Privacy Policy

Last updated: 25 September 2026

This policy explains what personal data TrainMuscle collects when you use our app and website, why we collect it, who can see it and the choices you have.

What we collect

• Account details: your mobile number, name, gender, password (stored only as a secure hash) and, if you add one, a profile photo.
• Trainer verification: your CNIC number, photos of your CNIC, any certifications you upload, and your profile details such as experience, specialties and price.
• Payout details: the bank or mobile wallet account a trainer adds to receive payouts.
• Bookings: the sessions you book or deliver, their times and agreed locations, notes, and their payment, refund and dispute records, including photos attached to a dispute.
• Messages and reviews: chat messages between a trainer and trainee, and the reviews trainees leave.
• Device: a push notification token for your phone, and the app version.
• Payments: transaction references from our payment gateway. Card and wallet credentials are entered with the gateway, and TrainMuscle never sees or stores them.

Why we collect it

• To create your account and confirm your number is yours.
• To match trainers and clients, including a woman trainer's choice to be visible to women only.
• To verify trainers before they can take bookings.
• To take bookings, hold and release payments, pay trainers and send refunds.
• To let a trainer and trainee talk about a booking, and to notify you about your bookings and messages.
• To handle disputes, enforce our Terms & Conditions and keep the platform safe.
• To keep the accounting records the law requires.

We don't sell your personal data, and we don't use it for advertising.

Who can see it

• Everyone using the app can see a verified trainer's public profile: name, photo, specialties, price, reviews and rating.
• The other party in a booking sees your name, photo, the booking details and your messages.
• CNIC and certification documents, payout accounts and dispute evidence are seen only by TrainMuscle's operations team.

Service providers

We share only the data each one needs to provide its service to us:

• Our payment gateway, to process payments and refunds.
• Our SMS provider, to send the one-time codes that verify your number.
• Firebase Cloud Messaging (Google), to deliver push notifications.
• Our cloud hosting provider, which stores the app's data and files.

We may also disclose data when Pakistani law or a lawful order requires it.

How long we keep it

We keep your data while your account is open. When you delete your account from the app, we remove your name, mobile number, photo, saved trainers and push registrations, and close any open availability. Records of past bookings, payments, reviews and messages are kept without your identity attached, because the other party and our accounting still depend on them.

Security

Data travels over encrypted connections. Passwords are stored as hashes, verification documents are kept in private storage that only the operations team can open, and a bank account number is never shown in full in the app.

Your rights

You can view and correct most of your details in the app, and delete your account from the Profile tab. To ask for a copy of your data, a correction you can't make yourself, or anything else about your privacy, email support@trainmuscle.com.

Children

TrainMuscle is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you think a child has an account, contact us and we'll remove it.

Changes to this policy

We'll post any update here with a new date, and tell you in the app about a significant change.

Contact us

Questions about this policy? Get in touch and we will reply within one working day.