← 返回
一、引言
欢迎使用 Trainko（以下简称"本 App"）。我们非常重视您的隐私和个人信息保护。
本隐私政策旨在向您说明，在您使用本 App 及其本地 HTTP 服务、Apple 健康同步、Apple Watch 伴侣应用、实时活动与小组件、iCloud 云同步以及会员订阅服务时，我们如何处理和保护您的个人信息。
请您仔细阅读并充分理解本政策。您开始使用本 App，即视为您已阅读并同意本政策的全部内容。
二、我们处理的信息
本 App 贯彻"本地优先、数据最小化"的原则。除非您作为会员主动开启多设备 iCloud 云同步，否则您的所有个人健康与训练数据均仅加密保存在您的设备本地，绝不上载至任何第三方云端服务器。我们处理的信息包括：
1. 训练与身体档案数据
- 您手动录入或由您配置的 AI Agent 写入的每日训练计划、动作库、完成组数、重量、次数、间歇计时及训练日志；
- 您的基础身体资料，包括性别、体重、身高、体脂率、出生日期；
- 您登记的健身房器械配置与个性化重量档位选项。
2. Apple 健康（HealthKit）与 Apple Watch 传感器数据
在您主动开启"自动同步"并通过系统授权后，本 App 会与 Apple 健康应用及 Apple Watch 进行交互：
- 读取权限：体重、体脂率、身高、生理性别、出生日期、心率、静息心率、心率变异性（HRV）、活动与基础能量、步数、睡眠、步行/骑行/游泳距离及训练记录，用于完善训练档案、生成个性化训练计划、评估恢复状态并展示健康洞察；
- 写入权限：体重、训练心率、活动与基础能量、步行/骑行/游泳距离及训练记录（HKWorkoutSession），将训练成果回写至系统健康应用；
- Apple Watch 独立伴侣训练：Watch 端在训练期间采集的心率与卡路里数据，通过系统 WatchConnectivity 或 HealthKit 与您的 iPhone 进行本地近场或加密同步，绝不经由任何开发者服务器中转。
我们严格遵守 Apple 开发者政策：绝不将 HealthKit 数据用于商业广告、用户画像或提供给任何第三方数据机构。您可随时在 iOS 系统"设置 → 隐私与安全性 → 健康 → Trainko"中关闭授权。
3. 实时活动（Live Activity）与锁屏/桌面小组件（Widget）
- 训练执行期间，本 App 通过 ActivityKit 在灵动岛与锁屏上呈现动作名称、组数与组间休息倒计时；
- 上述状态仅在您设备系统屏幕本地渲染显示，锁屏敏感信息展示遵循您在 iOS 系统"设置 → 面容 ID 与密码 → 锁定时允许访问"中的隐私保护配置。
4. 应用内购买与订阅交易凭据
当您开通 Trainko 会员时，所有支付交易均由 Apple App Store（StoreKit 2）在系统层面直接处理：
- 本 App 开发者绝不收集、不访问、也不存储您的银行卡号、信用卡信息、账单地址或任何个人金融敏感信息；
- 本 App 仅在本地接收由 Apple 官方签发并加密的 JWS 交易凭证（Transaction），仅用于本地校验您的会员订阅状态（如会员有效期、当前方案与自动续费状态）。
5. iCloud 云同步数据（仅限会员开启时）
当您作为会员主动开启"iCloud 云同步"时，您的训练记录和个人配置将通过 Apple CloudKit 技术在您登录相同 Apple ID 的设备间无缝同步：
- 所有数据均直接保存在属于您个人的私有 iCloud 数据库（Private CloudKit Database）中；
- 数据传输与存储全程受 Apple 端到端加密或传输层加密保护，本 App 开发者在技术上无法访问、解密或读取您的私人云端数据；
- 您可以随时在 App 内设置中关闭 iCloud 云同步。
三、数据的存储与安全
- 本地存储：您的训练数据保存在设备本地的 SwiftData 数据库中，偏好设置保存在系统 UserDefaults 中；
- 无自建外部服务器：本 App 不设中心化用户数据库，不设后台用户账户系统，杜绝了中心化服务器数据泄露的风险；
- API Key 安全：本地 HTTP 服务的鉴权密钥在您设备本地安全沙盒中生成与存储，仅用于您配置的 AI Agent 与本地服务之间的授权交互。
四、本地 HTTP 服务隐私说明
本 App 内置的 HTTP 服务仅监听本机环回地址（localhost），专供您在本地与您受信任的 AI Agent 交互。
- 该服务需要有效的 API Key 方能通信，请勿将 API Key 泄露给不受信任的第三方；
- 如怀疑密钥泄露，您可随时在 App"设置"中一键重新生成，旧密钥将瞬间彻底失效；
