Your health information.

Profile holds your private personal stats and weight goals. Health brings together check-ins, measurements, saved device readings, clinician instructions and recovery references, with optional detail sections. You choose what to record, import, export or delete.

Personal setup and goals

Before opening a training plan, members complete a short personal setup. Age, optional date of birth, sex, optional gender, height, weight, goals, experience, current activity, equipment, schedule and selected health needs are saved privately. An optional date of birth calculates your current age and enables a birthday greeting inside Training; you can use age without sharing a date of birth. You can decline to share demographic measurements. Unfinished answers are saved to your account so you can resume on another device; this app does not put intake answers in browser storage. Health answers guide conservative general activity choices, not diagnosis or medical clearance. Existing members choose whether to keep their current plan or create a new personal plan. Update these answers in Health or Profile.

Profile shows your personal stats, latest recorded weight and optional target weight. You can add a manual weight check-in without a wearable. Your original starting weight, recorded check-ins and logged activity remain available without resetting your baseline when you edit your details. Weight change is not proof of fat loss or recovery. No wearable is required. Creating another plan does not erase your recorded results.

Optional training milestones, including event names and distances, strength targets, consistency targets and target dates, are part of your private personal setup. Personal plans retain their own milestone; these details are excluded from administrative views and independent AI/MCP access, which is disabled. You can edit or remove a milestone in Profile without deleting recorded workouts. Adult eligibility is self-reported; a private birthdate or measurement does not verify identity.

What is stored

Manual check-ins and previously confirmed historical imports retain supported values with their date and source. Wearable connections and automatic imports are currently disabled while integrations are being tested. Previously saved readings remain available. No new Apple Health, COROS or Oura measurements are fetched or accepted. Saved records remain in your account until you delete them. The app does not infer a diagnosis from a search, calories eaten from wearable energy, or a completed workout from an import.

Wearable integrations: coming soon

All live wearable connections and automatic imports are disabled. This includes phone uploads, direct readings and automatic COROS updates. Previously saved records remain available. Existing phone automations cannot submit a new import; disable or remove them in the companion app to stop attempted sends. Visit Integrations to view the roadmap and vote.

How access is limited

• Each request uses the signed-in member account. Another member cannot select your account or retrieve its health records.
• Personal setup answers and unfinished drafts, health records, medical profiles, body measurements, private session notes, saved plan collections, trial sessions and recorded plan names are excluded from the owner’s administrative views and independent AI/MCP access, which is disabled tools. Administrative plan previews do not read or apply your private clinical restrictions.
• The owner can still see your shared profile name, email and goal, ordinary workout plan, completion and usage totals, integration requests, feedback and signed confidentiality and workout safety agreements. Private Profile stats and date of birth are excluded. A custom workout title or plan can itself reveal information; avoid including private clinical details in shared profile goals or general feedback.
• Health and wearable records are not used by this app for advertising or sold. File imports are read locally in your browser; the original file and raw location tracks are not uploaded.

Storage and security

Personal setup answers and unfinished drafts, health records, medical profiles, body measurements, private session notes, saved plan collections, trial sessions and recorded plan names are encrypted in application storage using Advanced Encryption Standard with 256-bit keys in Galois/Counter Mode (AES-256-GCM) with an account-bound purpose. New saves use encryption, and existing plaintext application records migrate on their next authenticated load. Decryption failures stop the request rather than resetting your information. Wearable authorization tokens use encryption with a separate member/provider purpose. Existing Apple Health upload credentials are retained as hashed authentication metadata and encrypted, account-bound setup records. Upload and setup endpoints are currently disabled, including credential recovery. Retained credentials cannot bypass that hold. Account responses are marked private and no-store.

The hosting platform also operates database encryption and TLS. Hosting administrators, runtime secrets, infrastructure logs, backups and the sign-in service remain part of the security boundary. Application encryption is not a claim that infrastructure operators cannot access data. Historical infrastructure backups may retain older records according to the host’s retention rules.

Plans and trial workouts

Named alternatives contain training settings, not copies of your health or medical profile. Those account settings apply across plans. Trial workouts and recorded plan names appear in your own History, Progress and exports. They remain private unless the shared-plan monitoring choice described below applies. Renaming or removing a saved plan does not relabel recorded sessions. Your account backup contains saved plans and trial logs; the history comma-separated values (CSV) file also includes plan names and trial records.

