Privacy Policy

1. Introduction

This Privacy Policy ("Policy") explains how Trainer24 ("we", "us") as the data controller collects, uses, discloses, and protects your personal data when you use the Trainer24 application and related services. This Policy is prepared in accordance with the Personal Data Protection Act B.E. 2562 (2019) ("PDPA") of Thailand.

2. Definitions

• •"Personal Data": means any information relating to a natural person that enables the identification of such person, directly or indirectly.
• •"User" or "you": means any individual who uses our services, whether as a trainer or trainee.
• •"Services": means the Trainer24 application, website, and all related services.
• •"Data Controller": means Trainer24.

3. Information We Collect

We collect the following categories of personal data:

• •Account and Registration Data: Name, email, phone number, password (encrypted), and identity verification information.
• •Profile Data: Profile photo, display name, bio, professional certifications, specializations.
• •Service Usage Data: Schedules, packages, training history, income records, workout logs.
• •Payment Data: Bank account information (for trainers), payment history.
• •Technical Data: IP address, device type, operating system, crash reports (with your consent).

4. Purposes of Data Processing

We use your personal data for the following purposes:

• •Providing application services and managing user accounts
• •Processing appointments and training packages
• •Processing payments and recording income
• •Sending relevant notifications about appointments and services
• •Improving and developing our services
• •Responding to inquiries and providing customer support
• •Preventing fraud and maintaining security
• •Complying with applicable laws and regulations

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• •Contract: To perform our service agreement with you.
• •Consent: When you have given explicit consent, such as for crash reporting.
• •Legitimate Interests: For service improvement, fraud prevention, and security maintenance.
• •Legal Obligation: When required by law to collect or disclose data.

6. Disclosure to Third Parties

We do not sell your personal data. We may disclose data to the following parties:

• •Service Providers: Companies that help us operate, such as cloud hosting, payment processing, and notification service providers.
• •Counterparties: Trainers and trainees connected through the application (only necessary information).
• •Government Authorities: When required by law or court order.

7. Data Retention Period

We retain your personal data for the following periods:

• •Account Data: Throughout your account lifetime and 90 days after account deletion.
• •Payment Data: 7 years as required by tax regulations.
• •Logs and Crash Reports: 90 days.

8. Data Security

We implement appropriate security measures to protect your personal data, including:

• •SSL/TLS encryption for data transmission
• •Password storage using irreversible hash algorithms
• •Data storage on security-compliant servers
• •Access restriction to authorized personnel only
• •Regular security audits and reviews

9. Your Rights

Under the PDPA, you have the following rights:

• •Right of Access: Request a copy of your personal data.
• •Right to Rectification: Request correction of inaccurate or incomplete data.
• •Right to Erasure: Request deletion of your personal data.
• •Right to Object: Object to data processing in certain circumstances.
• •Right to Data Portability: Request data in a machine-readable format.
• •Right to Withdraw Consent: Withdraw previously given consent at any time.
• •Right to Complain: File a complaint with the Personal Data Protection Committee.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and become aware that your child has provided personal data to us, please contact us to have such data deleted.

11. Account Deletion

You can request account deletion from within the application (Profile → Delete Account). Upon confirming deletion:

• •You have a 7-day period to cancel by logging in again.
• •After 7 days, data will be permanently deleted and cannot be recovered.
• •Some data may be retained as required by law (e.g., payment records).

12. Policy Changes

We may update this Policy from time to time. When significant changes are made, we will notify you through in-app notifications or email. Continued use of our services after changes constitutes acceptance of the updated Policy.

13. Contact Information

If you have questions, wish to exercise your legal rights, or want to file a complaint regarding personal data processing, please contact our Data Protection Officer at: