Privacy

Trella: Train Your Life · updated October 7, 2026

Trella is a coaching app run by IT Done, LLC. It works because you tell it about your training, food, sleep, body and recovery. This page says what we keep, who can see it, and how to delete it. Questions go to athletefeedback@trella.coach.

What we store

• Account: your name and email address. We use them to sign you in and to send your briefs.
• Strava data: if you connect Strava, your activities (type, date, duration, distance, pace, heart rate, power, segments, and the names and notes you give them), your Strava profile (name, city, bio, profile picture), your gear, your activity photos, and the kudos and comments on your activities. We keep where an activity started only to about one kilometer, so we can look up your weather; never the route, the map, where it ended, or the exact places of segments and photos. We only read; we never post to Strava.
• Tonal data: if you give us your Tonal login, your strength workouts from Tonal. We only read.
• Health and body data you log: weight, body measurements, sleep, how ready you feel, pain scores, injuries, illness, rehab exercises, supplements, caffeine, alcohol, fluids, lab results, check-in notes, and things you replace on a schedule (contacts, a toothbrush, a razor).
• Private logs, only if you turn them on: your menstrual cycle, your medication, and your checkups (dental cleanings, physicals, screenings, vaccines). These are kept apart from everything else and encrypted; see Private logs below.
• Food: meals and foods you log, nutrition values, and barcodes you scan.
• Photos: not kept. A photo you take in the app (a plate, a label, a scale) is read by Trella to log what is in it, then thrown away. We do not store it. The one exception: a screenshot you attach to Send feedback is kept for 30 days so the problem can be fixed, then deleted. A photo sent in chat is never kept, even with a problem report. One small thing from a photo is kept briefly: if your phone stamped it with a time zone, we keep that stamp for 48 hours, only to notice that you may be traveling and ask you, then it is dropped. The photo itself is still never stored.
• Conversations: what you write to Trella and her replies, plus short summaries she keeps so she remembers what you told her. Email you send us at athletefeedback@trella.coach is kept too.
• Plans and schedule: your races, training plan, travel dates, reminder preferences, and constraints you set.
• Device: a notification token if you allow notifications, with your device type. Each chat message is logged with your IP address, country and device type for safety, kept 30 days. We do not collect advertising identifiers, contacts, or your phone's location. We keep your home area to about one kilometer, worked out from where your outdoor activities usually start, only so the weather in your brief is yours.

How we use it

Only to coach you: to build your plan, write your briefs and notes, answer you in chat, track your food and recovery, and remind you when you ask us to. We do not sell your data or show ads.

Who sees it

• You.
• The Trella team at IT Done, which reviews coaching output, feedback and support requests. Your cycle, medication and checkup logs are the exception (below). If you write something that sounds like a crisis or a medical emergency, the Trella team is emailed your message so a real person can check on you.
• Friends you both accepted. A friend never opens your app; they see a small card with your short name, built only from what you switch on for them, friend by friend, and everything starts off. The five things you can share: your race (name, date, days left); how many of this week's planned sessions you have done (never a grade); your workouts this week (day, sport, minutes; never the name, route, distance, pace or heart rate); your achievement titles; and a check for each day you did your rehab. Never your food, never the details, never your plan document, and never your conversations with Trella. Nobody else can see your data. You can change what you share, remove a friend, block someone, or report a problem to the Trella team at any time; removing or blocking stops sharing both ways immediately, and the person you report is never told.
• Other Trella members, for food items only.A food or recipe you save (its name, brand, serving, nutrition, ingredients, barcode, and the date it was last used) is shared in everyone's food search so nobody has to type the same food twice. It never shows who saved it. What you ate, when, and how much stays in your private journal.
• Service providers that run the app for us, only as needed, and only what each one needs:
  • Cloudflare hosts the app and stores your data.
  • Microsoft Azure runs the nightly sync server.
  • Strava sends us your activities when you connect it.
  • Tonal, if you give us your login, sends us your strength workouts.
  • SMTP2GO sends our email to you.
  • Microsoft 365 sends some of our email, receives the email you send us, and holds our daily backups.
  • Apple and Google deliver notifications to your phone; on the web, your browser's push service does, with the message encrypted.
  • Open Food Facts receives only the barcode or food name you look up, never who you are.
  • Brave Search, when Trella looks something up on the web for you, receives only the search words, never who you are.
  • The National Weather Service and OpenWeatherMap receive your home area as coordinates rounded to about one kilometer, nothing else, to fetch your forecast.
• AI providers.Anthropic runs Trella's strong model; OpenRouter routes her fast model and her photo reader to the companies that host them. None of them may train on your data, and the app asks for your consent before any of it is sent. You can withdraw that consent at any time in Account, then AI and privacy.
  • Anthropic (Claude) receives the chat turns that need the strong model (goal, plan, pain and “why” questions), research-desk questions, and the nightly brief and plan notes, together with the recent conversation and the training, food, sleep and pain facts needed to answer.
  • OpenRouter, which routes to Z.ai's GLM model run by US hosting companies (DeepInfra, Fireworks, Together and others), receives the fast logging turns, the morning read, and a food label you scan from the Log, with the page you are on, the day's facts, and the photo (which is not stored).
  • Google (Gemini 2.5 Flash, reached through OpenRouter) reads a photo you send in chat (a plate, a label, a scale) to say what it is and read a scale display. It receives only the photo and that question, never your name or your other data. The same chat photo then goes with your message to GLM, as above, or to Anthropic when the strong model answers. The OpenRouter hosts keep nothing; Anthropic keeps a request only as long as its API terms allow for safety review.
  • Every request we send through OpenRouter carries two settings OpenRouter enforces before it picks a host: no provider that trains on your data, and no provider that retains it (zero data retention). If no such host is available, the request fails rather than going elsewhere.

