---
title: "Trainloom trust centre | Product status, data boundaries and security"
description: "Plain-language trust information for Trainloom, including product stage, sync boundaries, backup paths, deletion flow and current security posture."
canonical: "https://trainloom.app/trust"
last_modified: "2026-04-21"
content_signal: "ai-train=no, search=yes, ai-input=yes"
agent_skills_index: "https://trainloom.app/.well-known/agent-skills/index.json"
sitemap: "https://trainloom.app/sitemap.xml"
robots: "https://trainloom.app/robots.txt"
llms: "https://trainloom.app/llms.txt"
llms_full: "https://trainloom.app/llms-full.txt"
privacy_policy: "https://trainloom.app/privacy"
terms_of_service: "https://trainloom.app/terms"
---

# Trainloom trust centre

We use our trust centre to explain our product stage, data boundaries, backup behaviour, deletion flow, and security posture in plain language.

## Product stage

- We are still pre-release.
- The first public iPhone release is planned for May 2026.
- Android support is planned for a later release.
- Please treat us as an early product rather than a mature live app.

## Trust signals

- Privacy, terms, and trust pages are published on the public site.
- The trust and download pages now show real in-app screenshots for exports, sync, deletion controls, progress, nutrition, and weekly review.
- We do not sell personal data.
- We do not use third-party advertising SDKs in the app.
- We do not load third-party analytics scripts, advertising pixels, or external font services on this website.
- Contact route for privacy, deletion, backup, export, or trust questions: `privacy@trainloom.app`

## Data boundaries

- We sync supported structured data such as profile and reminder settings, workouts, exercise logs, check-ins, measurements, PRs, meals, achievements, goals, plan data, and nutrition adjustments.
- We do not include progress photos or their local photo entries in our cloud sync today.
- Supported rows merge across devices using stable sync ids and timestamps.
- JSON export is the restore-grade structured-data backup that the app can import today.
- The ZIP export bundle includes the JSON backup, clean CSV exports, the schedule export, and readable local progress photo files from the device that created the export.
- If progress photos matter to you, keep your own ZIP backups because they are not part of our cloud sync today.

## Security posture

- SQLite on-device remains the source of truth; cloud sync is a backup and sync layer.
- Session tokens and similar secrets are stored in secure storage where supported.
- We use client-facing RPCs in an exposed `api` schema, keep sync snapshots in a non-exposed `private` schema, revoke direct table access for client-facing roles, and force row-level security on the snapshot table.
- We are not claiming a formal audit or certification here. This is a plain-language summary of the controls currently implemented in the codebase.

## Leaving with your data

- Export first from Settings → Exports in the app.
- Use JSON for structured-data restore.
- Use the ZIP bundle when you also want readable local progress photo files from the current device.
- Our in-app account deletion flow is designed to delete the cloud account and cloud backup, then clear local data on that device.
- Because progress photos are local-only, reinstalling or changing devices should be treated as a moment to verify your own local backups.

## Related pages

- Home: `https://trainloom.app/`
- Download: `https://trainloom.app/download`
- Privacy notice: `https://trainloom.app/privacy`
- Terms of use: `https://trainloom.app/terms`