ISO TRAINER

Iso Trainer — Privacy Policy

Last updated: 17 October 2026

Iso Trainer is an Android app for strength coaches, physiotherapists and gyms. It reads the SlimTech Isometric Force Block over Bluetooth, records isometric strength tests and training sessions for the clients a coach works with, and produces reports. This policy explains exactly what it stores, where, and who can reach it.

The app is published by SlimTech (Elie, Lebanon). Contact: kaitrading.co@gmail.com

The short version

The app is used by an organization (a gym or clinic). The coach who creates the organization is its owner; other coaches join it by invitation. Everything the organization records is stored in its own private area of our Google Firebase project, and only that organization's active staff can read it.
The app does not work without an account. Signing in is what identifies the organization whose records you are working in.
A copy of the organization's records is kept on each device that signs in, so a session can be recorded in a gym with no signal and uploaded later. Signing out clears that copy once it has been uploaded.
We do not sell data, show ads, or share anything with advertisers or data brokers.
Iso Trainer is not a medical device — see the section below.

What the app stores

About you, the coach

Your display name, email address and password, if you create or join an organization. Passwords are handled by Google Firebase Authentication and are never visible to us or stored in the app.
Your role in the organization (owner, admin or coach), and when you joined it.

About the clients your organization records — you type these in; the app does not obtain them from anywhere else:

Name, phone, email, date of birth, sex, height and body mass; an optional photo
Free-text notes, injury notes, the injured side and the date of the injury or surgery; whether the client is in rehabilitation and any ceiling on training intensity
Emergency contact, medical-clearance and waiver flags, goals
Blood-pressure readings, pain and stiffness diary entries, and per-effort pain and exertion scores, where the coach records them
Measured training data: force-time recordings from the Force Block, peak and mean force, rate of force development, hold times, personal records, session loads and the derived reliability, symmetry and progress figures
Packages and payments between the client and the organization, if the organization uses that feature

About the organization

Its name, the Bluetooth address and calibration record of each Force Block it uses, its exercise catalogue and protocols, its staff and pending invitations, and its licence with SlimTech (plan, expiry, and a record of each grant).

Automatically, for reliability

Crash reports and basic diagnostics through Firebase Crashlytics and Firebase Analytics: device model, Android version, app version, and the stack trace of a crash. These do not contain client names or notes. The app removes the advertising-identifier permission from its build, so no advertising ID is collected.

The app requests Bluetooth permissions solely to find and connect to the Force Block. It does not use Bluetooth scan results to derive your location, and declares neverForLocation to the system on Android 12 and later. On Android 11 and earlier the system requires the location permission to scan for Bluetooth devices; the app never reads or stores a location. The camera, if you grant it, is used only for the optional joint-angle capture and is never uploaded.

Where it is stored

In Google Firebase (Firestore, Authentication and Storage), under the organization's own path. The security rules permit access only to signed-in members of that organization whose access has not been revoked; SlimTech's own account can read an organization's name, owner and licence in order to manage the licence, and nothing else through the app. Firebase stores data on Google Cloud infrastructure, which may be outside your country. Transfer is encrypted with TLS.
On each signed-in device, in the app's private storage: a cache of the organization's records (up to 256 MB) so the app works offline, and a write-ahead log of training attempts not yet uploaded. Android's automatic backup is not used for this data. Signing out uploads what is pending and clears the cache; if the device is offline at sign-out the copy is kept until the next online sign-out, and the sign-in screen says so.
In files you create yourself — PDF reports and CSV exports you generate, saved in the app's own external files folder and shared through whatever app you choose. Once you send a report by WhatsApp, email or any other app, it is out of this app's control and subject to that service's terms. Delete such files yourself when they are no longer needed.

Health data, and your responsibility as a coach

Injury notes, pain scores, blood-pressure readings and body measurements are health information about other people. You enter it, so you are responsible for having their permission to record it and for handling it lawfully where you practise. This may include obligations under laws such as the GDPR if you are in the UK or EU. The app gives you the tools — organization-only access, revocable staff access, per-client deletion, export — but it cannot give you a lawful basis for collecting the data in the first place.

