Privacy Policy

1. Introduction

TrainerMatch ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at trainermatch.app (the "Platform").

Our Core Privacy Commitment: We will never sell your personal data to external third parties.

2. Information We Collect

2.1 Information You Provide Directly

For Clients:

• Name and email address
• Phone number, only if you choose to be contacted by text
• Training goals and preferences
• Location information
• Budget preferences
• Session type preferences (in-person, online, hybrid)
• Special accommodations or tags (optional)
• The introduction message you write to trainers, which may include anything you choose to share about your health or fitness

For Trainers:

• First and last name, email address, and phone number
• Profile photo
• Business address and service area
• Professional bio
• Certifications, certification numbers, and experience
• Pricing information
• Specialties and services offered
• Availability information
• Payment information (processed securely through Stripe)
• Blog posts, client stories, and other content you publish

2.2 Information Collected Automatically

When you access the Platform, we automatically collect:

• Device information (browser type, operating system)
• IP address and approximate geographic location
• Usage data (pages visited, features used, time spent)
• Referral sources
• Log data and error reports

2.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and remember your preferences
• Analyze Platform usage and improve user experience
• Understand marketing effectiveness

You can control cookies through your browser settings, but disabling them may limit Platform functionality.

Analytics. We use Google Analytics and Amplitude to count visits and understand how the Platform is used, such as which pages are viewed and which buttons are pressed. We use these tools only to improve the Platform, not to show you advertising, and we have turned off Google's advertising features for this site.

Session replay. If you choose "Accept All Cookies" on our cookie banner, we also use Amplitude's session replay technology, which records how you move through pages (clicks, scrolling, and the pages viewed) so we can find and fix usability problems. Anything you type into a form is masked, and on signed-in pages (such as the trainer dashboard and your account) all text is masked, so names, contact details, and messages are not recorded. No session is recorded unless you accept.

Your choices. "Accept All Cookies" allows analytics and session replay. "Essential Only" turns both off, leaving only what the Platform needs to work. Until you choose, analytics runs but nothing is recorded. You can change your answer at any time with the "Cookie settings" link at the bottom of any page.

Storage in your browser. To keep you signed in and remember your search, the Platform saves some information in your browser, such as your sign-in session and your saved trainer preferences.

2.4 Sign in with Google

You can create an account or sign in to TrainerMatch using your Google account. When you do, Google shares only the basic profile information you approve on Google's consent screen:

• Your name
• Your email address
• Your Google profile picture (if available)

We use this information solely to create and secure your TrainerMatch account, to identify you when you sign in, and to pre-fill your profile. We do not request access to your Gmail, Google Drive, Calendar, Contacts, or any other Google service, and we never see your Google password.

TrainerMatch's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or allow humans to read it except as needed for security, to comply with law, or with your consent. You can revoke TrainerMatch's access at any time in your Google Account permissions and request deletion of your TrainerMatch account as described in Section 7.

3. How We Use Your Information

We use your information to:

• Provide Our Services: Connect clients with trainers, facilitate introductions, process payments
• Communicate With You: Send lead notifications, account updates, password resets, and service-related emails
• Improve the Platform: Analyze usage patterns, fix bugs, develop new features
• Ensure Platform Security: Detect and prevent fraud, spam, and abuse
• Comply With Legal Obligations: Respond to legal requests and enforce our Terms of Service
• Product Updates and Marketing: Send occasional emails about new features or services (you can opt out anytime, as described in Section 7.4)

4. How We Share Your Information

4.1 Between Users

Client to Trainer: When you send an introduction, it goes only to the trainer or trainers you chose. Before unlocking it, the trainer can see limited preview information (your first name, training goals, general location, budget range). When the trainer unlocks your introduction, they also receive your contact details (your email address and, if you chose to be contacted by text, your phone number), your message, and your preferences.

After a trainer unlocks your introduction, that trainer holds your information as an independent business and is responsible for how they use it. We require trainers to use it only to respond to your inquiry, but we cannot delete it from a trainer's own records. If you want a trainer to stop contacting you, tell the trainer directly, and let us know if they do not.

