Privacy Policy

Effective date: 8 October 2026

1. Who we are

PromptTrain is an iPhone app that builds workouts around the equipment you have. It is run by Apps by Ash Ltd ("we", "us"). We are the data controller for the information described below. You can reach us at appsbyashltd@gmail.com.

2. What we collect

We collect only what the app uses to work. Here is the full list.

What	Details	Why
Account	You sign in with Google or Apple. We receive your email address, your name if the provider shares it, and a unique account ID. We never see your Google or Apple password.	To create and secure your account.
Profile	Age range, sex, height, weight, training goal, your step and weekly goals, the wearable brand and model if you pick one, and any weight or body fat entries you log. We keep a history of changes to these so the app can show trends.	To size your sessions and track progress.
Gyms and equipment	The gyms you save (home, travel and so on) and the equipment in each.	To build sessions you can do with what you have.
Training records	Sessions you build or complete, exercise ratings, favourite and disliked exercises, and session titles.	To show history, streaks and progress, and to adapt future sessions.
Apple Health data (optional)	If you allow it, the app reads steps, heart rate, heart rate variability, sleep, resting heart rate and respiratory rate. It does not write anything to Apple Health. See section 4.	To personalise sessions and build your recovery score.
Equipment photos (optional)	Photos you take or choose when you scan your gym, up to six per scan. See section 5.	To work out what equipment you have.
Assistant chat	The questions you ask the assistant, plus a short summary of your profile and training so answers fit you. See section 5.	To answer your questions.
Notifications	A push token for your device and its platform, and when we last saw it or sent you a notification.	To send reminders you have not turned off.
Subscription	Your plan, status, product, store transaction ID and renewal date. We do not receive or store your card details. Apple handles payment.	To unlock the features you have paid for.
Usage counters	How many AI requests, equipment scans and session builds your account has used.	To apply plan limits.
Crash reports	If the app crashes or hits an error, a report with technical details about the error and your device, sent to Firebase Crashlytics.	To find and fix bugs.
Install identifier	A random ID generated on your device when the app is installed, stored only in hashed form.	To prevent abuse of free allowances.

We do not run advertising, and the app does not include advertising or third-party analytics tools.

3. Who processes your data

We use these providers to run the app. We do not sell your personal information.

Google Firebase for sign-in (Firebase Authentication with Google Sign-In), push notifications (Firebase Cloud Messaging) and crash reports (Crashlytics).
Apple for Sign in with Apple, App Store purchases and subscriptions, and Apple Health, which stays on your device unless you allow the app to read from it.
Hosting and database providers to store your account, gyms, sessions and the other records above and to run our servers.
RevenueCat to manage subscriptions. Your RevenueCat customer ID is your PromptTrain account ID.
AI service providers to process AI requests.
Amazon only if you tap a Gym Upgrades link. We do not send Amazon your data, but the link carries our associate tag. See the affiliate disclosure.

Some of these providers are based outside the UK. Where UK law requires it, transfers rely on appropriate safeguards such as standard contractual clauses.

4. Apple Health data

Connecting Apple Health is optional and you choose which types to allow in the iOS permission screen. The app only reads. It never writes to Apple Health.

Steps, and data from workouts you log, are used on your device to show activity and progress. A summary of recent steps can be included in the context sent for assistant chat (section 5).
For your recovery score, the app sends our server a daily record of heart rate variability, resting heart rate, respiratory rate, and total and deep sleep minutes. It also sends the calories and step count for a workout you log.
We use this only to run the features inside the app. We do not use Health data for advertising or marketing, and we do not sell or share it with data brokers.

You can turn off access at any time in the iOS Settings app under Health. Turning it off stops new data being read. Records already sent are removed when you delete your account.

5. AI features: photo scans and assistant chat

Equipment photo scans

When you scan your gym, the photos are sent from the app to our server and on to an AI service provider. The model lists the equipment it can see, and the app saves that list to your gym. Our code does not save the photos in our database. Please avoid including people or personal documents in the frame.

Assistant chat and other AI features

When you ask the assistant a question, or use another AI feature such as the session review, the app sends the question and a compact summary to the AI service. The summary can include your age, sex, height, weight and goal, weight and body fat trends, a summary of recent health data, recovery status, and your recent training. To save cost and speed up repeat questions, we keep the question and the answer for up to 30 days, linked to your account. Your chat history is also kept on your device.

AI output can be wrong. It is general fitness information, not medical advice. See the terms.

6. Notifications

The app can show a streak reminder, which is scheduled on your device. We may also send a nudge from our server if you have not trained for a while. You can switch notifications off in the app or in iOS Settings.

7. How long we keep data

We keep your data while your account is open.
Cached assistant questions and answers are deleted after 30 days.
When you delete your account (see section 8), the records listed in the table above are deleted from our database, and your Firebase sign-in record is deleted too.

What we keep after deletion. To prevent abuse of free allowances and to understand how the app is used, we keep a small amount of data that does not directly identify you:

hashed identifiers, not your email address itself;
a de-identified summary of account activity;
a trial record with your account link removed.

Our legal basis is our legitimate interest in preventing abuse of free and trial allowances, and in running and improving the app.

Deleting your account does not cancel a subscription. Cancel in your App Store account settings first, or you will keep being charged. Data held by Apple, Google (Firebase Crashlytics) and RevenueCat is governed by their own policies and retention periods.

8. Your rights and deleting your account

Under UK data protection law you can ask for access to your data, correction, deletion, a portable copy, and to object to or restrict certain uses. Where we rely on your consent, such as for Apple Health data and photos, you can withdraw it at any time.

Delete your account in the app. Open the account section in the app's settings and choose Delete account. This removes your data as described in section 7.
Anything else. Email appsbyashltd@gmail.com. We may need to confirm it is you first.
Complaints. You can complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

9. Children

PromptTrain is not aimed at children and is not for anyone under 16. We do not knowingly collect information from them. If you think a child has an account, contact us and we will delete it.

10. Security

Access to your records requires a sign-in token tied to your account, and tokens expire. No system is perfectly secure, so we cannot guarantee absolute security.

11. Changes to this policy

If we change this policy in a way that matters, we will update the date above and, where the law requires, tell you in the app.

12. Contact

Apps by Ash Ltd
Email: appsbyashltd@gmail.com