Privacy
This is a translation for your convenience. The German version is legally binding.
Controller
Martin Hesse, c/o flexdienst #21633, Kurt-Schumacher-Straße 76, 67662 Kaiserslautern, Germany, support@xplainly.app (see Imprint).
Hosting
This website is hosted on Google Firebase Hosting (Google Ireland Ltd.). When you visit it, Google processes technically necessary data (e.g. IP address) to deliver it. There are no cookies, no tracking and no analytics tools.
Waitlist
When you sign up, we store your email address, the time and – if you provide it – which TV you have in a Google Firebase database (data centre in Belgium), solely to inform you when BLOX launches in the app stores and to see which TVs BLOX is worth supporting. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time by emailing support@xplainly.app; we will then delete your address. The list will be deleted at the latest after the store launch.
Beta test
For the Android beta you join a Google Group (Google Ireland Ltd.). In the member list we see your email address and name; we only use them to give you access to the closed test on Google Play. The iPhone beta runs through TestFlight (Apple). There we see who is testing, crash reports and the feedback you send via TestFlight yourself; Google’s and Apple’s privacy policies apply to the data they hold. The legal basis is running the test (Art. 6 (1) (b) GDPR). You can leave at any time via the group or TestFlight.
Contact
If you email us, we process the email to reply and delete it once the matter is settled and no retention obligation applies.
Support via PayPal
On trainblox.com/en/support a link leads to PayPal. Only when you click it and pay there does PayPal (Europe) S.à r.l. et Cie, S.C.A. process your data under its own privacy policy; we receive the name, email address and amount of the payment from PayPal and keep them due to tax retention obligations.
Amazon affiliate links
Links marked with * (e.g. on trainblox.com/en/stick) lead to Amazon and are affiliate links of the Amazon Associates programme (Amazon EU S.à r.l.). If you buy through them, we receive a commission; the price does not change for you. Nothing is recorded on our website. Only when you click the link does Amazon process data (e.g. cookies to attribute the purchase) under Amazon’s privacy policy.
The BLOX app (TV and phone)
BLOX has no ads, no tracking and no analytics tools. Data is not sold. Only what the app needs for your training is stored.
Account and household
In the phone app you sign in with Google, Apple or an email link (Firebase Authentication, Google Ireland Ltd.). Your email address or the identifier of the sign-in service is stored. The household includes the names of the people you add, linked TVs, invitations and your equipment at home (e.g. dumbbells, a home gym station). The TV signs in anonymously and only gets access to the household you link it to.
Workouts and health data
BLOX stores per person: workouts (type, duration, energy, exercises, number of sets per body region, with the camera coach also counted reps, depth and tempo per set), goals, weights or machine levels per exercise, dumbbell weights (light, medium, heavy), levels for bodyweight exercises, preferred rest length, favourite exercises and exercises that should not appear, optionally the year of birth (to estimate maximum heart rate), how you feel today (“How are you today?”, e.g. “under the weather”, sick days), how a workout was (“How was it?”, giving feeling and effort, and if you like the reason, e.g. “knee hurt”), health information if you answer it or tell the coach (heart or blood pressure, pregnancy, back, joints, over 65 or not trained for a long time), whether a person is a child, and settings such as colour, figure and coach style. If sensors or a watch are connected, heart rate, power and cadence are added second by second. Heart rate, how you feel, health information, pain and illness information are health data (Art. 9 GDPR). The legal basis is your explicit consent (Art. 9 (2) (a) GDPR), which you give in the app before signing in and can withdraw at any time (via “Delete account”); for everything else, the use of the app (Art. 6 (1) (b) GDPR). Data is stored in a Google Firebase database in the data centre in Belgium; the server functions run in Frankfurt and Belgium.
Health Connect (Android) and Apple Health (iOS)
Only if you tap it in the app and allow it in the system does BLOX read your steps per day and your workouts (type, start, duration). BLOX uses this to avoid duplicate entries and to suggest a workout without legs after many steps. BLOX only writes to Apple Health if you turn on “Save workouts to Apple Health” in the settings and allow it in the system: then your finished BLOX workouts are saved as workouts (type, start, duration, for bike rides the energy from the watts). BLOX does not write anything to Health Connect.
Recovery: only if you turn on “Sleep & resting heart rate for suggestions” in the settings and allow it in the system does BLOX also read your sleep (duration), your resting heart rate and – if available – your heart rate variability for the last 35 days. These values stay on your phone and are not sent to the database. BLOX only compares them with your own average there and suggests an easier workout after a short night or with a raised resting heart rate; the decision stays with you. Turning it off deletes the values from your phone. This is not a medical assessment.
The use of data from Health Connect complies with the Health Connect Permissions policy, including the Limited Use requirements. Data from Health Connect and Apple Health is not shared with third parties, not used for advertising and not used to train AI models.
Apple Watch and Garmin watch
Apple Watch: only if you turn on “Heart rate from Apple Watch” in the settings and allow it in the system does BLOX start the BLOX app on your watch for each of your workouts. It reads your heart rate during the workout and sends it to your phone – for workouts on the TV via the database to your TV, just like a chest strap. The watch saves the workout to Apple Health (with heart rate and energy) so it counts towards your rings.
