Privacy Notice

Last updated: 22/09/2026

1. Data Controller

TrainPact processes your personal data as a data controller under Turkey's Personal Data Protection Law No. 6698 (KVKK), as described in this notice.

2. Personal Data We Process

  • Identity: First name, last name, and email address
  • Trainer information: Identity documents used for KYC and certification records
  • Contact details: Email and optional phone number
  • Activity records: Offers, beta purchase interest, planned milestones, and messages
  • Financial information: Card and IBAN details are not collected while the payment infrastructure is being updated
  • Technical information: IP address, browser, and device information
  • Marketing measurement: Campaign source from a registration link, which may be held temporarily in browser session storage until registration
  • Community information: Questions, answers, reports, helpful votes, and uploaded images
  • Optional check-in information: Program adherence, energy/motivation, perceived workout difficulty, and optional check-in notes

3. Why We Process Data

  • Creating and managing user accounts
  • Reviewing trainer identity, experience, and certifications
  • Measuring beta demand at the price shown in an offer
  • Tracking offers, planned milestones, and platform messages
  • Reviewing feedback and support records
  • Sending push and email notifications
  • Publishing and moderating community content and enforcing safety rules
  • Delivering and reviewing optional weekly check-ins between trainers and athletes
  • Meeting legal and security obligations

4. Data Transfers

We may share data with our hosting and database providers (Vercel and Neon), email provider (Resend), and competent public authorities where legally required. Data may be transferred outside Turkey subject to applicable KVKK safeguards.

Vercel Web Analytics may be used to measure aggregate visit trends on public pages. Optional Google Analytics runs only after explicit analytics consent and receives aggregate public-page, tool, and link-interaction measurements. Health inputs, email, account, order, and trainer identifiers are not sent; account dashboards, messages, orders, applications, and sensitive links are excluded from measurement.

Community images are stored in Vercel Blob and EXIF/location metadata is removed during processing. Anonymous posts do not expose account identity publicly, but admins can access it for moderation.

5. Retention

We retain personal data while your account is active and for any additional period required by law, security obligations, or legitimate product-validation needs. Some security, beta-demand, and messaging records may remain after account deletion where retention is necessary.

6. Your Rights

Under Article 11 of the KVKK, you may ask whether your data is processed, request information or correction, ask about its purpose and recipients, request deletion where applicable, and object to certain automated outcomes.

To exercise these rights, email kvkk@trainpact.co.

7. Contact

Privacy questions: kvkk@trainpact.co