This page is maintained by Train With Rico to explain, in plain language, how we protect member information across the app. It describes the controls we have enabled today — it is not a certification or independent audit. Security is a shared responsibility: we protect the platform, and we ask members to keep their login details private and use a strong, unique password.
Every member sees only their own data
Your workouts, meals, body metrics, goals, progress and uploaded videos are private to your account. We enforce this at the database level with row-level security, so one member can never read or change another member's personal records.
Encryption in transit
All traffic between your device and the app is encrypted using HTTPS (TLS). Live video and audio travel over encrypted WebRTC (DTLS/SRTP), so streams cannot be intercepted as they move across the network.
Private video & media storage
Uploaded member videos are kept in a private storage bucket scoped to your own account folder. They are never publicly listed and are only accessible through short-lived, signed links generated for you.
Camera & live streaming safety
Access to live sessions uses short-lived tokens minted on our servers and scoped to a single room — the keys are never exposed to the browser. Broadcasting is limited to the trainer; members watch without publishing their own camera unless explicitly granted. When the app uses your camera (for example to scan a barcode), the stream is always released as soon as you are finished.
Secure payments
Subscriptions and payments are handled by our payment provider (Paddle) as Merchant of Record. Your full card details are entered with Paddle and are never stored on our servers.
Access controls & secrets
Administrative capabilities are restricted to authorised roles, and sensitive keys and credentials are stored as protected server secrets, never in the app that runs in your browser.
Your data rights
You can export or delete your personal data at any time from your profile. For more detail on how we handle data, see our Privacy Policy.
Reporting a security concern
If you believe you have found a security issue or your account has been compromised, please contact us right away at trainwithrico9@gmail.com so we can investigate. No system is 100% secure, but we take every report seriously.