Garmin watch: only if you install BLOX from the Connect IQ Store on your watch and turn on “Connect to Garmin” in the settings does the BLOX app connect to the watch via the Garmin Connect app on your phone (Connect IQ). The watch measures your heart rate during the workout and sends it to the BLOX app on your phone – for workouts on the TV via the database to your TV, just like a chest strap. BLOX sends the current exercise and time left to the watch. BLOX uses your heart-rate zones from your Garmin profile only for the display on the watch. At the end the watch saves the workout (from one minute; “Discard” deletes it) and Garmin Connect adds it to your account. Garmin’s privacy policy applies there.
With both watches, the TV deletes each heart-rate value from the database as soon as it has read it.
Voice coach and announcements
When you talk to the coach, your phone’s operating system converts speech into text (Google or Apple). BLOX only receives the text. The text, the names of the people in your household, your current selection, a short summary of your goals and recent workouts and – during a workout – the current exercise go to a language model at Amazon Web Services in Frankfurt (Amazon Bedrock). If you tell the coach something about your health, it is processed the same way and, if you want, stored as health information. Our server logs only record what kind of reply was given, not what you said. Announcements during the workout are generated by Amazon Polly (Frankfurt) from the announcement text; the audio file is cached so that identical announcements are not generated again. AWS does not use the data to train its models.
Strava
Only if you connect Strava: BLOX stores the Strava access keys, uploads your BLOX workouts there (with heart rate and power, if available) and fetches your Strava activities from the last two weeks into your history. Strava’s privacy policy applies to the data at Strava (Strava, Inc., USA). You can disconnect at any time in the app or at Strava.
Camera coach (beta)
Only if you switch it on during a workout on the phone does BLOX use the front camera. A body-tracking model (MediaPipe, running as a program directly on the phone) finds joint points in the image; from these BLOX counts reps and estimates depth and tempo. The camera image never leaves the phone and is not stored, nor are the joint points. Only the results per set are stored in your workout history (see above). If you use your phone as the camera while training on the TV, it sends to your TV via our database (Google Firebase, Belgium, see above): during setup the detected joint points (for the outline on the TV), then counter, target, tips and the results per set. The camera image is not transmitted here either; only members of your household can see this data; it is continuously overwritten and deleted after the workout (if a workout is interrupted, at the latest with the next one). The app downloads the body-tracking files from our Firebase Hosting (Google Ireland Ltd.) the first time you switch it on; as with any page request, the IP address is processed, but no image is transmitted. To switch it off, tap the camera button again.
Permissions on the device
Bluetooth (and on older Android versions location, which Android requires for Bluetooth scanning) for heart-rate strap, Garmin watch, smart trainer and Zwift Click; the location itself is not stored. Camera to scan the QR code on the TV and – only if you switch it on – for the camera coach, microphone only for the voice coach (including the short listening in rests, if you have allowed the microphone before). Local network (Wi-Fi search): the phone app looks in your own Wi-Fi for TVs (e.g. a BLOX TV to connect without a QR code, or whether it is a Google TV, Samsung or LG device) to show suitable tips. The result stays on the phone and is not stored or uploaded. For this, the BLOX TV announces itself on the Wi-Fi with its device name. On the TV, BLOX shows an overlay on top of other apps if you want.
Your show on the TV
If you allow it on the TV (notification access), BLOX reads whether a streaming app is playing, how long the episode has left and whether it is paused. BLOX uses this to match the workout length and to pause with the show. Time left and pause status go to your phone with the workout state; what you watch (the title) is neither stored nor transmitted.
App updates
The phone app downloads new versions of its interface from our Firebase Hosting (Google Ireland Ltd.). As with any page request, the IP address is processed.
Error reports
If the app crashes or an error occurs, BLOX sends a short technical report: which app (TV or phone), build version, roughly the device (e.g. Android version and model), the error message and the place in the code. No names, no account or household identifier, no workout or health data, no cookies. Stored in Firebase (Belgium), only the operator can read them; reports are deleted after 90 days at the latest. The legal basis is our legitimate interest in a working app (Art. 6 (1) (f) GDPR). You can switch reports off on the TV under Settings → “Send error reports”.
Usage statistics
So we can see whether BLOX is used, our server adds up totals from our own database once a day: how many households and people there are, how many trained in the last 7 and 30 days, how many workouts and minutes that was and how they split across sport, daily form and TV/phone. The result contains no names, no identifiers and no individual values; only the operator can see it. No third-party tracker, no cookies, no sharing. The legal basis is our legitimate interest in improving the app (Art. 6 (1) (f) GDPR).
Retention and deletion
The data is stored until you delete it. In the app under Settings → Household & account → “Delete account”, your account, your person with workouts, heart-rate curves, daily values, weights, health information and your Strava connection are deleted; if you are the last person in the household, the whole household. Alternatively by email to support@xplainly.app. More: Delete account.
Your rights
Access, rectification, erasure, restriction, data portability and objection. You can withdraw consent at any time; processing up to then remains lawful. You can also lodge a complaint with a data protection supervisory authority. The quickest way is an email to support@xplainly.app.