Privacy Policy

Last updated 10 November 2026

The short version

Who we are

Traxs is run by Ed O'Neil in the United Kingdom ("we", "us"). We are the data controller for the personal data described here, and we'll register with the UK Information Commissioner's Office before Traxs opens to the public, and add our registration number here. Contact us about privacy, including any request or complaint, at privacy@traxx.fit.

This policy covers the Traxs iPhone app and this website.

What we collect

Your account

What you log

We treat body weight, weight goals, measurements, cardio, check-ins and anything about your health you write in a note as health data, which UK and EU law call special category data and some US states call consumer health data. We ask for your explicit consent in the app before you first log any of it. You can withdraw that consent at any time in Profile, which stops us collecting more, and you can delete any entry, or all of it, whenever you like.

Communities and coaching

Technical data

What we don't collect

No location except during a live run you start (see above), no contacts or advertising identifiers, no third-party analytics trackers, and no access to your photo library: if you choose a profile picture, iOS hands Traxs only that one photo, and the camera is used only if you take one. Face ID or Touch ID, if you turn on the app lock, is checked by your iPhone. Traxs never receives your face or fingerprint data, only whether the check passed.

Crash and error reports

If Traxs crashes or hits an error, it sends a report to Sentry, our crash reporting service, so we can fix it. A report says what went wrong and where in the app (including the screens you opened just before and, if you were tracking a run, its steps such as started, paused or finished, never where you were), the app version, your iPhone model and iOS version, and a random number for this install (so we can tell one person's crash from many). It never includes your name, email, workouts, notes, weights or anything from Apple Health, and we don't store your IP address. Reports are stored in the EU and deleted after at most 90 days.

Our servers send Sentry a report too when something goes wrong on them. These say only what went wrong and where in our code; emails and account IDs are removed first, and they never include anything about you or your training.

Reports are on unless you turn them off: Profile > Privacy and Data > Share Crash Reports. Turning them off doesn't change anything else in the app.

Where your data comes from

What you have to give us

You need a name and an email address (through Apple, Google or email sign-up) to have an account, because we can't run your account without them. Everything else is optional: you choose what to log, whether to join communities or have a coach, and whether to allow notifications.

