Privacy Policy
1. Data we collect
- Account and contact data: email, name, nickname, phone number, and account identifiers supplied by sign-in providers such as Google.
- Profile and fitness data: birth date, gender, height, weight, body fat, muscle mass, body measurements, heart rate, and other measurements you enter.
- Usage content: workouts, exercise sets, weights, repetitions, RPE, templates, goals, notes, and share cards.
- AI feature data: fitness context, questions and responses sent to AI Coach, model information, form-analysis videos, and analysis results.
- Payment and plan data: merchant order number, plan, amount, payment status, NewebPay transaction number, payment method, and completion time. IronLog does not retain the full card number.
- Technical data: required login tokens, error logs, device and browser information, IP address, and security audit information.
2. Purposes and legal basis
We use data to create and verify accounts, synchronize profiles, provide workout and body trends, generate goals and AI guidance, process videos, maintain security, troubleshoot, provide support, and meet legal obligations. We do not sell fitness, body, or video data or use it for third-party advertising.
3. Service providers and international processing
Data may be processed by these providers and transferred to countries where they operate:
- Google Firebase for authentication.
- Google Cloud Run, Cloud SQL, Cloud Storage, and Vertex AI/Gemini for APIs, databases, video storage, and form analysis.
- OpenAI for AI Coach text analysis.
- NewebPay for the hosted payment page, transaction authorization, payment notifications, and required payment records.
Providers may process data only as needed to deliver their services and remain subject to their privacy and security terms.
4. Retention
- Account and fitness data remains until you delete specific data or your account, or until retention is no longer legally required.
- Original form-analysis videos are retained in private Cloud Storage for up to one day after upload for AI analysis, failed-processing retries, and playback by the member who uploaded them, then scheduled for deletion.
- If you delete the analysis or your account before expiry, any remaining original video is deleted with it. Structured results remain after video expiry until you delete the record or account.
- Legal and security records remain only for a necessary and reasonable period.
See the Video Retention and Deletion Policy.
5. Your rights
You can view, correct, or delete certain data in the app and permanently delete your account and related data. You may also request access, a copy, correction, restriction, or deletion where applicable. See Account Deletion.
6. Security
We use Firebase authentication, HTTPS, access controls, cloud service accounts, and database access restrictions. No internet transmission is completely secure; protect your credentials and avoid entering unnecessary sensitive information in notes.
7. Children
IronLog is not designed for children under 13, and we do not knowingly collect their data. Minors should use the service with consent and guidance from a legal guardian.
8. Updates and contact
We will provide reasonable notice of material changes through the app, website, or another channel. Privacy questions: ironlog@brad.tw.