Plans you build yourself

Your recurring weekly recipe, including chosen exercises, titles, targets and coaching notes, is encrypted with your account data. It is excluded from administrative previews and raw recipe fields in default Training ChatGPT tools. Your own full account export and backup include it. When you request a date range through Training ChatGPT, the workouts for those dates remain available under the existing plan-reading access; avoid placing private clinical details in workout titles or coaching cues.

Plans you choose to share

From your own account, you can find another member by their exact first name, last name and sign-in email, then send a saved workout recipe. This is an exact-match delivery lookup, not a public member directory. A received plan appears as an option in Profile. The recipient decides whether to save it or use it as their active plan. Sending does not copy your personal setup, health records, body measurements, readiness answers or performed workouts. Exercise titles, targets and coaching cues are part of the recipe you choose to send; avoid including private clinical details in them. Shared recipes are encrypted in application storage.

Monitoring starts off. Only the recipient can enable it for an accepted plan and turn it off again. When enabled, that plan’s creator can view its recorded dates, completion, exercises, completed sets, weights, repetitions, time and distance. This access excludes other plans, health records, body measurements and private session notes. Turning monitoring off stops further progress requests; it cannot recall information the creator already viewed or copied. Account deletion removes delivery and monitoring access. A recipe already accepted as another member’s own saved plan remains their record.

Optional Teams and coaching

Joining a team gives accepted members access to its roster, groups and relevant assignment history. Owners manage staff roles; invitations require a reply. Each athlete separately chooses plan monitoring, team check-in sharing and whether staff may enter workout results through the tablet station. Team membership alone does not disclose private intake, Health, Nutrition or performance-test records. Keep clinical details out of shared workout cues and messages.

Team check-in answers, messages and technique media are stored encrypted in the application database. Team check-in answers remain athlete-owned; separate consent controls staff review. Accepted-assignment conversations are visible to the athlete and authorized team staff. Athletes may upload their own short technique photos or videos and remove them. Revocation or leaving stops subsequent authorized access; information already viewed or copied cannot be recalled. Shared-device logging requires a connection and does not cache teammates’ records for offline use. Close the station and sign out after using a shared device.

Your full own-data export includes the team records you are entitled to retain. Account deletion removes your membership, answers, authored messages and uploaded media; an owner’s team is removed with their account. A plan already accepted into another person’s account remains that person’s saved record. Signed legal receipts retain their stated separate treatment.

Optional offline downloads

On Plan, choose Download plan for offline and a date range of up to one year to keep scheduled workouts and written form guides on this device. The dedicated Offline workouts screen can display that snapshot without a connection and save workout results locally until authenticated sync. Downloads, exercise cues and pending logs are stored in this browser’s IndexedDB; Training does not add another encryption layer to these device copies. Personal setup answers and health records are not downloaded, but a customized workout or cue can reveal training limits. Choose a personal device and use its screen lock. Authenticated pages, account and health API responses, credentials and publisher videos are not stored in the service-worker cache.

Each download shows its dates and download time. Refresh it after plan changes. New plan updates, wearable sync and external videos require internet access. Pending logs sync only to the account that downloaded the plan, with signed-receipt and original-record checks; conflicting online changes remain for review rather than being overwritten. Use the download’s removal controls to remove device copies. Removing a download, signing out or deleting your account clears local copies on that browser, including any unsynced results after the stated confirmation. Another device’s downloads need removal on that device. Browser storage or device backups may retain their own copies; server account deletion cannot erase a disconnected device remotely.

Earlier workout versions

Changing or replacing a day with a saved workout keeps its earlier prescription and results as a private earlier version. These records are encrypted with your account data and appear on that day for reference. Only the current workout counts in Progress. Earlier versions are excluded from administrative views, ordinary Training ChatGPT history and the current-workout history spreadsheet. Your full account export and backup include them; deleting your account removes them from current application storage with your other training records.

Exports, deletion and disconnection

Export health records for a personal copy. Your full account export includes completed personal setup and any saved setup draft; you can export or delete your account from the setup screen before completing it. An account backup also includes your saved private information; a clinician review packet includes your saved medical limitations. Downloaded files are not encrypted by this app, so choose where you store and share them. Use individual or bulk health-record deletion to remove saved check-ins. Medical restrictions and body measurements have their own delete or clear controls.