Who can see your data

WhoWhat they can see
YouEverything in your account.
Members of a community you're inYour display name, role, and your leaderboard figures (sessions this week, streak, total sessions). The community feed shows your workouts from the last 90 days at the level you choose for that community: a summary by default (session name, what kind of session it was, time, how many sets, no weights), or optionally your personal bests, or each exercise with your top set. Runs, rides and other cardio you log or track in Traxs show too: the activity, distance, time and pace, never your route, and never workouts brought in from Apple Health. Also streak milestones, goals you reach (the target only, such as "5 km in 24:59", never the goal's name, and never a weight goal; switch off sharing milestones in Privacy to stop these), when you joined, and reactions. In a community challenge you join, your figure for it (sessions, minutes, distance, days or, for a step challenge, your total steps from Apple Health; 16 and 17 year olds take part in step challenges but are never on the board). If the community runs a Workout of the Day, the results you choose to post (done, your time, or your rounds and reps, Rx or Scaled) and the points they earn. Never your body data or check-ins. Leaving a community removes your feed posts and results from it. If you join one of its challenges, members see your score for that challenge only (sessions, active minutes, days trained, or distance for one activity), until you leave it.
Anyone using TraxsYour public profile, which anyone can open by tapping your picture or name: your username, display name, profile picture (if you add one; it also shows next to your name on leaderboards, member lists and feeds), the month you joined, whether your account is public or private, how many followers you have and how many people you follow (numbers only, never who), your level (unless you switch off Show My Level), and your total sessions, week streak, the badges you've earned, and totals for each activity you've done, such as runs and km run, weights sessions, sets and weight lifted in all, classes, Hyrox sessions, stretches and yoga sessions (unless you switch off Show My Figures in Privacy). Your best running times (1k to marathon) show only if you switch on Show My Running Bests; your heaviest set on the big lifts only with Show My Lifting Bests; your best Hyrox time and benchmark scores only with Show My Hyrox and Class Bests; and your fastest ride, row and swim only with Show My Cardio Bests. Your profile also shows your cardio other than runs (sessions, hours, distance and the kinds you do most) unless you've turned off Show My Figures. If you share a new running best to your feed, it says you set one, and shows the time only if you choose. Your workouts only ever show to your followers, at the level you choose, or not at all. They can also find you by searching for your name or username. You can switch this off in Profile, then Privacy (Show Me in Search), and then nobody can find you by search; people you already know can still reach you through an invite link or code. Your email is never shown or searchable. Also communities set to Public: their name, town, type and member count, never who the members are.
People who follow youIf your account is private, only people whose request you accept. If it's public, anyone using Traxs can follow you without asking (and anyone waiting is accepted when you switch to public). New accounts for people 18 or over start public and those for 16 and 17 year olds start private; you choose at sign-up and can change it any time in Profile, then Privacy. Accounts from before October 2026 stay private unless you choose. Switching back to private keeps your followers. They see your workouts from the last 90 days at the level you choose for followers (a summary by default; optionally personal bests or each exercise), your runs and cardio logged or tracked in Traxs (activity, distance, time and pace, and the route only if you chose to show it, without your privacy zone at the start and finish), your streak milestones and goals you reach (as for communities), and reactions. Never your body data, check-ins or stats. You can remove a follower or block someone at any time; they aren't told.
Others in a Traxs challengeHow many people are taking part and have finished, never who. If the challenge has a leaderboard and you're in its top 10, your display name and your figure for its first target (your step total, in a step challenge), unless you hide yourself from it on the challenge page. 16 and 17 year olds are never on a step challenge's leaderboard. People who follow you (and whom you've accepted) can see whether you're taking part and how far you've got.
Anyone using Traxs (Plan Store)If you're an invited Plan Store coach: your coach page (display name, username, profile picture, headline, bio and your code), your plans in the Store, how many people have each plan, and what share of votes recommend them. If you vote on a Store plan (thumbs up or down): your display name, your vote and anything you write, shown on that plan. Star ratings from older versions of the app were turned into votes. Coaches don't see who got or started their plans, only how many, and how many came through their code or link.
Anyone on the web (Plan Store coaches)If you're a Plan Store coach, your coach page is also on our website at your link (traxx.fit/c/ and your username), so anyone can see it without Traxs and search engines can find it: your display name, username, profile picture, headline, what you coach, bio, your code, your plans in the Store, whether you take 1:1 clients (with your places left if you show them, what you offer and your price note), what share of votes recommend them, and, once you reach 50, how many people have got your plans and how many follow you, in steps (50+, 100+, 250+, 500+, 1,500+), never the exact number. When someone shares a link to your page or one of your plans, the preview shows a picture we make from the same details (your name, username, photo, headline, what you coach and 1:1 places, or the plan's name, details and price). It goes when you stop being a coach or delete your account. Nobody else's details are ever on the website.
Your coachOnly what you allow when you accept their invite: any of workouts, health data (body weight, measurements, cardio, steps, sleep, readiness and training load; off until you switch it on), check-ins, your plan (including your week: each day's session and anything after it, such as a stretch or recovery, done, missed or moved; and how it's going: sessions done against planned, how your runs compared with the plan's paces, whether your main lifts are going up, and a short summary worked out from those). From what you share, Traxs also gives your coach a summary to help them look after you: when you last trained, a session you cut short or a big drop on a lift, a check-in that felt too hard or mentions pain, how your goals are going, your training load (worked out from your sessions, and your cardio if you share health data), and messages waiting for their reply. If you share your health data, your phone also sends a short summary of your readiness each day you open Traxs: the score, time asleep, your HRV and resting heart rate against your usual (not the readings themselves), your load ratio, and whether your temperature, breathing rate or blood oxygen asleep was off. Your coach sees it to adjust your plan and may be told if one has been off two nights running or your readiness has been low for three days. It's kept for 60 days and deleted straight away if you switch health data off, end coaching or withdraw health consent. If a signal was off during the week, your weekly check-in asks how you were, and your coach sees your answer with it. It only uses what you already let them see and your goals (including goals by a date; they see a weight goal only if you also let them see your health data, and a race goal's progress from your runs only with health data too). A coach who can see your goals can send you a goal, or suggest a change to one of yours, which only counts if you accept; we keep what they sent, their note and your answer. You can change this or end coaching at any time, and they lose access straight away. Coaches can keep private notes about their clients in Traxs, which only the coach can see; they're deleted if either of you deletes your account. A coach can also give you Premium while they coach you; it ends when coaching does. Coaches are responsible for how they use what you share with them outside Traxs.
UsWe can access data to run and support Traxs, for example to give someone Premium, fix a fault or remove a community that breaks our terms. Our admin tools show account details (name, email, sign-in method, when you joined, when you last signed in and the last day you opened the app), your plan and training totals (how many workouts, your streak, when you last trained), never your workouts or body data themselves. We also look at app-wide totals worked out from everyone's data, such as how many people trained this week, how many use each feature (including whether people log body data, never what they log) and how many keep training after joining. These are counts and percentages only, never names, and admin and demo accounts are left out.