- 您可以在 App「设置 → API 服务」中随时关闭本地 HTTP 服务，关闭后本地服务将彻底停止监听。
五、战报图片导出与第三方分享
本 App 提供的训练卡片与周期战报导出图片均在本地离线渲染生成。若您主动将其保存至系统相册或分享至社交媒体，请注意图片中包含您的个人锻炼指标与时间轨迹，该分享行为属于您的自主公开行为。
六、第三方共享与 SDK
本 App 恪守极简与隐私原则：
- 除系统原生的 Apple HealthKit、WatchConnectivity、ActivityKit、CloudKit 与 StoreKit 外，本 App 仅集成下方披露的一类第三方统计 SDK，不集成任何商业广告 SDK 或广告归因追踪工具；
- 我们不会将您的个人数据提供、出售、出租或分享给任何第三方；
- 第三方统计 SDK 仅在您同意本隐私政策后才会初始化，未同意前不会初始化、不会采集任何信息。
1. 友盟移动统计 SDK（U-App）
- SDK 名称：友盟移动统计 SDK（UMCommon / UMDevice）
- 使用目的：进行 APP 数据统计分析
- 运营方：友盟同欣（北京）科技有限公司
- 收集个人信息类型：设备信息（IDFA / IDFV / OpenUDID）、网络信息；位置信息与应用列表为可选功能，本 App 未开启，故不收集
- 隐私权政策链接：https://www.umeng.com/page/policy
2. 友盟应用性能监控 SDK（U-APM）
- SDK 名称：友盟应用性能监控 SDK（UMAPM）
- 使用目的：提供 APP 应用性能监控服务（崩溃与卡顿诊断、启动耗时、内存与 OOM 监测等）
- 运营方：友盟同欣（北京）科技有限公司
- 收集个人信息类型：设备信息（IDFA / IDFV / OpenUDID）、网络信息、崩溃日志与异常信息；位置信息为可选功能，本 App 未开启，故不收集
- 隐私权政策链接：https://www.umeng.com/page/policy
3. 啄木鸟 SDK（U-APM 合作组件）
为实现应用性能分析与崩溃问题定向，上述友盟应用性能监控 SDK 使用了啄木鸟 SDK 技术组件辅助客户端崩溃问题定位与分析：
友盟+ 可能接入的其他合作方 SDK 清单详见《友盟+合作SDK清单》；合作方信息处理情况以其官方公示为准，可能随版本升级而变化。
4. 关于健康与训练数据的特别说明
尽管上述统计与性能监控 SDK 会按行业通用方式采集设备标识与崩溃信息，本 App 绝不会将您的训练计划内容、训练记录、体重、体脂率、身高、性别、出生日期等任何 HealthKit 数据或健康敏感信息传递给上述任何第三方；我们也不会将所采集的设备信息用于广告投放或跨应用行为追踪。上述 SDK 采集的设备标识仅用于生成脱敏统计与崩溃归因，不会用于识别您的真实身份。
上述 SDK 仅在您同意本隐私政策后才会初始化，未同意前不会初始化、不会采集任何信息。您可在同意本隐私政策前选择不使用本 App 以拒绝上述采集；已同意的情况下，卸载本 App 即可终止后续所有采集。
七、数据主体权利
您对您的个人数据拥有完全的自主控制权：
- 查阅与修改：随时可在 App 内查看或修改动作库、身体指标及健身房配置；
- 删除数据：支持在列表中左滑单条删除记录，或在「设置 → 数据管理 → 清除所有数据」中彻底清除设备本地所有训练与身体记录（若已开启 iCloud 同步，可一并擦除云端数据）；
- 导出数据：会员可在「设置 → 数据管理」中将全部训练数据导出为本地加密备份文件（.trainko），并在其他设备上导入；
- 卸载清理：卸载本 App 将彻底清除本 App 保存在设备沙盒内的所有文件；如您启用了 iCloud，也可在系统「设置 → Apple ID → iCloud → 管理账户储存空间」中独立清理云端数据。
八、未成年人隐私保护
本 App 主要面向具备完全民事行为能力的成年健身爱好者。若您未满 18 周岁，请在法定监护人的陪同指导与明确同意下审阅本政策，并在确保运动安全的前提下使用本 App。
九、隐私政策的修订
随着法律法规调整或 App 功能演进，我们可能适时修订本隐私政策。更新后的版本将在本 App 内及官方支持网站（www.mytrainko.com）公布并注明最新更新日期，自公布之日起生效。建议您定期查阅。
← Back
1. Introduction
Welcome to Trainko (hereinafter referred to as "the App"). We are firmly committed to protecting your privacy and personal data.
