Privacy Policy

Who is responsible

TRNUP is operated by SKOGHEIM TECHNOLOGIES, a Norwegian sole proprietorship registered in the Central Coordinating Register for Legal Entities (Enhetsregisteret), organisation number 937 840 977, with its registered address at Cort Adelers gate 20, 0254 Oslo, Norway. SKOGHEIM TECHNOLOGIES is the data controller for the processing described in this policy.

Privacy questions and requests can be sent to hi@trnup.app.

The short version

TRNUP is built around private crews. Proofs, posts and chats are shared with the crew or crews you choose, not on a public feed. Your username and profile details can be found by signed-in users so friends can invite or mention you.

We do not sell personal data and do not use private photos or message content for advertising.

Data we collect

Account and profile data: name, email address, username, profile photo, language, unit preference, activity interests and sign-in provider.

Crew and social data: crew membership, crew photos, invitations, messages, mentions, comments, reactions, votes and media you choose to share in a crew.

Feedback-board data: feature ideas and optional details you publish, your votes, reports and moderation status. Ideas are visible to signed-in users without your name; TRNUP still links submissions, votes and reports to your account to prevent abuse, let you delete your ideas and enforce one active vote per account for each idea.

Safety and moderation data: private reports you submit about an account or proof, the selected category, optional details, review status, actions taken, and limited records needed to prevent repeated abuse. The reported person and other crew members do not receive your report or see who submitted it.

Activity data: weekly commitments, proof photos, capture time, workout type, optional captions and personal-record details, Apple Health or Health Connect workout summaries you choose to attach, optional aggregate TRNUP Score shares, streaks, Turn Ups and Skips.

Device and communication data: push token, installation identifier, notification and email preferences, app version, device platform, security logs and limited diagnostic information. Short-lived abuse counters use a keyed hash rather than storing the account or installation identifier in the counter table.

Optional product analytics data: after you turn on Help improve TRNUP, an internal account identifier, screen names, feature events, app version, build number and device platform. Product analytics does not include Health values, photos or videos, messages, comments, captions, names, email addresses, usernames, search terms, workout routes, location or form text. Website analytics uses a separate random browser identifier and is not linked to your app account.

Purchase data: product, store, entitlement status, transaction identifiers and subscription dates. TRNUP does not receive or store your complete card or store-account payment details.

We receive data directly from you, from activity by other people in your crews, and from Apple or Google when you use their sign-in, health-platform or store services.

Apple Health, Health Connect and Spot Check-in

Apple Health access on iPhone and Health Connect access on compatible Android devices are optional and read-only. Workout linking is available in the free social loop. If you separately enable workout alerts, iPhone can use HealthKit background delivery and compatible Android devices can use Health Connect background access with a unique periodic worker to notice a newly completed workout and schedule at most one local reminder for an uncovered workout. Android controls the exact worker timing, so delivery can be delayed. A reminder never uploads a workout or creates a post for you.

TRNUP Pro can process sleep and sleep stages, heart-rate variability (HRV), resting heart rate, respiratory rate, VO2 max, workouts, steps and other permitted activity totals on your device to calculate private body-and-recovery insights and a TRNUP Score. Raw recovery values and raw Apple Health or Health Connect records are not sent to TRNUP's servers, advertising providers or analytics services.

If you install the optional TRNUP Apple Watch companion, the iPhone app sends the latest aggregate goal, streak, personal-record and enabled body-and-recovery summary to your paired Apple Watch using Apple's WatchConnectivity framework. The Watch app does not request HealthKit access or receive raw HealthKit samples. It caches the latest summary on the Watch so the dashboard remains useful between iPhone syncs; signing out clears the iPhone snapshot and instructs the Watch to clear its cached summary.

If you actively link a workout while preparing a proof, the preview shows exactly what can be shared: activity name and type, start and end time, duration, and, when available, distance, pace, active energy and average heart rate. On iPhone, a simplified route is included only when route access is available and the route switch is on. That selected summary is linked to your account and visible in the proof to the crew or crews you selected. Platform record identifiers, source-device details, raw route points, raw heart-rate samples, HRV, sleep, sleep stages and daily activity totals are not included.

