Your training data stays focused on your training.

Account and training data

We store your account details, profile, username, trainer or friend connections, programmes, workouts, sets, repetitions, training weights, personal bests and any body weight or body-fat check-ins you choose to record. If you add a profile picture, it is stored privately and shown only to you, accepted friends, and linked trainer or client accounts. Your password is handled by our authentication provider and is not visible to MCD Train. Personal trainers can also upload a business logo. That logo is shown only in the trainer's workspace and to clients linked to that trainer, always alongside the MCD Train brand. If you lose signal during an active workout, the app temporarily stores that workout, any unsynced sets and any set corrections on your device, then removes the offline copy after it syncs. Completed training dates and earned progress badges are stored so MCD Train can show your calendar, streaks, milestones and personal-best achievements. Workout routines that you name and save for reuse are stored privately with their exercise order, targets and rest time until you delete them. While you are actively using the app, MCD Train records a recent activity timestamp so connected people can see an online indicator.

Apple Health data

If you choose to connect Apple Health, the iPhone app can read workout sessions and their duration, active energy, distance and heart-rate summaries. It can also save completed MCD Train workout sessions to Apple Health. Detailed lifting sets, repetitions and weights remain in MCD Train.

MCD Train stores only the workout summary needed to show and de-duplicate synced progress. It does not upload raw heart-rate samples or route data. Health information is not used for advertising, sold, or shared with data brokers. Imported health summaries are not shown to friends or personal trainers by default.

Your control

Apple asks separately for permission to read and write each health data type. You can refuse any permission and continue using MCD Train. You can change Health access in iPhone Settings or the Health app, disconnect from inside MCD Train, and delete the health summaries stored in your MCD Train account. Workouts already saved to Apple Health remain under your control in Apple Health.

Android app

The Android app connects securely to the same MCD Train account and training service as the web app. Its first release does not request Health Connect, location, contacts, camera, microphone or advertising permissions. If you choose to upload a profile image, trainer logo or progress photo, Android's system file picker gives MCD Train access only to the file you select.

Strava data

If you connect Strava, you can choose to view recent activity summaries in MCD Train, export completed MCD Train sessions to Strava, or both. When you press Sync now, MCD Train requests up to 30 days of activity name and type, start time, duration, distance, and average or maximum heart rate when Strava provides it. These imported summaries are held only in your current app session and are not stored in the MCD Train database. They disappear when the page or app session is reloaded. MCD Train does not request route coordinates, raw heart-rate samples or private activities.

Strava access and refresh tokens are encrypted at rest and are never sent to the MCD Train browser interface. For exported workouts, MCD Train keeps only an MCD Train-owned session marker so the same workout is not sent twice; it does not retain the Strava activity returned by the export. Strava data is never shown to friends or personal trainers, used for advertising or analytics, or supplied to an AI model. Strava may monitor use of its API as described in its policies.

You can change sync preferences or disconnect at any time from Connections. Disconnecting revokes access with Strava and deletes the local connection, encrypted tokens and export markers. If you revoke access in Strava, Strava's deauthorization webhook tells MCD Train to perform the same deletion. Activities already sent to Strava remain under your control in Strava. You can also ask us to delete your integration data by emailing hello@mcdtrain.com.

Sharing and security

Accepted friends can see completed workout summaries in their friends feed, including exercises, sets, repetitions, training weights, duration, volume and personal-best progress. Friends can add one reaction and post comments on a completed workout. Reactions, comment text and the commenter's display name are visible to the workout owner's accepted friends; profile pictures remain limited to people who are accepted friends with one another. Comment authors can remove their own comments. Removing a friend removes access to that friend's workout conversation. A personal trainer can search for an existing account by username, but receives no access to its email, profile picture or training data unless that user accepts the coaching request. Once a coaching connection is confirmed, the trainer and client can exchange private messages. Those messages are visible only to that linked trainer and client and are removed if either account is deleted. Online status is shown only to accepted friends and confirmed trainer/client connections. It expires automatically shortly after the app stops being actively used and is never shown in public username search. Friend and trainer features never grant access to your Apple Health or imported Strava records. Body weight and body-fat check-ins are private to the account owner and are not displayed to friends, workout partners, clients or personal trainers. We use authenticated, encrypted requests and owner-scoped records to protect synced data. We disclose information only to service providers needed to run MCD Train, when you direct us to, or where the law requires it. Cloudflare hosts the MCD Train application and database, Supabase provides account authentication, and Resend delivers account email. Those providers process data only to provide their services to MCD Train.

Questions or deletion requests

Contact hello@mcdtrain.com or visit our support page. You may request access or correction of your personal data, or delete your account from the profile menu in the app. Our account deletion page explains the process. We may update this notice as integrations change; the effective date above will show the latest version.