Version 2026-08-08. TrainerForge is operated by Codex42 Inc., Ontario, Canada.
Haidar Al-Aubiydy is the individual accountable for personal information handled by TrainerForge. Reach them at iamhaidar@gmail.com. Every question, access request, correction or complaint in this policy goes to that address.
Trainers hold an account. We collect a username, an email address, and whatever they choose to put on their public profile.
Clients do not hold an account. A trainer enters information about them: their name, optionally an email address, and health information including date of birth, sex, height, weight, training history, screening answers, tagged conditions such as hypertension, diabetes, osteoporosis or pregnancy, whether medical clearance is on file, and the trainer's own notes.
The trainer is accountable to their client for that information. Codex42 handles it on the trainer's behalf and remains accountable for protecting it while we have it. We do not use it for any purpose of our own.
Only to run the service: to generate training programmes, to produce the optional programme review, and to show a trainer their own records. We do not sell personal information, we do not share it for advertising, and we do not use it to train any machine-learning model.
Trainers consent for themselves when they accept the terms. For clients, the trainer must obtain the client's consent before entering anything, and confirms they hold it each time they create or edit a client record. We store that confirmation with a timestamp and the policy version. A client who wants their information removed should ask their trainer, or contact us directly at the address above.
Personal information is processed outside Canada, and while it is outside Canada it is subject to the laws of that country, including lawful access by its authorities.
| Provider | What it handles | Where |
|---|---|---|
| Railway | Application hosting and the database. All of it. | United States |
| Anthropic | The optional programme review only, and only when a trainer asks for one, and only where that client's consent is recorded. We send age, sex, height, weight, goal, training history, screening answers, tagged conditions and the trainer's notes. We do not send the name or email as fields. The screening answers and the notes are free text, so they may contain a name if the trainer typed one; trainers are warned of this on the form. | United States |
We use contractual means to require comparable protection from both. Neither is permitted to use the information for their own purposes.
For as long as the trainer keeps the record, and while their account is active. Archiving a client hides it but does not delete it, because screening and clearance history is exactly what a trainer may later need. Deleting a client deletes the record and its programmes and reviews. Ask us to close your account and we delete its data, including every client record on it, within 30 days, except where we must keep something to meet a legal obligation.
Encrypted in transit. Access scoped so that one trainer's records cannot be reached by another, which is enforced in code and covered by automated tests. Administrative access is limited to the accountable individual named above.
Trainers can see and correct everything in their account through the service, and can ask us for an export. Clients can ask their trainer, or write to us, to see what is held about them or to have it corrected. We respond within 30 days.
If we determine that a breach of security safeguards has occurred, we start the clock then, not when we finish assessing it. Where the breach creates a real risk of significant harm we report to the Office of the Privacy Commissioner of Canada and notify affected individuals and their trainers as soon as feasible. We keep a record of every breach for 24 months, whether or not it was reportable.
Write to us first at the address above. If you are not satisfied you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
We will publish a new version here when this changes and ask trainers to accept it.