TRNUP Score sharing is off until you turn it on. When enabled for Crew Pro boards, TRNUP sends only the rounded score, readiness band and calculation time. Crew members never receive the HRV, sleep, heart-rate, respiratory or other raw values used to calculate it. Turning sharing off deletes the server-side score share.

A 'Workout verified' label means Apple Health or Health Connect contains the linked workout; it does not authenticate the photo, prove identity or establish a medical or performance fact. The two photos remain the social proof. Health information never automatically creates, removes, verifies or rejects a Skip. You can remove a selected workout before posting, disconnect health access in TRNUP and change individual permissions in Apple Health or Health Connect at any time. Disconnecting stops future reading by TRNUP; a summary you already chose to publish remains with that proof until the proof or account is deleted.

Why we use it

We process account, crew and activity data to provide the service you request: authenticate you, run private crews, display proofs and messages, calculate commitments and send requested service communications. The legal basis is performance of our agreement with you.

We use limited technical and security data to prevent abuse, protect accounts, troubleshoot the service and understand whether core features work. The legal basis is our legitimate interest in operating a safe and reliable service.

We use optional, limited product analytics to understand screen use, feature adoption and purchase-flow outcomes, and to improve TRNUP. This collection is off by default and begins only after you consent in Privacy & safety settings in the app or choose Allow analytics on the website. You can turn it off or reject it at any time. We do not use analytics to make health, eligibility or advertising decisions.

Optional marketing email is based on consent and is off by default. You can withdraw that consent in the app. Device push permission is also optional and can be changed in the app or system settings. We may retain information where required to comply with law or establish or defend legal claims.

Where Apple Health or Health Connect information is health data or other special-category data under applicable law, TRNUP relies on your explicit consent. Health access is optional and is not required to use crews, chat or photo proofs. We do not use Health information for advertising, marketing, profiling, data mining or decisions about eligibility, and we do not sell it.

AI, automation and generated examples

TRNUP does not currently send your account data, Health information, private crew content, messages, photos or support requests to a generative-AI service. TRNUP does not use your private content to train a general-purpose AI model.

Some clearly labelled onboarding examples use synthetic or AI-generated demonstration media. Those examples are fictional product demonstrations, not customer testimonials, real user posts or proof that a person completed an activity.

TRNUP uses deterministic rules to calculate goals, streaks, scores, reminders, entitlements and Skip Police outcomes, and a limited rule-based text filter can reject high-severity abusive submissions. These systems do not make legal, employment, insurance, credit, health-care or similarly significant decisions about you. If this changes, we will update this policy and request permission where required before sharing personal data with an AI provider.

Photos, camera and visibility

A standard proof contains one back-camera photo and one selfie captured in TRNUP. The camera is used only when you start capture. TRNUP does not claim that a photo proves a location, medical fact or completed exercise.

Proof media is stored in private object storage. The app checks crew membership before serving media. Profile details and usernames are visible to signed-in users for friend search; crew content is visible to members of the crew where it was shared. People in a crew can save or screenshot content they can see, so only share content you are comfortable sharing with that crew.

Ideas on the feedback board are visible to signed-in TRNUP users, but the board does not display the author's name, username or profile photo. Do not include personal or sensitive information in an idea. You can delete your own idea, report another idea and download your feedback-board activity with your account export.

A safety report is sent privately to TRNUP for moderation. Reporting a proof for safety is separate from a public Skip Police challenge and does not start a crew vote. Blocking an account is a separate action you can use from that person's profile.

Service providers and transfers

We use service providers for cloud hosting, PostgreSQL database hosting, private object storage and email delivery, including Amazon Web Services; PostHog's European cloud for limited product analytics; Apple Push Notification service for iPhone push delivery; Firebase Cloud Messaging for Android push delivery; Apple when you use Sign in with Apple or purchase through the App Store; and Google when you use Google sign-in, Google Play billing or Health Connect. Apple and Google provide transaction information that TRNUP validates to grant subscription access. These providers process only the information needed to provide their service to TRNUP under their applicable terms and safeguards.

