This Privacy Policy explains how Webita Agency OÜ (Järvevana tee 9, Tallinn, 11314, Estonia; contact: info@traingen.eu) processes personal data through traingen.eu and the TrainGen app (app.traingen.eu). It includes health data processing where users explicitly authorize integrations (for example Apple Health/HealthKit and Google Health Connect).
Webita Agency OÜ, Järvevana tee 9, Tallinn, 11314, Estonia. VAT ID: EE102810237. Contact: info@traingen.eu
Depending on the features used, we may access/collect:
We use this data to deliver app features, personalize plans/workouts, show progress, manage subscriptions/payments, keep the service secure, prevent abuse, and provide support.
Health data is processed only to provide requested fitness and coaching features (activity monitoring, progress analysis, and workout personalization). We do not sell health data and do not use it for personalized advertising. Access depends on device permissions and can be revoked at any time in system/app settings.
The public website traingen.eu uses necessary cookies and, only with consent, Google Analytics 4 (Google Ireland Limited) to measure visits, pages viewed, traffic sources, campaigns, browser and device information. The legal basis is consent (Art. 6(1)(a) GDPR). The Google tag is not loaded before acceptance. We do not send account data, health data or app form contents to Analytics. Google Signals and advertising personalization are disabled. The _ga and _ga_* cookies last up to 180 days; your choice is remembered in your browser for 180 days. You can refuse or withdraw consent through “Cookie preferences” in the footer without limiting use of the site. Withdrawal stops future collection and removes Analytics cookies accessible to the site. Google may process data outside the EEA under the safeguards described in its documentation. Google Privacy Policy · Google Data Processing Terms.
Contract performance for requested services (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c)), legitimate interest for service security and abuse prevention (Art. 6(1)(f)), and where required, user consent for specific integrations and health data (Art. 6(1)(a), Art. 9(2)(a)).
We retain data only as long as needed for the purposes above:
Users can request deletion of data and/or account by:
After identity/account verification, we delete or anonymize data not subject to legal retention. Data required by law (for example fiscal/accounting records) is retained only for the legally required period.
We rely on hosting/CDN providers and security tooling acting as processors under contractual terms aligned with GDPR. Payments are handled by external providers such as Stripe.
Where non-EEA countries are involved, we apply appropriate safeguards (standard contractual clauses or equivalent instruments) in compliance with GDPR Chapter V.
You may exercise rights under Arts. 15–22 GDPR (access, rectification, erasure, restriction, portability, objection) by writing to info@traingen.eu. You have the right to lodge a complaint with the competent supervisory authority.
We adopt appropriate technical and organizational measures to protect the integrity and confidentiality of processed data.
We may update this notice to reflect regulatory or technical changes. Last update: 10/10/2026.
