Who operates TiloTrack
TiloTrack is operated by ANTON FAIBYSHEV FOP ("we", "us", or "our"), doing business as TiloTrack.
Registered address: 15 Kachanivska Street, Kharkiv, Kharkiv Region, 61124, Ukraine.
For privacy questions about this policy or how we handle your information, contact us at [email protected].
You can request account deletion in the app, through our Contact Center at https://contact.tilotrack.app/delete-account, or by emailing [email protected].
Information you provide
We collect information you choose to enter or upload while using TiloTrack. This may include profile details, training logs, nutrition entries, measurements, goals and other content you add to the app.
You control much of what you share. Some information may be visible to a connected trainer only when you use trainer-related features and choose to share data within that relationship.
Account and authentication information
When you create an account, we may collect identifiers needed to authenticate you and operate your account, such as an email address, account ID, sign-in method details and basic account preferences.
We use this information to provide access to your data, secure your account, help you recover access when needed and communicate important service-related messages.
Workout and exercise activity
TiloTrack is designed to help you record workouts, exercises, sets, reps, weights, duration and related training activity over time.
This information is stored so you can review history, track progress and, where applicable, share relevant training data with a connected trainer.
Body measurements
You may log body measurements such as weight, body circumferences and other metrics you choose to track.
Measurement data is used to show trends, comparisons and progress views inside the app. It remains part of your personal fitness record unless you delete it or your account.
Nutrition tracking
If you use nutrition features, we may process food entries, calories, macronutrients and related notes you log.
Nutrition information is used to support tracking, summaries and insights within the app. It is not intended to provide medical or dietary advice.
Goals and progress data
You may set goals related to training, body composition, habits or other fitness objectives supported by the product.
We use goal and progress data to display status, trends and historical context so you can understand how your activity changes over weeks and months.
Health-related and sensitive data
Some fitness records may constitute data concerning health when they reveal information about your physical health. For TiloTrack, this may include the weight, height, body measurements and related progress information you choose to provide. We do not treat every exercise or nutrition entry as medical data, and TiloTrack does not use these records to diagnose health conditions.
We process account information and the fitness-tracking records needed to provide the features you request under Article 6(1)(b) GDPR. Where information qualifies as special-category health data, we additionally rely on your explicit consent under Article 9(2)(a).
In the MVP, we request this consent through an unticked checkbox when you choose to add weight and height during onboarding or, if consent has not already been recorded, before you save your first body measurement. The consent covers storing and using the fitness information you choose to add for history, progress and tracking features and, if you later choose to connect with a trainer, making relevant records available within that relationship.
We record the consent status, date and wording version under the health_tracking preference. After consent has been recorded, the checkbox is not shown again unless consent is withdrawn or the purpose or scope changes materially.
Consent is separate from accepting the Terms and can be withdrawn at any time by contacting us at [email protected]. Withdrawal stops future processing based on consent but does not automatically delete your account or existing records. Deletion is a separate request.
TiloTrack does not use your workout, body, photo or nutrition data for third-party advertising, and we do not sell that data to data brokers.
Trainer and client relationships
If you choose to connect with a trainer through TiloTrack, the service may make information needed for that relationship available to the trainer, including assigned workout plans, training history, progress metrics, body measurements, nutrition records, check-ins, plan updates, review notes and related activity.
Creating the trainer connection is your deliberate request to use the collaboration feature. The connection is provided under Article 6(1)(b) GDPR. Where relevant records qualify as special-category health data, their use within a trainer relationship is included in the health_tracking consent described above and only applies to a trainer you choose to connect.
You can end the connection using available product controls or by contacting us. Ending the connection stops the trainer's access through TiloTrack to current and future shared account data, but it does not withdraw your personal health_tracking consent or delete your private history. You may withdraw that consent or request deletion separately.
TiloTrack does not currently offer public profiles, social feeds or open community features. Trainers and athletes should share only information appropriate to their coaching relationship.
Uploaded images and progress photos
Where the product supports image uploads, such as progress photos or related media, we process the files you choose to upload.
Uploaded images are stored to provide the feature you requested. Do not upload content you do not have the right to share or that contains sensitive information you do not want stored in the service.
Technical and analytics data
We may collect technical information needed to operate, secure and improve TiloTrack, such as device type, app version, operating system, language, time zone, approximate usage events, session activity, crash reports, error logs and diagnostic data.
Where analytics or diagnostics are used, we aim to keep them proportionate and focused on understanding product performance, reliability and security. On the website, Google Tag Manager and Google Analytics run only after you accept analytics cookies.
We do not sell your personal information.
