Privacy Policy

Effective May 5, 2026

1. Who I am

IronOS is operated by Data Driven Athlete LLC. This policy explains how I collect, use, and protect your information when you use the IronOS mobile application and website (collectively, the “Service”).

2. Information I collect

Account information

When you create an account I collect your name, email address, and password. If your coach invites you, I also store the coach–athlete relationship.

Workout data

Exercises, sets, reps, weights, RPE ratings, session notes, and any videos you upload are stored so you and your coach can review your training.

Body metrics

If you choose to log or sync body weight (including via Apple Health), that data is stored to power features like the Durability Score. Cardio workouts recorded on Apple Watch are also imported, including activity minutes and effort rating.

Device information

I collect your Expo push token so I can send workout notifications. I do not collect device identifiers for advertising.

3. How I use your information

  • Provide and improve the Service (logging, programming, analytics)
  • Enable coach–athlete communication and program delivery
  • Calculate metrics like Durability Score and personal records
  • Send push notifications related to your training
  • Respond to support requests

I do not sell your personal information. I do not use your data for advertising.

4. Data sharing

With your coach

If you are linked to a coach, they can see your workout logs, body metrics, and any notes or videos you share through the app.

Service providers

IronOS uses Supabase for database and authentication, Expo for push notifications, and the Apple App Store and Google Play Store for distribution. These providers process data on my behalf under their own privacy policies.

Legal requirements

I may disclose information if required by law or to protect the rights and safety of my users.

5. Apple Health data

If you grant permission, IronOS reads body weight and cardio workouts (activity minutes and effort rating) from Apple Health, and writes completed strength workouts back so they count toward your Activity rings. This data is used solely within the app to provide health and fitness insights. I do not share Apple Health data with third parties or use it for advertising. You can revoke access at any time in your device’s Health settings.

6. Data retention

Your data is retained for as long as your account is active. If you delete your account (available in the app under More > Settings), all associated data is permanently removed from the servers within 30 days.

7. Security

IronOS uses industry-standard encryption in transit (TLS) and at rest. Authentication is handled by Supabase Auth with bcrypt-hashed passwords. Row-level security policies ensure users can only access their own data.

8. Your rights

You can export, correct, or delete your data at any time through the app or by contacting me. If you are in a jurisdiction with specific data protection laws (such as GDPR or CCPA), you have the right to access, rectify, or erase your personal data, and to object to or restrict its processing.

9. Children

IronOS is not directed at children under 13. I do not knowingly collect personal information from children under 13.

10. Changes to this policy

I may update this policy from time to time. Material changes will be communicated through the app or via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact me at support@ironos.app