Privacy Policy

Information we collect

Account information — your name, email address, and authentication details when you sign up or sign in (including via Google or Sign in with Apple).

• Client data you enter — names, contact details, visit notes, quick metrics, and progress photos you add for your own clients.
• Usage analytics — app and device usage data collected via Firebase Analytics, used in aggregate to understand how Trebexa is used and where to improve it.
• Notification tokens — a device token for push notifications (session reminders, check-in nudges), only if you enable them.

How we use it

• To operate, maintain, and improve the app.
• To send session-day and check-in reminders you've opted into.
• To respond to support requests sent to us directly.
• To understand aggregate usage trends — never to identify or profile individual clients for marketing.

Client data is yours to manage

Client records you create in Trebexa belong to you. We act as a processor for that data — we store and display it back to you (and to the client, if you invite them to the client portal) so you can run your practice. You're responsible for having the appropriate consent from your own clients to store their information in Trebexa.

Progress photos

Progress photos are private by default and are never used in our marketing, on this site, or anywhere public without your and your client's explicit consent.

Data storage & security

Data is stored on secure cloud infrastructure. Our free and standard paid tiers are not configured for regulated health-data storage out of the box. If you handle PHI, a HIPAA-compliant storage tier — encrypted data at rest, a signed BAA, and a full audit log — is available as an add-on on any paid plan. Contact us for details.

Third-party services

We rely on a small set of third-party providers to run Trebexa, including Firebase (Google) for analytics, push notifications, and backend infrastructure, and Google / Apple for sign-in. These providers process data on our behalf under their own privacy and security commitments.

Data retention & deletion

We retain your account and client data for as long as your account is active. You can request export or deletion of your account and associated data at any time by emailing us — we'll action it within a reasonable timeframe.

Children's privacy

Trebexa is a business tool for trainers, physios, and coaches, and is not directed at or intended for use by children under 16.

Changes to this policy

As Trebexa moves out of beta, our data practices — and this policy — may evolve. We'll update the "last updated" date above whenever we make a material change.