Privacy Policy

This Privacy Policy explains how IronGains ("IronGains," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the IronGains mobile app, website, and related services (collectively, the "Services").

IronGains is a global service. Depending on where you live, you may have certain rights under applicable privacy laws.

If you do not agree with this Privacy Policy, please do not use the Services.

1. Scope

This Privacy Policy applies to personal information we collect through:

• the IronGains mobile app;
• the IronGains website and web app;
• account creation, sign-in, and account management;
• optional features such as analytics, crash reporting, and AI-assisted program building; and
• communications you send to us.

2. Information We Collect

We collect the following categories of information.

A. Account and identity information

When you create or use an IronGains account, we may collect:

• your email address;
• authentication identifiers issued by our authentication provider;
• account status and security information; and
• records related to account deletion requests and restoration.

B. Training and app content

When you use IronGains to plan or log training, we may collect and store:

• programs you create or save;
• enrollments and program configuration data;
• workout logs, exercises, sets, notes, and timestamps;
• custom exercises you create; and
• app preferences, such as weight units and related settings.

Some of this information is stored locally on your device so the mobile app can work offline, and some is synced to our servers so it is available across devices.

C. AI feature content

If you use AI-powered features such as the program builder, we may collect and process:

• prompts and instructions you submit;
• program source or other content you include in the request;
• AI conversation transcripts; and
• usage metadata such as model, token counts, and feature usage.

D. Device, usage, and technical information

When you use the Services, we may automatically collect technical information such as:

• IP address;
• browser type, device type, operating system, and app version;
• approximate location inferred from IP address;
• pages or screens viewed, interactions, and referral information;
• diagnostics, crash reports, performance data, and error logs; and
• timestamps and service access records.

E. Local storage and session data

We use local storage technologies to operate the Services, including:

• cookies and browser storage on the web;
• secure storage for mobile authentication tokens; and
• local on-device databases and cached content to support offline use.

F. Communications

If you contact us, we may collect the information you choose to provide, such as your email address and the contents of your message.

3. How We Use Information

We use personal information to:

• provide, maintain, and improve the Services;
• create and manage user accounts;
• authenticate users and keep accounts secure;
• sync training data across devices;
• support offline functionality and restore app state;
• provide analytics about product usage and performance;
• detect, investigate, and prevent fraud, abuse, and security issues;
• debug errors and maintain service reliability;
• provide optional AI features you request;
• respond to support requests and other communications;
• comply with legal obligations; and
• enforce our terms, policies, and other legal rights.

We do not sell personal information for money.

We do not use your workout logs, notes, or AI prompts for third-party advertising.

4. Legal Bases for Processing

If you are in the EEA, UK, or another jurisdiction that requires a legal basis for processing, we generally rely on the following:

• Contract: to provide the Services you request, including account access, syncing, and training logs.
• Legitimate interests: to secure, maintain, improve, and analyze the Services.
• Consent: where required by law, including for certain cookies or analytics technologies.
• Legal obligations: where we must keep or disclose data to comply with law.

5. How We Share Information

We may share personal information in the following circumstances:

• service providers and infrastructure partners that help us provide the Services, such as authentication, hosting, analytics, crash reporting, AI processing, storage, and technical operations;
• analytics and diagnostics providers that help us understand product usage and troubleshoot issues;
• AI providers when you choose to use AI-powered features;
• law enforcement, regulators, courts, or other third parties when required by law or when necessary to protect rights, safety, and security; and
• successors in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.

Based on the current product stack, our processors or service providers may include:

• Supabase, for authentication and related account services;
• PostHog, for product analytics;
• Sentry, for crash reporting and diagnostics; and
• Anthropic, for optional AI-powered program-building features.

These providers process information on our behalf subject to contractual or other legal protections, where applicable.

6. International Data Transfers

IronGains is a global service. Your personal information may be processed in countries other than the country where you live.

Where required by applicable law, we use appropriate safeguards for international data transfers, such as contractual protections or other approved transfer mechanisms.