Some providers may process data outside Norway or the European Economic Area. Where required, we rely on an adequacy decision or contractual safeguards for those transfers. We may also disclose information where required by law, to protect users, or in connection with a business reorganisation subject to appropriate safeguards.

Cookies, app storage and tracking choices

The website uses necessary browser local storage to remember your analytics choice. Optional PostHog website analytics is not initialized before you allow it. Rejecting analytics is as easy as allowing it, does not reduce website access, and you can reopen Cookie choices from the footer. Details are in the Cookie & analytics notice.

The app stores necessary authentication, locale, permission and privacy preferences on your device. Optional PostHog app analytics is off by default and its client is not initialized until you enable Help improve TRNUP. TRNUP does not use advertising identifiers, cross-app tracking or targeted-advertising SDKs.

Security and incident response

TRNUP uses access controls, private object storage, encrypted network transport, server-side encryption for stored media, upload type and size checks, authentication checks, request limits and least-data analytics controls. Supported still images are decoded and re-encoded on the server before storage to remove embedded metadata such as EXIF and GPS fields. Security controls can restrict automated or unusually frequent activity. No system can be guaranteed completely secure. We review access and dependencies, investigate suspected incidents and notify affected people and authorities when applicable law requires it.

Protect your email account and device, do not share one-time sign-in codes, and contact hi@trnup.app promptly if you believe your account or private crew content has been accessed without permission.

Retention and deletion

We keep account and user content, including feedback-board ideas, votes and reports, while the account is active and for as long as needed to provide the service. Security records and records needed for legal compliance may be kept for a limited additional period. Deleted information may remain in backup copies until the relevant backup cycle expires.

Apple Health and Health Connect values that stay on your device are not retained in TRNUP's server database. A workout summary you explicitly attach is retained as part of that proof and is deleted from active systems when the proof or account is deleted, subject to the backup cycle described above. An aggregate TRNUP Score share is retained only while sharing is enabled or until the account is deleted.

The Apple Watch companion retains only the most recent summary received from the paired iPhone in local Watch storage. It is replaced on the next sync and cleared after TRNUP sends a confirmed sign-out state. You can also remove the local copy by deleting the Watch app.

You can edit profile details, remove your profile photo, leave crews, change communication preferences and permanently delete your account in the app. If you cannot access the app, request deletion at trnup.app/delete-account from the email address connected to your account. Account deletion removes the profile and active private content, transfers an owned crew to its longest-standing active member, and deletes an owned crew if no active member remains. Private object deletion is attempted immediately; if storage is temporarily unavailable, a durable deletion job retries automatically until the active object is removed. Store subscriptions must be cancelled separately with Apple or Google. Backup copies expire through the applicable backup cycle, and limited transaction, safety or security records may be retained where law requires it.

To request access, correction or export, contact hi@trnup.app from the email address connected to your account. We may ask for reasonable information to verify your identity. We will respond without undue delay and normally within one month.

Your rights

Depending on where you live, you may have rights to access, correct, erase, restrict or object to processing, and to receive portable data. You can withdraw consent at any time without affecting processing already carried out. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

Where applicable US state law gives you additional rights, you may ask to know, correct or delete personal information and to receive a portable copy. TRNUP does not sell personal information, share it for cross-context behavioural advertising or use it for targeted advertising. We will not discriminate against you for exercising a privacy right. You or an authorised agent can submit a request at hi@trnup.app; we will verify the request proportionately before disclosing or deleting account data.

Children and changes

TRNUP is not directed to children under 13, or under the higher minimum age required in their country. If we learn that an underage child has created an account without required permission, we will delete it.

We may update this policy as TRNUP changes. Material updates will be communicated in the app or by another appropriate channel, and the date below will be updated.