Evertrain · Privacy & Data
Evertrain privacy & data
Read from Evertrain's own page on 2026-11-09. 31 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.
Role
value: controller
The data controller is Gymismo Holdings Pty Ltd (ABN 38 644 206 717) of U603, 3 Henry Street, Turrella NSW, Australia , trading as Evertrain.Read from Evertrain's own page on 2026-11-09
Data categories
category: demographic
Date of birth (we derive your age from it)Read from Evertrain's own page on 2026-11-09
category: health
Per-day: body weight, body-fat percentage, cardio minutes, sleep duration, mood, and free-text daily notesRead from Evertrain's own page on 2026-11-09
category: biometric
Optional biometric unlock is handled on your device and is not sent to us.Read from Evertrain's own page on 2026-11-09
category: financial
A masked card summary only: card brand, last four digits, and expiryRead from Evertrain's own page on 2026-11-09
category: behavioral
lifecycle and behavioural events such as signed up, email verified, trial started, trial cancelled, MCP connected, program created, program scheduled, log added, workout logged, and account deletedRead from Evertrain's own page on 2026-11-09
category: device
device and OS information, app version, IP address, and interactions with the ServiceRead from Evertrain's own page on 2026-11-09
Purposes
purpose: Account and workout service
Create and manage your Account; provide free-tier features; deliver workouts, logging, and trackingRead from Evertrain's own page on 2026-11-09
purpose: Billing
Provide the paid tier, the AI Connection, and billingRead from Evertrain's own page on 2026-11-09
purpose: Security
Keep the Service secure; prevent fraud and abuse; error/crash reportingRead from Evertrain's own page on 2026-11-09
purpose: Product analytics
Product analytics — non-sensitive lifecycle/behavioural events (no health values) via PostHogRead from Evertrain's own page on 2026-11-09
purpose: Session replay
Session replay (masked) via PostHog — can capture on-screen health dataRead from Evertrain's own page on 2026-11-09
Retention
scope: Account dataperiod: For the life of your Account
For the life of your Account; deleted (or anonymised) on Account deletion, subject to the wind-down belowRead from Evertrain's own page on 2026-11-09
scope: Billing recordsperiod: typically up to 7 years in Australia
Retained as required by tax/accounting law (typically up to 7 years in Australia) even after Account deletionRead from Evertrain's own page on 2026-11-09
scope: Analytics events (PostHog)period: target: up to 12 months
Retained for a limited analytics window (target: up to 12 months) then aggregated/deletedRead from Evertrain's own page on 2026-11-09
scope: Session-replay recordingsperiod: target: up to 30 days
Short retention (target: up to 30 days) then deleted; not retained if you did not consentRead from Evertrain's own page on 2026-11-09
Residency
region: United States
Region is the United States (chosen for latency) — see clause 10Read from Evertrain's own page on 2026-11-09
International transfers
mechanism: DPF
Google Cloud is certified under the EU–US Data Privacy Framework (and its UK extension)Read from Evertrain's own page on 2026-11-09
mechanism: SCC
we additionally rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer AddendumRead from Evertrain's own page on 2026-11-09
mechanism: other
Your AI vendor — transfer on your explicit consent (Art. 49(1)(a))Read from Evertrain's own page on 2026-11-09
Subprocessors
We share data with a defined set of sub-processors (infrastructure, billing, video, error reporting, email)Read from Evertrain's own page on 2026-11-09
Data processing agreement
Deletion
route: in-app account-deletion option or support@evertrain.app
delete your Account using the in-app account-deletion option . Otherwise, contact support@evertrain.app .Read from Evertrain's own page on 2026-11-09
Data subject rights
right: restrict or object
to restrict or object to processingRead from Evertrain's own page on 2026-11-09
Sale or sharing
stance: prohibited
We do not "sell" your personal information, and we do not "share" it for cross-context behavioural advertisingRead from Evertrain's own page on 2026-11-09
Document
Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page