Privacy Policy and Data Controls

What stays on your iPhone?

Your health samples, personal comparisons, training conditions, manually confirmed birthday, language, saved plans, action guides, explanations and tool settings are processed or stored locally. No AI provider receives your training information. The App reads Apple Health with your permission when needed in the foreground; it does not write Health data or continuously monitor you in the background.

Which Health information is used, and why?

Date of birth: Age eligibility and age-related planning rules. If unavailable, you are asked to confirm your birthday.
Sleep, resting heart rate, heart-rate variability (SDNN) and respiratory rate: Compare recent observations with your personal history to adjust recommendations. This is not a medical recovery assessment.
Workouts and workout heart-rate samples: Understand actual activity, estimate training amounts and guide aerobic intensity.

The App does not currently query height, weight, steps, active energy, VO₂ max, biological sex or perceived exertion. Raw HealthKit samples are not sent to our service.

What can you choose?

Apple Health access and the online plan service are separate choices. Before you first enable the service, the App explains its identity, subscription, free-use and delivery records. Creating a new plan needs online access to current resources and eligibility checks, even though the plan is generated locally.

Without enabling the service, you can use local tools, change local settings and read saved compatible plans and teaching. Declining Health access still allows local tools and, where requirements are met, strength or functional plans. Aerobic plans need enough heart-rate information.

Disable the online plan service in My → Privacy and data. This stops subsequent automatic connections and pauses unfinished work. Your choice is remembered; reopening the App does not enable it again. A new installation asks again.

What disabling the service does not do

It does not cancel Apple billing, delete existing service records, reverse confirmed use, or stop necessary subscription updates and data retention. You can still actively manage a subscription or delete your account, which may connect to the relevant service. Health, notification and Watch permissions remain separate system controls.

What does the online service receive?

Store identity and device verification: Verified App Store identity and device security proof connect your internal service account, without a separate Sign in with Apple flow. Our account service does not store your Apple name or email.
Sessions and purchases: Security records verify access. We retain protected session summaries, not usable plaintext session tokens. Necessary transaction identifiers, products, environment and lifecycle dates verify your subscription. Apple handles payment; we do not store payment-card details or complete signed transaction records.
Minimal plan delivery information: Request and resource identifiers, a plan fingerprint, versions, training or rest outcome, planned duration, local date and time zone confirm delivery and prevent duplicate counting. The service does not receive your full plan, exercises, selected reasons or explanation text.

Each verified App Store identity has 20 free delivered plans. Training and rest count, whether or not an explanation is present. Failed attempts do not count; a valid subscription preserves remaining free uses. The free allowance never starts billing automatically.

Where is your plan history?

Complete plan history stays on your iPhone. It records what the App provided and can inform later plans; it is not proof that you completed a workout. We do not offer cloud backup, cross-device history sync or recovery of deleted plans through purchase restore.

The service keeps minimal delivery confirmations for 180 local days to avoid counting the same delivery twice. They are not a browsable copy of your training history.

How long are service records kept?

Delivery confirmation: An unconfirmed delivery can first be confirmed within 24 hours. After that window it cannot be used as a new delivery. Confirmed minimal delivery records remain for 180 local days, unless removed with your account.
Service operation records: Our delivery activity record is kept for 90 days. It contains identifiers, timing, delivery metadata and fixed error categories—not health facts, full plans, credentials or raw request and response content. This is not a single retention period for all hosting-platform logs.
Apple subscription updates: Completed notification duplicate-prevention records are kept for 30 days. Unfinished checks remain for retry.
Sessions: Sessions expire after 30 days without activity and have a fixed one-year maximum lifetime.

Account deletion and the limited free-use record are explained below. Expiry ends product access; scheduled cleanup removes expired records afterward.

Can support read your training records?

No. Your complete training history is not uploaded to our service, and support has no way to open it. Support can help with necessary account, subscription and delivery information. Emailing us does not give access to your health records or full plans.

Who provides the online services?

Cloudflare hosts our account, subscription and delivery service and its database. Apple provides App Store identity, purchasing and supported device capabilities. No AI provider receives training information. Apple, Cloudflare and email providers also process information under their own platform policies; local plan generation does not mean there are no service records.

We do not use training data for advertising, tracking, cross-user research or model training. This website adds no marketing analytics.

