Skip to content
ICON
Privacy Policy

Privacy Policy

Last updated: June 15, 2026

1. Introduction

Welcome to Icon Training. We respect your privacy and are committed to protecting your personal data. This policy explains what information we collect through the Icon Training mobile application and the www.icontraining.app website, how we use it, who we share it with, and the rights you have over it.

“Icon Training”, “we”, “us” and “our” refer to Icon Train Smarter LTD, 20 Wimbourne Drive, Gillingham, England, ME8 9EN, the controller of your personal data under UK GDPR and EU GDPR.

2. Information We Collect

  • Identity Data: first name, last name, username, date of birth, sex (required for fitness calculations), and any profile photo you upload.
  • Contact Data: email address, telephone number.
  • Technical Data: IP address, device identifier, operating system, app version, crash logs.
  • Usage Data: in-app actions, screens visited, feature usage.
  • Fitness Data: workout sessions (exercises, sets, reps, weight, duration), cardio sessions (type, distance, pace, route), nutrition logs, recovery metrics, body measurements.
  • Health Data: as detailed in Section 3.
  • Location Data: GPS coordinates during cardio sessions, collected only while the feature is active and only with your permission.

3. Health & Fitness Data

3.1 Health Connect (Android) and Apple Health / HealthKit (iOS)

With your explicit consent, Icon Training reads the following data types from Google Health Connect (Android) and the equivalent data from Apple HealthKit (iOS):

  • Steps
  • Heart rate
  • Active calories burned
  • Total calories burned
  • Distance
  • Exercise sessions

How we use this data. Solely to:

  1. Display your activity, workout, and recovery metrics inside the app.
  2. Power personalised training and recovery insights.
  3. Sync your records to your Icon Training account so they are available across your devices.

What we do NOT do with this data.

  • We do not sell health or fitness data to any party.
  • We do not use health or fitness data for advertising, marketing, or re-targeting.
  • We do not share health or fitness data with data brokers, analytics providers, or ad networks.
  • We do not use HealthKit or Health Connect data to derive information for any purpose unrelated to health, fitness, or medical research purposes that you have consented to.

The one exception to third-party sharing is the Partner Trainer behind an Icon you choose to subscribe to, who receives your data solely to coach you — see Section 3.3 and Section 6.2.

Your control. You can revoke access at any time via:

  • Android: Settings → Apps → Health Connect → App permissions → Icon Training.
  • iOS: Health app → Sharing → Apps → Icon Training.

You can request deletion of all health data stored on your Icon Training account by contacting us (Section 11). Health data is retained while your account is active and deleted within 30 days of account closure.

3.2 AI Coaching (Icon Training Chat)

Icon Training Chat provides AI-generated training and recovery suggestions. When you use Icon Training Chat, your message content and relevant fitness context (e.g. recent workouts) are sent to our AI provider, Google (Gemini, accessed via Google AI Studio and Vertex AI), for response generation. Google processes this data under a data-processing agreement and does not use it to train their foundation models. You can choose not to use Icon Training Chat; doing so will not affect other app features. Icon Training Chat does not make automated decisions that produce legal or similarly significant effects about you.

3.3 Sharing with Your Partner Trainer (the Icon You Subscribe To)

Icon Training lets fitness coaches publish AI-powered coaching personas (“Icons”). When you choose to subscribe to an Icon, you give your explicit consent for us to make your profile, fitness, and health data — including the Health Connect / HealthKit metrics described above — available to the Partner Trainer behind that Icon, so they can deliver the personalised coaching you signed up for.

Partner Trainers access this data through the Icon Training platform, on our behalf and under our control. They are bound by confidentiality and data-processing terms and may use it onlyto coach you — never for their own marketing, advertising, or any unrelated purpose, and they may not sell or onward-share it. This sharing happens only while you are subscribed: a Partner Trainer’s access ends when you unsubscribe from their Icon, which withdraws your consent for future sharing. Section 6.2 lists exactly what is shared.

