Privacy Policy

Effective September 4, 2026

1. Who we are

IronOS is operated by Data Driven Athlete LLC (“we”, “us”). This policy explains how we collect, use, and protect your information when you use the IronOS mobile application, coaching portal, and website (collectively, the “Service”).

2. Information we collect

Account information

When you create an account we collect your name, email address, and password. If a coach invites you, we also store the coach–athlete relationship. For coaches, we store the athletes on your roster and the programs and exercise libraries you create.

Workout data

Exercises, sets, reps, weights, RPE ratings, session notes, and any videos you upload are stored so you and your coach can review your training.

Body metrics

If you choose to log or sync body weight (including via Apple Health), that data is stored to power features like the Durability Score. Cardio workouts recorded on Apple Watch are also imported, including activity minutes and effort rating.

AI coaching data

If you subscribe to AI coaching, we collect your training preferences (goals, available days, equipment, experience level, injuries), check-in responses (enjoyment, soreness, fatigue, sleep, stress, difficulty ratings, and any notes you provide), and workout completion data. This information is used to generate and refine your training program.

Device and diagnostic information

We collect your push notification token so we can send workout notifications. When something goes wrong in the app or coaching portal, we collect an error report (the error, the page or screen, your user ID, and device or browser type) so we can fix it. We do not collect device identifiers for advertising.

3. How we use your information

  • Provide and improve the Service (logging, programming, analytics)
  • Generate and adjust AI coaching programs based on your preferences and progress
  • Enable coach–athlete communication and program delivery
  • Calculate metrics like Durability Score and personal records
  • Send push notifications and emails related to your training and account
  • Diagnose and fix errors
  • Respond to support requests

We do not sell your personal information. We do not use your data for advertising, and we do not market to athletes on behalf of anyone other than their own coach.

4. Data sharing

With your coach

If you are linked to a coach, they can see your workout logs, body metrics, and any notes or videos you share through the app. Coaches are independent users and agree to use your data only to coach you. If you leave a coach, their access to your data ends; your history stays with your account.

AI coaching (Anthropic)

If you subscribe to AI coaching, your training preferences, workout logs, and check-in responses are sent to Anthropic’s Claude API to generate and refine your training program. Only training-related data is shared. Body weight, Apple Health data, and personally identifying information (name, email) are never sent to Anthropic. Anthropic processes this data under their privacy policy and does not use it to train their models.

Service providers

IronOS uses Supabase (database and authentication), Vercel (hosting), Expo (push notifications), Resend (transactional email), Sentry (error monitoring), RevenueCat (subscription management), and the Apple App Store and Google Play Store (distribution and billing). These providers process data on our behalf under their own privacy policies. Error reports sent to Sentry mask on-screen text and media.

Legal requirements

We may disclose information if required by law or to protect the rights and safety of our users.

5. Apple Health data

If you grant permission, IronOS reads body weight and cardio workouts (activity minutes and effort rating) from Apple Health, and writes completed strength workouts back so they count toward your Activity rings. This data is used solely within the app to provide health and fitness insights. We do not share Apple Health data with third parties or use it for advertising. You can revoke access at any time in your device’s Health settings.

6. Data retention

Your data is retained for as long as your account is active. If you delete your account (available in the app under More > Settings, or by contacting us), all associated data is permanently removed from the servers within 30 days. Error reports are retained by Sentry for 90 days.

7. Security

IronOS uses industry-standard encryption in transit (TLS) and at rest. Authentication is handled by Supabase Auth with bcrypt-hashed passwords. Row-level security policies ensure users can only access their own data, and coaches can only access data belonging to athletes on their roster.

8. Your rights

You can export, correct, or delete your data at any time through the app or by contacting us. If you are in a jurisdiction with specific data protection laws (such as GDPR or CCPA), you have the right to access, rectify, or erase your personal data, and to object to or restrict its processing.

9. Children

IronOS is not directed at children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the app or via email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact us at support@ironos.app