Privacy Policy

Training Agents is operated by SALT KREATİF REKLAM TİCARET LİMİTED ŞİRKETİ — Çınarlı Mah. 1572 Sok. No:33, 35170 Konak / İzmir, Türkiye. Privacy questions: info@saltajans.com · +90 232 462 10 55

This policy covers the trainingagentsapp.com website and our iOS and Android apps. The legal grounds and the detail of your rights are in the KVKK privacy notice; this text says the same things more plainly.

This English text is a courtesy translation. In case of any conflict, the Turkish version prevails.

Account: first and last name, email, password (encrypted), date of birth, gender.

Training profile: goal, level, equipment, days per week, discipline.

Health and physical data (with your explicit consent): weight, height, resting heart rate, injury history, health restrictions.

Watch and device data (only if you connect a source, and with its own separate consent): the duration, distance, heart rate, power, elevation and calories of your workouts. Read from your phone's health store (Health Connect on Android, Apple Health on iPhone). Nothing is ever WRITTEN to the health store.

Training records: completed sessions, weights and reps, progress.

Messages: support requests.

Purchases: plan, term, amount, discount code. Your card details never reach us; payment is handled by iyzico.

Billing details: name, phone, address, city and national identity number — only for the payment types the payment institution requires them for and to issue invoices. Held in a separate, access-restricted record.

Device and browser type, app version, operating system.

Usage data: which screens were opened, error logs.

Cookies and similar technologies — see the Cookie Policy.

No precise location, contacts, photo library or microphone data.

From your phone's health store we read WORKOUT records only, and only if you connect your watch. Other health data such as steps, sleep, blood pressure, blood glucose or menstrual cycle is never accessed; those permissions are never requested.

Card number, CVV and expiry never reach us.

Our live-traffic panel does not store your IP; it becomes a pseudonym that changes daily and is deleted after 60 minutes.

To create your account and provide the service; to generate your personal program with Ai and update it weekly.

To take payment and issue invoices.

To resolve support requests; to prevent fraud and abuse; to measure and improve the service; to meet our legal obligations.

To send campaigns and announcements if you have opted in.

Your health and physical data is used ONLY to generate your program; never for advertising or profiling, and never sold to third parties.

iyzico: name, email, phone, address, identity number and amount — for payment and refunds.

Infrastructure providers: Anthropic's Ai service for program generation, Resend for email delivery, Supabase for database and file storage.

Accountant and e-invoicing provider: invoice data — legal obligation. Public authorities: data requested — legal obligation.

We do not sell your data and do not share it with advertising networks.

Our application server is in Türkiye. Our database and file storage run on Supabase in the Frankfurt region of Germany: all account, training, health and billing data is stored there.

The providers we use for program generation and email delivery also have servers outside Türkiye.

These transfers are made under KVKK art. 9 with the required safeguards. Transferring health data to the Ai infrastructure additionally requires your explicit consent.

Our support team can open your account in read-only mode to resolve your problem. Nothing can be changed in that mode.

Every such opening is logged with who did it and when, and the logs are kept for 2 years.

We keep your data while your account is open. When you delete your account, your profile, health and training data is deleted within 30 days.

We are required to keep invoice and payment records for 10 years, and agreement acceptance records for 10 years.

The full table is in the KVKK privacy notice.

Data is encrypted in transit with TLS; passwords are stored hashed and no plain-text password is kept anywhere.

Access to health data is limited by role-based authorisation and access is logged.

No system is completely secure; in the event of a breach we notify you and the competent authority within the statutory deadlines.

You have the right to access, correct and delete your data, to object to processing and to withdraw consent. You can exercise these under KVKK in Türkiye, the GDPR in the European Union, and the law of your own country, by writing to info@saltajans.com. We respond within 30 days.

You can delete your account and data directly at /hesap-silme. That page is also declared to the App Store and Google Play.

Our service is not directed at people under 18. If we learn we have collected data from someone under 18, we delete it.

When we update this policy we publish the new version and date here and announce material changes by email or in-app notice.