4. How We Use Your Information

We use your personal data only where we have a lawful basis to do so:

  • Provide and improve fitness coaching services.
  • Create personalised workout and recovery plans.
  • Sync your data across devices.
  • Communicate service-related information (account, security, changes to terms).
  • Process subscription billing.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations.

5. Legal Basis for Processing (UK/EU GDPR)

  • Contract: account creation, workout tracking, subscription management.
  • Consent: access to Health Connect / HealthKit, location data, Icon Training Chat, marketing communications.
  • Contract & consent: sharing your data with a Partner Trainer (Section 6.2) — under contract to deliver the subscription you bought, and under the consent you give by subscribing to their Icon (withdrawn by unsubscribing).
  • Legitimate interests: crash reporting, fraud prevention, service improvement.
  • Legal obligation: tax, accounting, and statutory retention.

You may withdraw consent at any time by contacting us or using the in-app settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Who We Share Data With

6.1 Service Providers

We share limited data with the following processors strictly to operate the service. All processors are bound by data-processing agreements and do not use your data for their own purposes.

  • Google Firebase (authentication, crash reporting via Crashlytics) — technical data and usage data.
  • Google Cloud Platform (application hosting) — all account data.
  • Google (Gemini via AI Studio / Vertex AI) (Icon Training Chat) — chat messages and fitness context, never HealthKit/Health Connect data unsummarised.
  • Apple and Google (app distribution and in-app purchases) — billing identifiers only.

6.2 Partner Trainers (the Icons You Subscribe To)

Icon Training lets fitness coaches publish AI-powered coaching personas (“Icons”). When you subscribe to an Icon, you authorise us to share your data with the Partner Trainer behind that Icon so they can deliver the personalised coaching you signed up for. We share:

  • Profile data: your name and profile photo.
  • Fitness data: workouts, cardio sessions, body measurements, progress photos, nutrition logs, and recovery metrics.
  • Health data: the Health Connect / HealthKit metrics described in Section 3 (steps, heart rate, active and total calories, distance, exercise sessions).

Partner Trainers access this data through the Icon Training platform, on our behalf and under our control. They are bound by confidentiality and data-processing terms and may use your data onlyto provide coaching to you — never for their own marketing, advertising, or any unrelated purpose, and they may not sell or onward-share it. Your Partner Trainer’s access ends when you unsubscribe from their Icon.

We do not sell personal data. We do not share personal data with advertising networks or data brokers.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS 1.2+), encrypted credential storage (iOS Keychain / Android Keystore), access controls on our backend, and routine security reviews. No system is perfectly secure; in the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority in line with our legal obligations.

8. Data Retention

  • Account data: retained while your account is active; deleted within 30 days of account closure.
  • Health data: see Section 3.1.
  • Crash logs: 90 days.
  • Backend application logs: 30 days.
  • Billing and tax records: retained for the period required by applicable law (typically 6–7 years).

9. International Transfers

Icon Training is based in the United Kingdom. Where your data is transferred outside the UK or EEA (for example, to Google Cloud Platform or Gemini infrastructure located in the United States or other regions), we rely on the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision to ensure equivalent protection.

10. Your Legal Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request erasure (“right to be forgotten”).
  • Restrict or object to processing.
  • Data portability (receive your data in a structured, machine-readable format).
  • Withdraw consent.
  • Lodge a complaint with a supervisory authority.

UK users may lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk. EU users may contact their local supervisory authority. California users have additional rights under CCPA, including the right to know, delete, and opt-out of sale (note: we do not sell personal data).

To exercise any right, contact us using the details in Section 11. We will respond within one month.

11. Contact Us

Questions, requests, or complaints about this policy or your data should be directed to:

Email: [email protected]
Post: Icon Train Smarter LTD, 20 Wimbourne Drive, Gillingham, England, ME8 9EN

12. Children

Icon Training is not intended for users under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us, contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be notified to you via in-app notice or email at least 14 days before they take effect. The “Last updated” date at the top of this policy reflects the most recent change. Continued use of Icon Training after an update means you accept the revised policy.