you choose another). Your email is never shown. Don't post private health details there. You can delete your own posts and comments at any time.
• Service providers who run the app for us, under their own security commitments: Supabase (database, login and file storage; servers in Tokyo, Japan), Netlify (hosts the website), the notification services of Google, Apple and Mozilla (deliver reminders; they see only the reminder text), and an error-reporting service if enabled (receives technical error details with personal data removed).

Your data may be stored and processed outside India by these providers. We will follow any restrictions the Government of India places on such transfers.

Automated accounts and ads

Some Community posts come from accounts marked Automated. They share checked fitness facts with their source; they are not real people. Ads in the Community are marked Sponsored, are text only, and are chosen without using your personal or health data. Advertisers learn nothing about you; we only count how many times an ad was shown and tapped.

Google ads (only if you allow them). The Community may show an ad supplied by Google. It stays switched off until you tap “Show ads” in the Community. It runs in a sealed box on a separate address (ads.trailapp.fit) that is given none of your trail data: not your name, email, plan, progress, posts or which pages you open. Google can still set its own cookies for that box and see what any website shows it (such as your device type and approximate location), under Google's own ad policy. We ask Google for non-personalised ads only. You can turn ads off again from the Community at any time, and the rest of trail works the same either way.

How long we keep it

For as long as your account exists. When an account is deleted, its data is deleted straight away; copies in our backups are overwritten within 30 days.

Your rights

• See and download your data: use "Download my data" in the app.
• Correct it: in the app, or ask your coach.
• Erase it: coaches and athletes can delete their account in the app; clients can ask their coach or write to us.
• Nominate someone to act for you if you die or cannot act yourself.
• Complain: to our grievance officer below. If you are not satisfied, you can complain to the Data Protection Board of India.

Security

Data is encrypted in transit and at rest. Every record is locked to its owner and their coach by the database itself, and we test that regularly. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.

Children

trail is for people aged 18 and over. Coaches must not add anyone younger without the verifiable consent of a parent or guardian.

Grievance officer and contact

Vaibhav Sharma · versus@trailapp.fit. We reply within 30 days.

Changes

If this policy changes, the app will ask you to read and agree to the new version.