Why we use it (lawful bases)

We don't use your data for advertising, sell it, share it with data brokers, or make automated decisions about you that have legal or similarly significant effects. Leaderboards simply count your sessions; they don't profile you.

Services we use

These companies process data for us under data processing terms that require them to protect it to at least the standard in this policy, and to use it only to provide their service to us:

Some of these services may process data outside the UK and the EU, including in the USA. Where they do, it's protected by approved safeguards: the UK-US data bridge or EU-US Data Privacy Framework where the company is certified, or otherwise the UK International Data Transfer Addendum or the EU Standard Contractual Clauses. Ask us for details.

We'll update this list before we start using any new service that handles your data.

How long we keep it

We keep your data until you delete it or delete your account. Profile > Delete Account permanently removes your account and everything in it straight away, including your workouts, body data, check-ins, coaching links, push tokens and leaderboard entries. Communities you own on your own are deleted too, and so are your coaching links and the messages in them. If others are in one, you're asked to hand it over or delete it first. Server logs expire within 30 days.

Your rights

Under UK and EU data protection law you can:

For anything you can't do in the app, email us. We may need to confirm it's really you. We'll respond within one month, and tell you if a complex request needs longer (up to two more months). It's free.

Complaints

If you're unhappy with how we've handled your data, please tell us first at the email address above. We'll acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome without undue delay. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk. If you live in the EU, you can complain to the data protection authority in your country.

Security

Data is encrypted in transit and at rest. Database rules check every read and write, so nobody can see your data unless you've shared it with them. Actions that must be trusted, such as joining a community or deleting an account, run on our server rather than your phone.

If you're in the United States

This website

This website doesn't use advertising or analytics cookies, or trackers. The web app (traxx.fit/app) keeps you signed in using your browser's own storage, and remembers small choices such as which parts of its sidebar you've folded; these stay in your browser, are needed for it to work, and are cleared when you sign out or clear your browser's data. On an iPhone or iPad, the website and the web app show a banner about getting the app; if you close it, the date you closed it is kept in your browser so it stays hidden for 30 days, and isn't sent to us. Signing in on the web goes through Google Firebase (a page at traxs-5599b.firebaseapp.com, for Sign in with Apple and Google). Links shared from Traxs (invites, codes, plans and sessions) open the app if you have it, or a page here that says what the link is; any code in an invite or gift link is shown on that page by your own browser and isn't sent to us. Plan links show the plan, drawn by our server from the Plan Store. Our hosting provider (Google Firebase) keeps basic server logs, such as IP addresses, for a short time to deliver the pages and keep them secure.

Coach applications (the form on our For coaches page, 18 or over only): your name, email address, what you coach, your qualifications, an optional link to your work, and what you tell us about your clients. We use them only to review your application and reply to you (legitimate interests, and steps you asked us to take before working together). Only Traxs admins can see them, and we delete them 12 months after you send one. If you become a Store coach, your coach profile is covered by the rest of this policy.

Contact messages (the form on our Help page): your name, email address, what it's about and your message. We use them only to reply to you and sort out what you asked (legitimate interests, or steps you asked us to take, such as deleting your account). Only Traxs admins can see them, and we delete them 12 months after you send one.

The Plan Store and plan pages on this website show only what's public in the Store: each plan's name, description, coach's name, price and week 1.

If something goes wrong

If a security breach is likely to put you at risk, we'll tell you without undue delay, along with what happened and what we're doing about it. We'll also tell the regulators that the law requires us to.

Age

Traxs is for people aged 16 and over. If you believe someone younger has an account, email us and we'll delete it.

If you're 16 or 17, we follow the UK Information Commissioner's Children's Code, so Traxs starts with the most private settings, and tells you about them in plain words when you sign up (How We Look After You, also in Profile, then Privacy):

Accounts that were 16 or 17 before these settings arrived (November 2026) were moved to them once, except for anything you'd already chosen, and you were told in the app. When you turn 18, tap I'm 18 Now in Privacy: comparisons open, and your settings stay as they are until you change them.

Changes

If we change this policy, we'll update the date at the top. If a change affects what we collect or who can see it, we'll tell you in the app before it takes effect.