What happens when you delete your account?

In My → Privacy and data, choose Delete account and check the result. Successful deletion removes your service identity, sessions, device keys, subscription association and delivery records. It also clears this iPhone’s plans, history, training conditions, manually entered profile and pending requests. These cannot be restored; an error is not confirmation that deletion succeeded.

Tool settings and timers, and workouts already added to Apple Watch, remain. Account deletion does not cancel Apple billing. Cancel renewal through Apple separately; restoring a purchase later does not recover deleted history.

The free-use record that remains for 12 months

To prevent repeatedly claiming the free allowance by deleting an account, we retain only an irreversible Store identity hash, used free count and expiry for 12 months. It contains no training content or former account ID. Reconnecting during that period continues the used count. After expiry, reconnecting can provide a new free allowance; scheduled cleanup removes the expired record.

Get help with deletion ↗

What about cleanup and backups?

Expiry ends ordinary plan replay or session use. Physical cleanup can happen later. An authenticated data export may include expired records that are still retained; account deletion ends that account’s export access. Cloudflare D1 recovery copies can remain for up to 30 days after deletion from the primary database, depending on the service plan. They are not a way to recover your history in the App.

We do not promise that every backup is erased immediately. Hosting-platform logs and recovery copies have their own lifecycles. Cloudflare D1 recovery information ↗

Ask a privacy question

Email trainingcompass@chenschan.com. The support channel receives your sender address and what you choose to write; this is separate from our account service not storing your Apple email. Please do not send health exports, full plans, payment details or credentials.

Training Compass is for general fitness and wellness, not medical diagnosis, treatment or emergency guidance. The App uses Apple’s standard terms of use.

—

Operator and privacy contact

Training Compass is operated by ZHIMIN CHEN, who is also responsible for privacy requests. Contact trainingcompass@chenschan.com for access, correction, deletion, questions or complaints.

We use service records to verify your access, provide the service, process subscription status, prevent duplicate delivery and misuse of the free allowance, and resolve service problems. Apple supplies verified App Store identity and transaction updates; you supply training conditions and optional Health access on your iPhone.

Online identity and delivery checks are required for new plans. Without them, new online plan requests are unavailable. Health access is optional, although some training types need sufficient information; local tools and compatible saved plans remain available.

—

Access, correction and a copy

Data export is planned for an upcoming App update. The menu described below will be available after that update is released.

In the App, My → Privacy and data → Export service records lets you save the cloud service records associated with your authenticated account. The file includes account, session, subscription and delivery information that is retained when it is read. Records can change or expire during an export, so the file states when reading started and finished.

This file is not a health-data export or a backup of your complete training history. It excludes credentials, other people’s information, platform logs and support emails. An interrupted or incomplete export does not produce a finished file. Keep the saved file private.

You can also contact us if you cannot use the App, need other retained information, want to correct an error, or want to exercise an applicable right to stop or restrict processing. We verify identity and record ownership using the least information needed; an account ID or an email alone does not establish ownership. We explain any limits or refusal and respond under the rules that apply to your request.

—

Service providers and international processing

Cloudflare processes the online service and database records. Support mail sent to our dedicated address is forwarded through Cloudflare Email Routing to a personal Gmail inbox operated by the same owner; it is not a Google Workspace business mailbox. We do not ask you to email health records.

These providers operate internationally. Information may be processed outside your country or region, including in the United States and other locations used by the providers. We do not promise storage only in your country. Contact us for information about the processing arrangements relevant to your records.

Access is limited to the operator and service providers as needed for these purposes. The service uses authenticated access and encrypted network connections. Operational logs avoid raw health facts, full plans and credentials. No security measure can guarantee that an incident will never occur.

The identity hash retained after deletion can recognise the same Store identity on reconnection. Although it does not contain your former account ID or training content, we treat it as a limited personal record, not as anonymous information.

—

How automated results are handled

The App creates training or rest recommendations on your iPhone from your conditions and available records. This is a general exercise suggestion, not a medical judgement. You can review the explanation and change the conditions before requesting another plan.

The online service also checks free-use and Apple subscription records automatically. If access or a count seems wrong, contact the operator for a human review of the service records. You may explain your circumstances and correct factual errors. We cannot see or remotely change a local health-based plan, and we do not offer medical review through support.