Why we process information
- Create and manage your account
- Provide, maintain and improve TiloTrack
- Save, sync, organize and display workouts, body data, nutrition data, plans and progress
- Enable trainer-athlete collaboration features that you choose to use
- Personalize your experience, settings and progress views
- Maintain, secure, debug and improve the app and website
- Analyze product usage and performance
- Respond to support requests and communicate service updates
- Monitor reliability, prevent abuse and enforce our terms
- Comply with applicable legal obligations where relevant
Legal bases for processing
If you are in the EEA or UK, the basis depends on the processing purpose. Article 6 provides the lawful basis for personal-data processing; if information is special-category health data, a separate Article 9 condition is also required.
Where we rely on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal. We do not treat acceptance of the Terms, account creation, a preselected checkbox or continued use of TiloTrack as explicit consent to process health data.
- Account, authentication, workout and nutrition tracking, progress views, and a trainer connection you request: performance of our contract with you under Article 6(1)(b)
- Weight, height, body measurements and related progress information that qualify as special-category health data: explicit consent under Article 9(2)(a), in addition to the applicable Article 6 basis
- Making relevant records available within a trainer relationship you deliberately create: Article 6(1)(b), with the health_tracking consent applying where those records qualify as special-category health data
- Security, abuse prevention, debugging and service reliability: our legitimate interests under Article 6(1)(f), balanced against your rights; we avoid using health-content data for these purposes unless necessary
- Service and account communications: Article 6(1)(b); notices required by law: Article 6(1)(c)
- Optional marketing or another optional purpose: consent under Article 6(1)(a) where required
- Retention or disclosure required by law: Article 6(1)(c); establishing, exercising or defending legal claims involving special-category data only where Article 9(2)(f) applies
Data retention
We retain information for as long as needed to provide the service, maintain your account, comply with legal obligations, resolve disputes and enforce agreements.
In practice, this usually means:
- Account data is kept while your account is active
- Workout, body, nutrition and progress data is kept until you delete it or ask us to delete your account, unless retention is legally required
- Technical logs and diagnostics may be kept for a shorter retention period for reliability and security purposes
- Backup copies may remain for a limited period before they are automatically overwritten
Security
We take reasonable administrative, technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse or alteration.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to improve safeguards as the product and infrastructure evolve.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to certain processing of your personal information, receive a portable copy of your data, or withdraw consent where processing is based on consent.
For the MVP, you may withdraw health_tracking consent by contacting us at [email protected]. Withdrawal stops future processing that relies on that consent after we complete the request. Withdrawal and deletion are separate choices: withdrawing consent does not automatically delete your account or existing records, and you may request deletion separately.
You may also have the right to lodge a complaint with a supervisory authority. To exercise applicable rights, contact us at [email protected] or use the in-app and web tools we provide through our Contact Center at https://contact.tilotrack.app. We may need to verify your request before responding.
Account and data deletion
You may delete individual entries within the app where the product provides that option.
You can request account deletion at any time:
When your account is deleted, we will delete or de-identify personal data associated with the account, unless we need to keep certain data for legal, security, fraud prevention or record-keeping reasons.
- In the app at: Me > Account > Delete account
- Through our Contact Center at: https://contact.tilotrack.app/delete-account
- By contacting us at: [email protected]
Children's privacy
TiloTrack is not intended for children under 16, or any higher minimum age required by local law.
We do not knowingly collect personal information from children without appropriate authorization where required.
If you believe a child has provided personal information without proper consent, contact us at [email protected] and we will review the request.
International data processing
TiloTrack may process and store information using service providers located in countries other than your own.
Primary hosting region: OVHcloud, European Union (France).
If we transfer personal data outside the EEA, UK or Switzerland, we will use appropriate safeguards where required by law, such as the European Commission's Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms provided by our service providers.
By using the service, you understand that your information may be processed in locations that may have different data protection rules than your country of residence.
Automated decision-making
TiloTrack does not currently make decisions based solely on automated processing that produce legal or similarly significant effects concerning you.
Future features
TiloTrack is an evolving product. In the future, we may add features such as subscriptions, Apple Health or wearable integrations, richer communications tools or community features.
If those changes affect how we collect or use personal data, we will update this Privacy Policy and, where required, notify you or ask for additional permissions.
Updates to this policy
We may update this Privacy Policy from time to time to reflect product changes, legal requirements or operational practices.
When we make material changes, we will take reasonable steps to notify you, such as updating the date at the top of this page or providing an in-app or email notice where appropriate. If a change introduces a new health-data purpose or materially changes the scope of consent, we will ask for new explicit consent before that processing begins.
Contact
For privacy questions, requests or concerns, contact us at [email protected].
Operator: ANTON FAIBYSHEV FOP, 15 Kachanivska Street, Kharkiv, Kharkiv Region, 61124, Ukraine.
Support and privacy requests are also available through our Contact Center at https://contact.tilotrack.app.