Private logs: cycle, medication and checkups

Your period, the medicines you take, and your medical checkups are yours. We treat them that way. Each log is off unless you turn it on yourself, in Account, then Private logs (checkups can also be turned on from the Checkups list). Trella never turns them on and never guesses at them from anything else you log.

• What is kept. For your cycle: the dates a period started and ended, any symptoms you tick, and a short note if you add one. For medication: the name, the dose you type, the time you took it, a note if you add one, the list you save for one-tap repeats, and any reminder times you set. For checkups: which ones you track, when you last had each, how often you want it, and an appointment date if you add one; never results. Nothing about fertility, sexual activity or pregnancy is ever asked or kept. Vitamins and supplements are not part of this; they stay in your regular journal.
• Where it is kept. In its own place, apart from your journal, your training history and everything else, encrypted at rest with a key held by the server. It never goes into your journal, your timeline, notes or reports, exports, feedback emails, or anything a friend can see.
• Who can see it. Only you, signed in as yourself. The app refuses every request from anyone viewing or acting on your account, including the people who run Trella, and there is no setting that changes that. No one else can see it either. As with any online service, the people who run the servers keep the keys that keep it running; we have built Trella so that no screen, tool, report or export shows this data to anyone but you.
• Which AI sees it. These logs are never sent to OpenRouter. When you bring them up yourself in your own chat, that turn goes only to Anthropic on the strong model, and nowhere else.
• How Trella uses it. Only when you bring it up yourself in your own chat, or ask from the log itself. Then, and only then, Trella reads your recent entries to answer you, briefly and factually. For medication she only repeats what you logged and when; she never gives advice on what to take, how much, when, or whether to start, stop or change anything, and sends those questions to your doctor or pharmacist. For checkups, she may remind you that one is due; what you need and when is up to you and your doctor. She does not change your training based on cycle phase rules the research does not support; she goes by your own pattern. If your cycle changes in a way that can be a sign of not eating enough for your training, she will say so plainly and suggest talking to your doctor. That conversation is sealed: it stays in your own chat history, and it is kept out of everything we review. Those chat turns live with your conversations, not in the encrypted log, so deleting a log does not delete them; deleting your account does.
• Deleting it. One tap: Delete all my cycle data, Delete all my medication data or Delete all my checkup data in Private logs removes it completely, right away. You can delete single entries in the log, too. Turning a log off stops Trella from using it; your entries stay until you delete them. Deleting your account deletes them right away, before the rest of your account.

How long we keep it

While your account is open. Your conversations with Trella and her short summaries are kept until you delete your account; the live thread on screen starts fresh after 24 hours. Safety logs of chat messages are kept for 30 days. Feedback screenshots are kept for 30 days.

Deleting your account

In the app, open Account, then Delete my account, and confirm. Your account and everything above are deleted from the app and its database right away: your Strava connection is revoked, and your photos, conversations, logs and timeline are gone. Daily backup copies age out within 30 days. Emails already sent to the Trella team (feedback, support, safety alerts) stay in our mailbox. We keep a short record that the account was deleted: your email address, the date, and your device type.

If you cannot get into the app, email athletefeedback@trella.coach (athletefeedback@trella.coach) from the address you sign in with. We confirm by email and delete the same way. You can also disconnect Strava yourself at any time in Strava under Settings, My Apps.

Security

Sign-in uses one-time codes; there are no passwords to leak. Data is encrypted in transit, and access to the servers is limited to the operator.

Children

Trella is for adults. We do not knowingly collect data from anyone under 16.

Changes

If this policy changes in a way that matters, we will tell you in the app or by email before it takes effect.

Support · Sign in