Leaderboards and shareable record cards show a client's name only with that client's own consent, recorded on their card by the coach; without it they appear as initials or not at all.

Not a medical device

Iso Trainer is not a medical device. It does not diagnose, treat, cure or prevent any medical condition. Limb-symmetry, readiness, reliability, training-load and progress outputs are coaching or screening information, not return-to-sport clearance or medical advice. The blood-pressure and tendon programmes are training templates, not treatment. Consult a qualified healthcare professional for medical advice, diagnosis, treatment or return-to-sport decisions.

Deleting data

One client: open the client's card and choose Delete client. The client's record and every session, attempt, recording, record, programme, diary entry and reading that belongs to them are deleted from the organization's cloud data and from the device; a copy still cached on another signed-in device is removed the next time that device syncs.
A staff member's access: the organization's owner or admin revokes it from the Staff screen. The person can no longer open the organization's data; what they recorded stays with the organization.
Your own account: in the app, Home → Delete my account. The screen says what will go before you confirm with your password. For a coach or admin: your sign-in, your profile and your membership of the organization are deleted at once; records you entered about the organization's clients belong to the organization and stay with it. For the organization's owner: the organization and everything in it (every client, session, attempt, recording, record, programme, diary entry, reading, device record, exercise, protocol, package and payment, and every membership) is deleted together with your sign-in and profile - which is refused while other staff still have access, so that nobody loses records by someone else's decision; revoke their access on the Staff screen first. Deletion is immediate and cannot be undone. If you can no longer sign in, email kaitrading.co@gmail.com from the address the account uses and it is done within 30 days of identity verification. This is also described at https://isometric-trainer.web.app/account-deletion.html.
What deletion retains: the organization's licence record with SlimTech (its plan, expiry and grant history — a business record, no training or health content), for as long as the organization exists.
Everything on a device: sign out (which clears the cache once it has uploaded) and uninstall the app.
Files you already exported (PDF reports, CSV files) and any copies you shared onward cannot be recalled by the app — delete those yourself.

Athletes: your results page

If your coach invites you, you can see your own strength test results on a web page at isotrainer.slimtechgroup.com. You sign in with the email address your coach has for you; we send a sign-in link to that address.

What the page shows: your first name, the movements you were tested on, the dates, your peak and early force, and whether each result is higher, lower or similar to your last test. It does not show your coach's notes, injury notes, warning flags, or anything about other clients.
Who can see it: you, and the staff of the clinic or gym that invited you.
When it is shared: only after you accept the invite, and only while your coach keeps sharing on. Your coach can stop sharing at any time.
Age: the results page is for adults (18 or older) only.
Deleting your account: on the results page, choose Delete my account. This stops sharing to the page and deletes your sign-in. Your test records stay with the clinic, under the rest of this policy.

Athletes: your home plan

If your coach gives you a home plan, you can follow it and log your sessions on the same page.

What you enter: the date, exercises and sets done, pain (0–10), whether it was sharp or got worse each set, session effort (0–10), why you stopped early or did fewer sets, "Not today" with a reason, and next-morning pain or stiffness.
Who can see it: you and the staff of the clinic or gym that invited you. Your coach does not see your logs in real time.
On your phone: if you are offline, a session is kept on your phone until it uploads, for up to 14 days. It is removed when you sign out or delete your account.
How long it is kept: your logs stay with the clinic like your test records. If the clinic deletes your client record, your home logs are deleted too.
This is not medical monitoring. If you feel unwell, stop and call your local emergency number.

Children

Iso Trainer is a tool for coaches and is not directed at children. If you record data about a minor client, you are responsible for obtaining consent from their parent or guardian.

Changes

If this policy changes materially, the updated version will be published at this URL with a new date at the top.