Trainer to Client: Trainer profiles and blog posts are publicly visible, can appear in search engines, and include name, photo, bio, location, pricing, certifications, and services offered. A trainer's email address and phone number are not shown publicly.

4.2 Service Providers

We share information with trusted third-party service providers who help us operate the Platform:

• Supabase: Database hosting and authentication services
• Stripe: Payment processing (they receive payment information directly, not through us)
• Resend: Email delivery service for transactional and notification emails
• Vercel: Website hosting and delivery
• Google Analytics and Amplitude: Usage analytics, and (Amplitude) session replay if you accept all cookies
• Google: Sign in with Google, if you choose to use it
• Photon (Komoot): Location search suggestions when you type a city or address
• Porkbun: Domain name registration

These service providers are contractually obligated to protect your information and use it only for providing services to us.

4.3 Legal Requirements

We may disclose your information when required by law or in response to:

• Subpoenas, court orders, or legal processes
• Requests from government authorities
• Situations involving potential threats to safety
• Enforcement of our Terms of Service

4.4 Business Transfers

If TrainerMatch is acquired, merged, or undergoes a business restructuring, your information may be transferred to the new entity. We will notify you of any such change in ownership.

4.5 What We DO NOT Do

We will NEVER:

• Sell your personal data to external third parties
• Share your information with advertisers for targeted advertising
• Use your data for purposes unrelated to providing our services
• Rent or lease your contact information to other businesses

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication via Supabase
• Regular software and security updates
• Access controls limiting who can view your data
• Password hashing using industry best practices

However, no system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide you services
• Required by law or for legitimate business purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we're required by law to retain it (e.g., for tax or legal purposes).

7. Your Privacy Rights

7.1 Access and Correction

You have the right to access and update your personal information. You can do this through your account settings or by contacting us.

7.2 Data Portability

You can request a copy of your personal data in a structured, machine-readable format.

7.3 Deletion

You can request deletion of your account and personal data at any time through account settings or by emailing us. Note that some information may be retained as required by law.

7.4 Marketing Opt-Out

You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any promotional email or updating your account preferences. You'll still receive transactional emails necessary for the service.

7.5 California Privacy Rights (CCPA/CPRA)

If you're a California resident, the California Consumer Privacy Act, as amended, gives you these rights. We honor them for every California resident who asks:

• Right to know: what personal information we collect, where it comes from, why we use it, and who we disclose it to
• Right to delete: ask us to delete your personal information
• Right to correct: ask us to fix inaccurate personal information
• Right to opt out of sale or sharing: we do not sell your personal information, and we do not share it for cross-context behavioral advertising
• Right to limit use of sensitive personal information: we use anything sensitive you choose to tell us (for example, health details in an introduction) only to pass your introduction to the trainers you chose
• Right to non-discrimination: we will not treat you differently for exercising these rights

Categories we collect: identifiers (name, email, phone number, IP address); commercial information (trainer purchases and credits); internet activity (pages viewed and actions taken on the Platform); approximate location; professional information (trainer certifications and experience); and the content of introductions and profiles. Sections 2 to 4 describe the sources, purposes, and recipients for each.

How to make a request: email contact.trainermatch@gmail.com from the email address on your account, or use the delete option in your account settings. We will confirm your identity using your account email and respond within 45 days. You may have an authorized agent make a request for you with your written permission.

7.6 Users Outside the United States

TrainerMatch is operated from the United States and is intended for people in the United States. If you use the Platform from elsewhere, your information is processed in the United States. Wherever you live, you can ask us to access, correct, or delete your personal information by emailing contact.trainermatch@gmail.com.

8. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect information from children. If we discover that we've collected information from a child under 18, we will delete it immediately. Parents who believe we may have information about their child should contact us.

9. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with any information.

10. International Data Transfers

Our service providers are based mainly in the United States, and your information may be processed there or in other countries where they operate. We protect it as described in this Privacy Policy wherever it is processed.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a notice on the Platform

Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: contact.trainermatch@gmail.com