This Privacy Policy explains how we handle, store, and safeguard your personal information when you use the App, its local HTTP service, Apple HealthKit integration, Apple Watch companion app, Live Activities and Widgets, iCloud sync, and membership subscription services.
Please read this Privacy Policy carefully. By using the App, you acknowledge that you have read and agreed to all provisions described herein.
2. Information We Process
The App follows a strict "local-first, data-minimization" architecture. Unless you explicitly enable multi-device iCloud sync, all your fitness data is stored exclusively on your device and is never uploaded to any external proprietary server. The categories of data we process include:
2.1 Training & Fitness Profile Data
- Daily workout plans, exercises, recorded sets, reps, weights, rest durations, and workout logs entered by you or created by your configured AI Agent via API;
- Physical profile metrics, including biological sex, body weight, height, body fat percentage, and date of birth;
- Customized gym equipment configurations and weight plate settings.
2.2 Apple Health (HealthKit) & Apple Watch Sensor Data
When you enable "Auto Sync" and grant authorization through the iOS system dialog, the App exchanges data with Apple Health and Apple Watch:
- Read Access: Body weight, body fat percentage, height, biological sex, date of birth, heart rate, resting heart rate, heart rate variability (HRV), active and basal energy, step count, sleep, walking/running/cycling/swimming distance, and workouts — used solely to build your training profile, generate personalized plans, assess recovery, and show health insights;
- Write Access: Body weight, workout heart rates, active and basal energy, walking/running/cycling/swimming distance, and workout sessions (HKWorkoutSession) — used to log your workout achievements into Apple Health;
- Apple Watch Companion Workouts: Heart rate and metric data collected during workouts on your Watch sync directly to your iPhone via WatchConnectivity or HealthKit. No data is ever routed through any developer-owned server.
We strictly prohibit using your HealthKit data for advertising, marketing, or data broker sales. You can revoke or customize HealthKit permissions at any time via iOS Settings → Privacy & Security → Health → Trainko.
2.3 Live Activities & Widgets
- During active workouts, the App utilizes ActivityKit to project exercise names, current sets, and rest timers onto the Dynamic Island and Lock Screen;
- All status renderings take place entirely on-device, and Lock Screen visibility respects your system settings under iOS Settings → Face ID & Passcode → Allow Access When Locked.
2.4 In-App Purchases & Subscription Credentials
When you purchase a Trainko Membership, all financial transactions are processed directly by Apple App Store (StoreKit 2):
- The App developer never collects, accesses, or stores your credit card numbers, bank details, billing address, or payment credentials;
- The App only receives cryptographically signed JWS transaction tokens from Apple locally on your device to verify your subscription entitlements (such as active plan, expiration date, and auto-renewal status).
2.5 iCloud Multi-Device Sync (Members Only)
When you enable "iCloud Sync" as a member, your workout logs and configurations sync seamlessly between your Apple devices signed into the same Apple ID:
- All data is stored directly in your personal Private CloudKit Database hosted by Apple;
- Data in transit and at rest is secured by Apple's encryption standards. The App developer has no technical means to inspect, access, or decrypt your personal iCloud data;
- You can disable iCloud sync at any time in the App settings.
3. Data Storage & Security
- On-Device Storage: Workout records and health data are persisted in a sandboxed SwiftData database on your local device. User preferences are stored in system UserDefaults;
- Zero Proprietary Cloud Servers: The App operates without a centralized user account system or remote database backend, eliminating the risk of centralized data breaches;
- API Key Isolation: The API Key used to authenticate your local AI Agent is stored securely in your device sandbox and never leaves your local network.
4. Local HTTP Service
The App includes a local HTTP service listening exclusively on the loopback interface (localhost) to communicate with your authorized AI Agent.
- API Key authentication is mandatory for all requests. Do not share your API Key with untrusted parties;
- If you suspect your key has been compromised, you can regenerate a new key instantly in Settings, immediately invalidating the previous one;
- You can turn off the local HTTP service at any time via Settings → API Service, which completely halts the local listener.
