Antrenatorul privacy policy
In short: your clients' data is yours, we hold it for you, and we use it for nothing else. Client names are stored encrypted, and their access codes are never stored in readable form at all.
Last updated: 13 November 2026
01What this policy covers
The Antrenatorul app: the trainer account and the pages clients open through the link they receive. The sistemigro.com website has its own separate policy - anything left in the contact form or on the early-access list belongs there, not here.
02Who we are
Sistemigro, a software company in Timișoara, Romania. For any question about your data, or to exercise your rights, write to us at the address at the bottom of this page.
03Who answers for which data
There are two different situations. For your trainer account data - email, display name, preferred language - we decide what is collected, so we are the controller. For your clients' data, you decide what goes in and why: there you are the controller, and we are the processor that stores and handles it on your instructions.
04What we collect from you
Your email address and password, through Supabase Auth - the password never reaches us in readable form and we cannot read it. Your display name and preferred language. The moment you accepted the terms and this policy. Plus the ordinary technical data of a web app: IP address and browser information, in the server logs.
05What is stored about clients
Only what you enter: the client's name (encrypted), sex, birth month and year, height, desired weight, goals, the measurements you add - weight and, optionally, body fat percentage - plus the workouts, templates and logged sets. We never ask for or store a client's exact date of birth, address, phone number or email.
06How client names are protected
Names are encrypted before they reach the database, under a key kept apart from it. Anyone who obtained a copy of the database would see measurements and workouts, but not whose they are. The flip side, which we would rather say out loud: if that key is lost for good, the names can no longer be read by anyone, including us.
07Client access codes
The six-digit code your client chooses is not stored as such. We keep only a cryptographic fingerprint of it, computed with a secret that is not in the database, precisely so that a code cannot be worked out from a copy of it. Client workout sessions are likewise kept as fingerprints, not as readable tokens.
08The grounds we process on
For your account: performing the contract between us, which is providing the app. For technical logs and security: our legitimate interest in keeping the service working and protected. For your clients' data: you set the grounds, as the controller, and we act on your instructions.
09Who the data reaches
Only the providers we need in order to keep the app running: Supabase, for the database and authentication; Vercel, for hosting; Sentry, for error reporting, in its European region. Each processes the data only for us, under contract. We do not sell data and do not hand it to third parties for marketing.
11How long we keep it
Your account data and your clients' data are kept for as long as the account exists. When you delete your account from inside the app, the account, the clients, the measurements, the workouts and the templates are permanently deleted - no dormant copy is left behind. Setup links expire in 72 hours. Technical logs and error reports are kept briefly, then rotate automatically.
12Your rights
You can ask for access to your data, for it to be corrected, deleted or restricted, you can receive it in a portable format, and you can object to processing. Write to us at the address below; we answer within a month at most. If you are a trainer's client and want to exercise your rights over the data in their account, go to your trainer first, because they decide what is stored. If the answer does not satisfy you, you can take it to ANSPDCP, the Romanian supervisory authority.
13Changes
If we change this policy we update the date above, and when the change is significant we tell you at your account email.