Evertrain · Privacy & Data

Evertrain privacy & data

Read from Evertrain's own page on 2026-11-09. 31 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.

Role

value: controller
The data controller is Gymismo Holdings Pty Ltd (ABN 38 644 206 717) of U603, 3 Henry Street, Turrella NSW, Australia , trading as Evertrain.
Read from Evertrain's own page on 2026-11-09

Data categories

category: contact
Email address
Read from Evertrain's own page on 2026-11-09
category: identifying
Display name
Read from Evertrain's own page on 2026-11-09
category: demographic
Date of birth (we derive your age from it)
Read from Evertrain's own page on 2026-11-09
category: health
Per-day: body weight, body-fat percentage, cardio minutes, sleep duration, mood, and free-text daily notes
Read from Evertrain's own page on 2026-11-09
category: biometric
Optional biometric unlock is handled on your device and is not sent to us.
Read from Evertrain's own page on 2026-11-09
category: financial
A masked card summary only: card brand, last four digits, and expiry
Read from Evertrain's own page on 2026-11-09
category: behavioral
lifecycle and behavioural events such as signed up, email verified, trial started, trial cancelled, MCP connected, program created, program scheduled, log added, workout logged, and account deleted
Read from Evertrain's own page on 2026-11-09
category: device
device and OS information, app version, IP address, and interactions with the Service
Read from Evertrain's own page on 2026-11-09

Purposes

purpose: Account and workout service
Create and manage your Account; provide free-tier features; deliver workouts, logging, and tracking
Read from Evertrain's own page on 2026-11-09
purpose: Billing
Provide the paid tier, the AI Connection, and billing
Read from Evertrain's own page on 2026-11-09
purpose: Security
Keep the Service secure; prevent fraud and abuse; error/crash reporting
Read from Evertrain's own page on 2026-11-09
purpose: Product analytics
Product analytics — non-sensitive lifecycle/behavioural events (no health values) via PostHog
Read from Evertrain's own page on 2026-11-09
purpose: Session replay
Session replay (masked) via PostHog — can capture on-screen health data
Read from Evertrain's own page on 2026-11-09

Retention

scope: Account dataperiod: For the life of your Account
For the life of your Account; deleted (or anonymised) on Account deletion, subject to the wind-down below
Read from Evertrain's own page on 2026-11-09
scope: Billing recordsperiod: typically up to 7 years in Australia
Retained as required by tax/accounting law (typically up to 7 years in Australia) even after Account deletion
Read from Evertrain's own page on 2026-11-09
scope: Analytics events (PostHog)period: target: up to 12 months
Retained for a limited analytics window (target: up to 12 months) then aggregated/deleted
Read from Evertrain's own page on 2026-11-09
scope: Session-replay recordingsperiod: target: up to 30 days
Short retention (target: up to 30 days) then deleted; not retained if you did not consent
Read from Evertrain's own page on 2026-11-09

Residency

region: United States
Region is the United States (chosen for latency) — see clause 10
Read from Evertrain's own page on 2026-11-09

International transfers

mechanism: DPF
Google Cloud is certified under the EU–US Data Privacy Framework (and its UK extension)
Read from Evertrain's own page on 2026-11-09
mechanism: SCC
we additionally rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum
Read from Evertrain's own page on 2026-11-09
mechanism: other
Your AI vendor — transfer on your explicit consent (Art. 49(1)(a))
Read from Evertrain's own page on 2026-11-09

Subprocessors

We share data with a defined set of sub-processors (infrastructure, billing, video, error reporting, email)
Read from Evertrain's own page on 2026-11-09

Data processing agreement

Deletion

route: in-app account-deletion option or support@evertrain.app
delete your Account using the in-app account-deletion option . Otherwise, contact support@evertrain.app .
Read from Evertrain's own page on 2026-11-09

Data subject rights

right: access
to access your data
Read from Evertrain's own page on 2026-11-09
right: correct
to correct inaccurate data
Read from Evertrain's own page on 2026-11-09
right: delete
to delete it
Read from Evertrain's own page on 2026-11-09
right: restrict or object
to restrict or object to processing
Read from Evertrain's own page on 2026-11-09
right: portability
to data portability
Read from Evertrain's own page on 2026-11-09
right: withdraw consent
to withdraw consent
Read from Evertrain's own page on 2026-11-09

Sale or sharing

stance: prohibited
We do not "sell" your personal information, and we do not "share" it for cross-context behavioural advertising
Read from Evertrain's own page on 2026-11-09

Document

Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page