Terms of service for trainers

This is a courtesy translation. If the two versions differ, the Spanish one prevails.

These terms govern the use of 2trAIn 4trAIners (2T4T) by the personal trainer or business that signs up for it (“the trainer”). They include, as an annex, the data processing agreement for the trainer’s clients’ data. The trainer accepts them when activating their account.

1. Who provides the service

• Trade name: 2trAIn 4trAIners (2T4T)
• Company name: LMGINC SL
• Tax ID (NIF): B93905438
• Registered office: Calle Lagasca 95, 28006 Madrid (Spain)
• Registration: Madrid Companies Register, Section 8, Sheet M-895517, 1st Entry
• Email: contact@2trainapp.com

2T4T is for professionals: the trainer uses it in the course of their business, not as a consumer.

2. What the service includes

• A web app for the trainer (app.4trainers.2trainapp.com): client roster, weekly plans, templates, tracking, scheduling, chat and habits.
• The 2trAIn Cliente app (iOS and Android), where clients see and log what the trainer publishes.
• The AI features available at any given time (currently, importing plans from PDF, image or CSV files and natural-language exercise search). The AI suggests; the trainer reviews and decides. Nothing is published or sent to a client without their approval.

We may improve, change or remove features. If a change significantly reduces what the trainer signed up for, we’ll give advance notice (section 12).

3. Account and access

Access is granted after a request on this website. The trainer must provide accurate information, keep their credentials safe and tell us about any unauthorized access. Accounts are personal: if several people in the same business need access, we’ll agree on it separately.

4. Plans, pricing and payment

The plan (Standard, Your brand or Custom), price, payment method and invoicing are agreed in writing when access is granted, and the price depends on the plan and the number of clients. The client app is included: clients pay nothing to LMGINC SL. Applicable taxes are added to the price.

5. Acceptable use and professional responsibility

• The trainer uses 2T4T for their professional activity and in accordance with the law, and is solely responsible for the plans, instructions and messages they give their clients, including those they accept from an AI suggestion.
• 2T4T does not replace medical or physical therapy advice. In case of injury or a health problem, the trainer must refer the client to the appropriate healthcare professional.
• The trainer only adds clients with their knowledge and the necessary legal basis, and does not add children under 14 without the consent of their parents or guardians.
• Content the trainer uploads (videos, custom exercises, documents, logo) must belong to them or be used with permission.
• The trainer may not access other trainers’ data, test the service’s security without permission, overload it, copy it or reverse-engineer it.

6. Intellectual property

The software, design, brand and exercise catalog with its videos belong to LMGINC SL or its licensors; the trainer gets a non-exclusive right to use them while the service lasts. The trainer’s data and content remain theirs: they grant us only the license needed to provide the service (for example, showing their logo in their clients’ app on the Your brand plan).

7. Personal data

For their clients’ data, the trainer is the controller and LMGINC SL is the processor. The processing terms are in the annex, which is part of these terms. LMGINC SL processes the trainer’s own account data as controller, as described in the privacy policy for trainers.

8. Availability and support

We work to keep the service available at all times, but we don’t guarantee 100% availability: there may be interruptions for maintenance, failures or reasons beyond our control. We’ll give advance notice of planned maintenance. Support is provided by email at contact@2trainapp.com on business days.

9. Term, cancellation and end of service

• The service lasts as long as the trainer keeps it. They can cancel at any time by writing to contact@2trainapp.com from their account email.
• We may suspend or close an account that seriously breaches these terms or doesn’t pay, with prior notice unless the breach prevents it or the law requires otherwise.
• When the service ends, the trainer has 30 days to ask us to export their account and client data. After that, we delete it, except anything the law requires us to keep (for example, invoices), which will remain blocked.

10. Liability

LMGINC SL is liable for damage it causes by breaching these terms. Except in cases of willful misconduct or gross negligence, it is not liable for indirect damage or lost profits, and its total liability is limited to what the trainer paid for the service in the 12 months before the event giving rise to it. LMGINC SL is not liable for the trainer’s training decisions or their relationship with their clients.

11. Confidentiality

Both parties keep confidential any non-public information about the other that they learn through the service, including after it ends.

12. Changes to these terms

We may update these terms. Material changes will be notified by email at least 30 days in advance; if the trainer disagrees, they can cancel before the changes take effect.

13. Governing law and jurisdiction

These terms are governed by Spanish law. Any dispute will be submitted to the courts of Madrid.

Annex. Data processing agreement (Art. 28 GDPR)

A1. Subject, duration and purpose

LMGINC SL (the processor) processes, on behalf of the trainer (the controller), the personal data of the trainer’s clients recorded in 2T4T, solely to provide the service described in these terms, for as long as the service lasts plus the return or deletion period in section A9.

A2. Data and data subjects

• Data subjects: the trainer’s clients.
• Identification and contact data: name, email, phone, profile photo.
• Special categories (health): injuries, discomfort and limitations, weight and body measurements, the daily “How are you today?” check-in and, if the client connects them, Apple Health or Health Connect data.
• Training and activity: plans, sessions, sets, loads, effort, habits, schedule and GPS routes of outdoor cardio sessions.
• Communications: messages between the trainer and the client.

A3. Instructions

The processor only processes the data on the controller’s documented instructions, which are these terms and the controller’s use of the platform. If an instruction seems to breach data protection law, it will say so immediately. It does not use the data for its own purposes.

A4. Confidentiality

People authorized to process the data are bound by confidentiality and only access it when needed to provide or support the service.

A5. Security

The processor applies measures appropriate to the risk under Art. 32 GDPR, including: encryption in transit, technical isolation per trainer account checked on every access, least-privilege access control, hashed passwords, servers and database in the EU (Belgium) and backups.

A6. Sub-processors

The controller gives general authorization for the use of sub-processors. They are currently:

The processor imposes the same data protection obligations on each sub-processor and will notify the controller by email at least 30 days before adding or changing one, so the controller can object; if they object and there is no alternative, they may cancel.

A7. Data subject rights

If a client exercises their rights with the processor, it will forward the request to the controller without delay and help them respond. The platform lets the controller view, correct, export and delete each client’s data.

A8. Breaches and other obligations

The processor will notify the controller without undue delay, and within 48 hours of becoming aware of it, of any security breach affecting their data, with the information available so the controller can meet their obligations. It will also help, as applicable, with data protection impact assessments and prior consultations with the supervisory authority.

A9. End of processing

When the service ends, the processor will return the data to the controller in a structured format if requested within the following 30 days, and then delete it, unless the law requires it to be kept. When a client deletes their account in the app, all of their data is deleted within 30 days.

A10. Audits

The processor will make available to the controller the information needed to demonstrate compliance with this annex and will allow reasonable audits, notified in advance and without access to other trainers’ data.

A11. Controller obligations

The trainer warrants that they have a legal basis for processing their clients’ data, in particular explicit consent for health data; that they inform their clients about the processing (the app privacy policy helps with this); and that they only record the data needed to train them.