5. Workout Share Graphics & Social Media
Workout cards and periodic achievement graphics are rendered entirely on your device. If you choose to save or share these graphics to third-party platforms, please be aware that they contain personal exercise indicators and historical data; such sharing is purely voluntary on your part.
6. Third-Party Sharing & SDKs
In accordance with our privacy commitment:
- Aside from native Apple system frameworks (HealthKit, WatchConnectivity, ActivityKit, CloudKit, and StoreKit), the App integrates only the analytics SDK disclosed below, and contains no commercial advertising SDKs or advertising attribution trackers;
- We never sell, rent, monetize, or disclose your personal fitness data to any third party;
- The analytics SDK is initialized only after you accept this Privacy Policy. It is never initialized, and collects nothing, before your consent.
1. Umeng Analytics SDK (U-App)
- SDK name: Umeng Analytics SDK (UMCommon / UMDevice)
- Purpose: APP data statistical analysis
- Operator: Umeng Tongxin (Beijing) Technology Co., Ltd.
- Personal information collected: device information (IDFA / IDFV / OpenUDID) and network information; location information and app list are optional features that this App does not enable and therefore does not collect
- Privacy policy: https://www.umeng.com/page/policy
2. Umeng APM SDK (U-APM)
- SDK name: Umeng Application Performance Monitoring SDK (UMAPM)
- Purpose: providing APP performance monitoring services (crash and stall diagnostics, launch time, memory and OOM monitoring, etc.)
- Operator: Umeng Tongxin (Beijing) Technology Co., Ltd.
- Personal information collected: device information (IDFA / IDFV / OpenUDID), network information, crash logs and exception information; location information is an optional feature that this App does not enable and therefore does not collect
- Privacy policy: https://www.umeng.com/page/policy
3. Zhuomuniao SDK (U-APM partner component)
To enable performance analysis and targeted crash diagnosis, the Umeng APM SDK above uses the Zhuomuniao SDK technical component to assist with client-side crash localization and analysis:
- SDK name: Zhuomuniao SDK
- Vendor: Guangzhou Dongjing Computer Technology Co., Ltd.
- Personal information collected: device brand and model, device crash logs
- Purpose: storing and backing up crash logs for crash analysis, compatibility analysis and performance monitoring
- Privacy policy: https://yueying-docs.effirst.com/privacy.html
The full list of partner SDKs that Umeng+ may integrate is published in the Umeng+ Partner SDK List. Partner data practices are governed by their official disclosures and may change as versions are upgraded.
4. Specific Note on Health & Workout Data
Although the analytics and performance SDKs above collect device identifiers and crash information in the industry-standard manner, this App never passes your workout plan content, training records, weight, body-fat percentage, height, biological sex, date of birth, or any other HealthKit data or sensitive health information to any of these third parties. We also do not use the device information collected for advertising or cross-app behavioral tracking. The device identifiers collected by these SDKs are used solely to generate de-identified statistics and crash attribution and are not used to identify you personally.
These SDKs are initialized only after you accept this Privacy Policy. They are never initialized, and collect nothing, before your consent. You may decline the above collection by choosing not to use the App before accepting this Privacy Policy. If you have already consented, uninstalling the App terminates all further collection.
7. Data Subject Rights
You retain complete sovereignty over your information:
- Access and Correction: You can view or adjust all personal profiles, gym setups, and workout logs inside the App at any time;
- Deletion: Swipe left to delete individual workout entries, or permanently erase all locally stored workout and profile records via Settings → Data Management → Clear All Data (if iCloud sync is on, your data in iCloud can be erased as well);
- Portability & Backup: Premium members can export all training data to an encrypted local backup file (.trainko) via Settings → Data Management, and import it on another device;
- App Removal & Cloud Purge: Uninstalling the App removes all sandboxed data from your device. If you used iCloud sync, you can also delete the remote storage via iOS Settings → Apple ID → iCloud → Manage Storage.
8. Children's Privacy
The App is intended for adult fitness enthusiasts capable of safely undertaking physical exercises. If you are under 18, please use the App only with the guidance and consent of a parent or legal guardian.
9. Changes to this Policy
We may update this Privacy Policy periodically to reflect product updates or legal developments. The latest version is always published inside the App and on our official support website (www.mytrainko.com), marked with its effective date, and takes effect upon publication. We encourage you to review it periodically.
10. Contact Us
If you have any questions, feedback, or concerns regarding this Privacy Policy or your data, please use the feedback entry under About Us in the App's Settings, or contact us at:
Email: trainko.support@gmail.com