Privacy policy

1. Who we are

IronPath is an independent app made by Robert Gant (“we”, “us”). We run IronPath’s server ourselves: your data isn’t kept by a cloud database company. Questions about your data go to [email protected].

2. What we collect

Account: your email address, the display name you choose, your password (stored only as a hash by the sign-in system), the answers you give when you sign up (goals, experience, how often you train) and your settings.

Training: your sessions, lifts, sets, loads, reps, effort ratings and notes, your saved sessions, records and the lifts you create, and any sessions you import from another app.

Body: the weigh-ins, body fat, measurements and goals you enter, and the progress photos you add. Photos are stored privately; only your account can see them.

Coach Iron: the messages you send Coach Iron, its replies, and any answer you report.

Technical: the server records sign-ins and requests, including your IP address and the time, to keep the service secure. IronPath has no advertising IDs, analytics or tracking tools, and it doesn’t collect your location or contacts.

3. How we use it

• To run IronPath: keep your training in sync, show your progress, records and trends, and bring your data back when you sign in again.
• For Coach Iron: when you ask a question, finish a session or ask for a drafted session, the app sends your question, your recent sessions and your goals to Coach Iron. Coach Iron runs on our own server. Your data isn’t sent to an outside AI company, and it isn’t used to train any AI model.
• To send account emails, such as confirming your address and resetting your password.
• To keep the service secure and fix problems.

We don’t sell your data, use it for advertising, or share it with anyone for their own purposes.

4. Service providers

Two providers process data only so IronPath can run:

• Cloudflare carries the app’s encrypted connection to our server and protects the server from attacks.
• Resend sends account emails, so it receives your email address and those messages.

5. Storage and security

Your data is stored on a server we operate. Everything between the app and the server is encrypted in transit (HTTPS). Security rules in the database let each account read and change only its own data, and backups are kept on storage only we can reach. No system is perfectly secure, so we can’t guarantee that your information will never be accessed without permission.

6. How long we keep it

We keep your data for as long as you have an account. When you delete your account, it’s removed from the live database straight away; copies in our backups are gone within 14 days, when those backups expire. Security logs are kept only for a limited time and then deleted.

7. Your choices and rights

• Export: Settings lets you export your sessions as CSV or a full JSON backup.
• Delete: Settings → Delete account deletes your account and everything in it right away; it can’t be undone. If you can’t use the app, see how to ask us to delete it.
• Correct: change your profile and entries in the app, or ask us.

Depending on where you live, you may have further rights, such as to access or move your data, to object to how it’s used, or to complain to a data protection authority. Contact us to use them.

8. Children

IronPath isn’t meant for children. You must be at least 16 to create an account, and you confirm it when you sign up. If you believe a child has given us personal data, contact us and we’ll delete it.

9. Changes

When the way IronPath handles data changes, we’ll update this policy and the date above, and we’ll tell you in the app about significant changes.

10. Contact

[email protected]