All wearable synchronization is disabled. Previously authorized members can remove Training from the provider’s connected-app settings, and remove Training automations in Health Auto Export on the phone. Account deletion removes saved wearable credentials and requests provider revocation where supported, with unconfirmed revocations reported. Previously received measurements are retained until you explicitly delete them. Removing records updates current account storage after Saved appears; it does not establish deletion of all historical infrastructure backups.

Delete your Training account to remove your current profile, workouts, personal setup and drafts, health/medical records, feedback, usage and saved wearable authorization records. Export first if you need a copy. Signed confidentiality and workout safety agreements remain separate legal evidence; contact the app owner about retained legal records. This deletes the Training account, not your ChatGPT or provider account.

Health Insurance Portability and Accountability Act (HIPAA) status

HIPAA compliance has not been established for this site. Privacy controls and encryption alone do not establish compliance. No hosting business associate agreement, formal HIPAA risk assessment, or verified compliance determination is recorded for this deployment.

HIPAA applicability depends on the app’s relationships and role, including whether it handles information on behalf of a covered healthcare entity. Personal consumer health apps do not automatically receive HIPAA protections merely by storing health information. Other consumer health privacy and breach-notification requirements may apply. Before using this service on behalf of a clinic, insurer or other regulated healthcare organization, the owner needs to confirm the applicable agreements, risk assessment, operational safeguards and legal obligations.

The current hosting terms prohibit processing HIPAA-defined Protected Health Information (PHI) on ChatGPT Sites. Do not use this beta to receive or manage PHI for a healthcare organization. Direct consumer health information is not automatically HIPAA PHI. Hosting terms, section 3.3.

Questions or access requests

Use Profile → Feedback to contact the app owner about access or deletion. Describe the request without copying sensitive medical records into the general feedback form.

Wearable connection details · HHS health app guidance · FTC Health Breach Notification Rule · Cloudflare D1 security

Exercise videos and agreement receipts

Each external video identifies its publisher. Choosing to load an embedded player shares technical data with YouTube; opening an external source page uses that publisher’s service. See video permissions and privacy. Workout safety receipts store your account ID, email, signed name, server acceptance time, exact accepted terms and version/hash. You and the owner can retrieve them. They remain separate from health records after account deletion to document agreements and resolve legal claims, subject to applicable retention and privacy rights.

Nutrition plans and food records

Nutrition stores your selected eating approach, food allergies and ingredients to avoid, dietary and religious requirements, goals and dates, optional personal outcome text and target weight, disliked foods, your store name and optional US ZIP, ingredients marked unavailable, estimated meal budgets and your custom package-price assumptions. Your meal plan, grocery checks, actual prepared/eaten portions and private food notes are encrypted separately with an account-bound purpose. They are excluded from administrative views, shared-plan coaching and ordinary Training ChatGPT history. Recommendations may use your existing private setup and recorded training as context; they do not diagnose deficiencies or prescribe a medical diet.

When you explicitly use a configured retailer search, the app sends the requested ZIP or store location and product-search words to that retailer’s service. Your personal setup, health records, complete meal plan and food logs are not sent with a catalog search. Store results can be partial or outdated; selecting a store alone does not verify its inventory. Retailer credentials stay on the server.

Nutrition requires an internet connection and is not included in offline workout downloads. Export my records includes your nutrition data; a workout-only backup does not. Recipes and grocery lists you download contain your choices and are not encrypted by this app. Clear nutrition data removes your saved plan, food records and grocery checks. A revision tombstone and keyed request receipts remain until account deletion to stop a delayed save from restoring cleared content; receipts contain request identifiers and verification metadata, not recipes, notes or allergy lists. Account deletion removes both nutrition tables from current application storage. Infrastructure backups follow the host’s retention rules. See nutrition sources, recipe reuse, food safety and price assumptions.

Performance test records

Optional performance-test results store the test setup, actual result, units, date, personal target and private notes. They are encrypted for your account and remain separate from your workout plan. They are excluded from the owner’s administrative view, ordinary assistant history and shared-plan monitoring. Export my records includes them; account deletion removes them. Offline workout downloads do not include test records.