Privacy policy

Account details. Your email address, username, password (stored only as a secure hash, never readable by us), and two-factor settings if you turn them on. Optionally a display name, bio, profile photo and banner.

What you log. Workouts, sets, reps and weights, cardio, plans and routines, meals and their estimated nutrition, water, saved foods, body weight and measurements, body-composition scans (such as InBody), and progress photos.

Training profile. Goals, schedule, targets, and anything you tell us about injuries or food allergies so suggestions can avoid them. This is health-related information. We treat it as sensitive and use it only to run the app for you.

Coaching and social. Gyms and coaches you join, invites, notes from your coach, friends, and shared training sessions.

Billing. If you subscribe, Stripe handles your payment. We receive your subscription status, plan and basic card details (the brand and last four digits). We never see or store your full card number.

Technical data. Our hosting providers keep standard server logs (such as IP address, browser type and the pages requested) for security and to fix problems. They are kept for a short period and are not used to profile you.

• To run the app: save your log, show your progress, build plans and estimate nutrition.
• To keep your account secure, including sign-in, two-factor and abuse prevention.
• To send the emails you need, such as sign-in links, password resets and invites. We don't send marketing email unless you ask for it.
• To handle subscriptions and give access to paid features.
• To answer you when you contact us.

Only you, by default. Your log, food, body data and photos are private to your account.

Your coach or gym, if you join one. You join only by accepting an invite sent to your username or email. While you're a client, the coaches at that business can see your workouts, plans, meals and nutrition totals, body weight and body scans, goals, and the injuries and allergies you've listed. They can send you plans and notes and log sets for you. Every set a coach logs is labelled with their name. They cannot see your progress photos. Leave a business and they lose access from then on.

Friends. Friends find each other by username, and both sides have to accept. A friend sees your name and username. If you train together, the people in that session see the session's exercises and what each person has checked off. Friends don't see the rest of your log.

Your public page. Your username, display name, bio, profile photo, banner and join date are shown at your profile address. Don't put anything there you want kept private.

Chat assistants you connect. If you connect IronChow to an AI assistant (for example Claude), that assistant can read and write your log through your personal connector link whenever you ask it to. What you say in that chat, and the data it reads from us, is handled by the assistant's provider under their own privacy policy. You can reset your connector link in the app to cut off access. Treat the link like a password.

We use a small number of providers to run IronChow. They process data only to provide their service to us:

• Supabase for the database, sign-in and private file storage.
• Vercel to host the website.
• Stripe for payments and subscriptions.
• Resend to deliver emails such as invites.

These providers may store data in the United States and other countries. We don't sell or rent personal data to anyone, and we don't share it with advertisers. We would disclose information only if required by law, or to protect people's safety or the security of the service.

We use only the cookies needed to keep you signed in and to remember an invite while you create an account. There are no analytics, advertising or third-party tracking cookies. Stripe sets its own cookies on its checkout pages to prevent fraud.

• Everything is sent over HTTPS.
• Database rules mean each account can only read its own rows, plus what coaching or friendship explicitly shares.
• Progress photos are kept in private storage and shown only through short-lived links.
• Two-factor sign-in and backup codes are available for every account.

• Edit or delete any entry, photo or meal at any time.
• Leave a gym or coach, remove a friend, or reset your chat connector link whenever you like.
• Cancel a subscription from Settings. You keep paid features until the end of the period you paid for.
• Delete your account from Settings → Security. This cancels any subscription and permanently removes your profile, log, photos and files. It can't be undone.

You can also email us to ask for a copy of your data, a correction, or deletion. Depending on where you live, you may have further rights under laws such as the GDPR or California's CCPA, and we will honour them. Billing records Stripe must keep for tax and legal reasons are kept by Stripe for as long as the law requires.

IronChow is not meant for anyone under 16, and we don't knowingly collect data from them. If you believe a child has made an account, email us and we will delete it.

IronChow is a fitness log, not a healthcare provider, and the information you store is not a medical record. Nutrition figures are estimates.

If we make an important change to this policy we will tell you in the app or by email before it takes effect. The date at the top shows when it last changed. For any privacy question or request, email hello@ironchow.com.