Airman Trainer Privacy Policy

Last updated: August 20, 2026.

Airman Trainer is an invite-only catalog-authoring and publishing app operated by Waggie LLC. It is separate from the customer Airman PT app and does not receive customer scores, workouts, routes, body measurements, or training progress.

Information used by Trainer

Account and sign-in. Sign in with Apple and Firebase Authentication process an account identifier, authentication tokens, and, when Apple provides it, your email address or private relay address. Trainer does not request your name.

Invitations and authorization. Trainer stores an invited email address and its one-way hash together with invitation status, issuer, role, capabilities, and timestamps. Those contact values remain in the mutable invitation record until the linked Trainer account is deleted or an administrator removes them. An immutable invitation-issuance audit also retains the one-way invited-email hash for the lifetime of that audit record to preserve security evidence. The hash is pseudonymous and may be guessable from a known email; it is not anonymous. Your Trainer profile stores your Firebase user ID, roles, capabilities, and limited account contact fields.

Catalog work. Firestore and Cloud Storage process exercise, workout, program, assignment, localization, media-staging, review, and publication content you create or approve. Catalog records may include author, reviewer, release-request, import, and cutover attribution.

Service integrity. Firebase Functions, Firebase App Check with Apple App Attest, and Firebase infrastructure process request, attestation, IP, diagnostic, and security information needed to authenticate requests, prevent abuse, operate the service, and investigate failures.

Support communications. If you choose the public Trainer support form, Firebase Functions and the email providers needed to deliver and answer your request process the email address, topic, and message you provide. The form does not ask for your name. You can use the email fallback instead.

Local storage and service providers

The app stores your catalog-review language and narrowly scoped pending release or catalog-cutover recovery requests on your device. Firestore uses memory-only caching after a one-time purge of legacy disk cache. Google Firebase acts as a service provider for Authentication, Firestore, Functions, Storage, App Check, and operational diagnostics; processing may occur in the United States.

How information is used and shared

Information is used only to manage invited access, enforce roles, create and publish the organization’s catalog, preserve release integrity, secure the service, troubleshoot failures, and answer support requests. Trainer has no advertising, data-broker sale, or cross-app tracking. Information is shared only with authorized organization users, Waggie LLC personnel who operate the service, and the service providers described above as needed for those purposes.

Retention and account deletion

You can start deletion inside Airman Trainer from Account & Privacy in every authenticated account state. Support is not required. Deletion immediately disables Trainer access and starts server cleanup of the Trainer profile, mutable invitation contact information and hashes, private media drafts, staging files, and that account's pending recovery requests. In the normal uninterrupted flow, the app uses the fresh authorization code to revoke Apple authorization before deleting the Firebase Auth account and finishing local cleanup.

If the app is interrupted or removed after server cleanup and the fresh Apple authorization code is no longer available, account deletion still finishes. After the latest deletion attempt has remained at that step for 24 hours, the hourly server recovery process claims it and deletes the Firebase Auth account. That fallback cannot confirm Apple revocation because Airman Trainer does not retain the authorization code. You can separately stop using Sign in with Apple for Airman Trainer in your Apple Account settings.

Organization-owned catalog text, reviews, approvals, and publishing work remain available. Attribution in mutable organization records is replaced with deleted-trainer. From server cleanup until Auth deletion is confirmed, a protected, server-only deletion record temporarily keeps the raw Firebase user ID so an interrupted deletion can be completed. The raw ID is removed as soon as Firebase Auth deletion is confirmed. The remaining tombstone contains an account hash and a bounded set of up to eight one-way recovery-credential hashes, but no contact information or catalog content. Those hashes are kept together for 30 days after confirmation to prevent cached Firebase tokens from recreating access and let delayed local cleanup verify deletion; they then expire and are removed automatically.

Separately, your raw account identifier is retained where rewriting would break immutable integrity-bound records: security audit history, catalog-import provenance, publishing releases and release artifacts, catalog-cutover metadata, and the release sequence tied to those records. It is retained for the lifetime of each corresponding immutable record, with no fixed expiry, solely to preserve security, authorship, and cryptographic or publishing integrity. This retained identifier is pseudonymous, not anonymous.

Your choices

You may decline Sign in with Apple and not create a Trainer account. If signed in, you can delete the account in the app. You may also contact Trainer support with privacy questions, but support is not the deletion mechanism.

Security, eligibility, and changes

Trainer uses role-based authorization, App Check, and platform security controls, but no system can guarantee absolute security. The service is intended for invited adults performing authorized catalog work, not children. We may update this policy when the app or its processing changes and will update the date above.

Contact

Privacy questions: support@airmanptscorecalculator.com.