Privacy policy

Who processes your data

The controller is Martina Živković, Croatia ("we"), who develops and runs the TRENtime app. For any privacy question, write to privatnost@trentime.eu.

TRENtime helps trainers and their clients schedule sessions, track packages and communicate. We use data only for that.

What we collect

Account data: name, e-mail address, password (stored only in hashed form), role (trainer or client), language and a record of accepting the terms and this policy.

Trainer data: business name and city (if entered), working hours, absences, locations, package and price settings.

Session data: bookings, cancellations, attendance, packages, make-up sessions, debts and amounts entered by the trainer. The app does not process payments between trainer and client.

Messages and notifications exchanged in the app and feedback you send us.

Guests: a trainer may enter the name and contact of a person without an account. The trainer is responsible for having a legal basis for that.

Technical data: a device token for push notifications and a log of important actions (e.g. package changes) for security and dispute resolution.

We do not collect device location, contacts, photos or health data, we show no ads and we do not sell data.

Legal basis and purpose

Performance of a contract (Art. 6(1)(b) GDPR): to run the app – account, calendar, bookings, packages, notifications.

Legitimate interest (Art. 6(1)(f)): security, abuse prevention and an action log to resolve disagreements between trainer and client.

Consent (Art. 6(1)(a)): push notifications and e-mail reminders, which you can turn off in settings or on your device.

Who sees your data

A trainer sees data of their connected clients (name, sessions, packages, messages). A client sees their trainers and their own sessions. Participants of a group session see only basic details of that session.

Service providers processing data on our behalf: Supabase (database and sign-in, servers in Ireland, EU), Brevo (e-mail delivery, France, EU), Expo (push delivery) and Apple and Google (app distribution and push). Transfers outside the EU rely on the European Commission standard contractual clauses or another lawful basis.

We disclose data to authorities only when the law explicitly requires it.

How long we keep data

For as long as you have an account. You can delete it in the app (Settings → Account & privacy → Delete account). Deletion happens after 14 days; signing in within that period cancels it.

After deletion we remove your name, e-mail, messages, notifications and device tokens. Records of past sessions and packages remain only without personal data, as part of the trainer’s records.

Database backups are erased automatically shortly afterwards.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent. To exercise them, write to privatnost@trentime.eu; we reply within 30 days.

You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), www.azop.hr.

Security and age

Data is transferred encrypted (HTTPS) and database rules ensure each user sees only what belongs to them.

The app is intended for people aged 16 and over.

Changes

We will notify you in the app about material changes to this policy. Last updated: 25 October 2026