7. Data Retention

We keep personal information for as long as reasonably necessary to provide the Services, operate the business, comply with legal obligations, resolve disputes, and enforce agreements.

In general:

• account information is kept while your account remains active;
• training data and synced content are kept until you delete them or delete your account, unless a longer retention period is required by law;
• analytics, security, and diagnostic data are retained for a period appropriate to the business purpose they support; and
• AI usage records and transcripts are retained while needed to provide the feature, maintain continuity, measure usage, and support billing or abuse prevention.

If you request account deletion, we may place your account into a recovery window before permanent deletion. Under the current IronGains account flow, a deletion request is scheduled first, and if it is not canceled by signing back in, account data is permanently purged after 30 days.

We may retain limited information after deletion where necessary to comply with law, resolve disputes, prevent fraud, or enforce our rights.

8. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to:

• keep you signed in where applicable;
• remember preferences;
• measure product usage and performance; and
• maintain security and service integrity.

Where required by law, we will request consent before using non-essential cookies or similar technologies.

You can usually control cookies through your browser settings. Blocking some cookies may affect how the Services function.

9. Your Privacy Rights

Depending on where you live, you may have rights that include:

• requesting access to the personal information we hold about you;
• requesting correction of inaccurate information;
• requesting deletion of your personal information;
• requesting a copy of certain information in a portable format;
• objecting to or requesting restriction of certain processing; and
• withdrawing consent where processing is based on consent.

California residents may also have rights under California privacy law, including rights to know, delete, correct, and receive information about disclosures, subject to exceptions.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as described in many U.S. state privacy laws.

To exercise your rights, contact us at privacy@irongains.app or through the method made available in the app or website. We may need to verify your identity before completing a request.

We may deny or limit a request where permitted by law, including where we cannot verify your identity, where an exception applies, or where the request is manifestly unfounded, excessive, or conflicts with legal obligations.

10. Account Deletion

You may request deletion of your IronGains account at any time, through any of the following:

• In the mobile app: Profile → Danger zone → Delete account.
• On the web: visit [irongains.app/account/delete](https://irongains.app/account/delete), sign in with the account you want to remove, and confirm.
• By email: contact [privacy@irongains.app](mailto:privacy@irongains.app) and we will process your request manually.

Account deletion removes your personal data, including your programs, workout logs, and AI feature history.

If you do:

• we may first place the account into a temporary recovery period;
• your active sessions may be revoked;
• signing back in during the recovery period may cancel the scheduled deletion; and
• if the deletion is not canceled, we will permanently purge account data in accordance with our retention practices and technical process.

Deleting your account may not immediately remove all data from backups or security logs, and some information may be retained where required for legal, security, or fraud-prevention purposes.

11. Security

We use reasonable technical and organizational measures designed to protect personal information, including access controls, authentication safeguards, secure token storage, and monitoring tools.

However, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

12. Children's Privacy

IronGains is not directed to children, and we do not knowingly collect personal information from children under 13. If local law sets a higher age threshold for digital consent, that higher threshold may apply in your jurisdiction.

If you believe a child has provided personal information to us, contact us and we will investigate and, where appropriate, delete the information.

13. Automated Decision-Making

IronGains may use automation to support product features, such as analytics, fraud detection, or AI-assisted program generation. However, we do not use automated decision-making to make decisions that produce legal or similarly significant effects about you.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and, where required by law, provide additional notice.

15. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us at privacy@irongains.app.

If a jurisdiction or platform requires us to provide additional legal or contact details, we may provide them in the app, on the website, in store listings, or on a separate legal contact page.

If you are in a jurisdiction that gives you the right to complain to a supervisory authority or regulator, you may also do so.

Health & Fitness Disclaimer

IronGains provides general fitness and informational content, including AI-assisted program generation. It is not medical advice and is not a substitute for consultation with a qualified healthcare or fitness professional. Consult a professional before beginning any new exercise program, and stop and seek medical attention if you experience pain, dizziness, or other symptoms. You use the Services and any training programs at your own risk.