IronFit — Privacy Policy
Version: 1.0 · Effective date: 7 August 2026
The short version
- Your coaches see everything you record. That's how they program for you.
- Other members see your name, photo, bio, personal records and your scores on the group's workouts. There's no setting to hide these.
- We don't collect health conditions, injuries or medical history. If something affects your training you tell a coach directly, not the app.
IronFit is run by volunteers, not a company. Contact: ironfituae.app@gmail.com
What we collect
Account — email; password (stored only as a secure hash, we never see it); your Google ID and basic profile if you use Google Sign-In; your approval status and role; join date.
Profile — name, bio, photo.
Body and goals — sex (used for calorie and macro calculations), date of birth, height, starting and target weight, units, activity level, goal, and the targets calculated from them.
Emergency contact — name, number and relationship, so someone can be reached if you're hurt. Please make sure that person is happy for you to give us their details.
Weigh-ins — each one you record, kept as a history so you and your coach can see the trend.
Training — workouts, scores, personal records, team results, reactions, which workouts you've marked as done and the date you say you did them, and which announcements you've read or voted on.
Photos posted in the app — your profile photo, and any pictures a coach attaches to an announcement.
Nutrition — food and meals you log, portions and totals.
Technical — auth tokens stored securely on your device, a local cached copy so the app works offline, notification preferences, and error information when something breaks.
Permissions — camera (barcode scanning, taking a photo) and photo library (choosing a photo for your profile, or — if you're a coach — for an announcement). Refuse both and the rest still works.
Guests brought by a member — if you bring a guest to a session, we record their name, optionally their phone number, whether they're an adult or under 18, and their confirmation of the guest waiver. The number is the guest's own, not yours. Please only give it with their agreement, and only if they're happy to be contacted about training.
No advertising, analytics or tracking SDKs. We don't track you across other apps, and we don't sell your data.
What we deliberately don't collect
Health conditions, injuries, medical history and physical limitations. There are no fields for them and nowhere in the database to put them. If something affects your training, tell a coach directly — that's part of the Waiver.
Who sees what
Everyone who is approved can see: your name, photo, bio and join date; your personal records; your scores on the group's workouts; and whether you've marked a workout as done.
Only you and the coaches can see: your weigh-ins and measurements; your nutrition logs; your goals and targets; your emergency contact; your date of birth, height and email address; the signed PDF of your waiver; and the date you say you did a workout. Other members see that you did it, not when.
Workouts you write yourself stay private unless you choose to share them.
Personal records already appear on the boards for every approved member. Separately, you can choose to announce one in the community feed, where other members can react to it. That choice is yours, it's off by default, and you can turn it off again afterwards — which also removes the reactions it collected. Reactions show as a count; other members can't see who reacted.
Pictures a coach attaches to an announcement are visible to every approved member.
Coaches and administrators see everything you record, including which documents you've accepted and when — so they can chase anyone whose waiver is missing or out of date.
A guest's details are visible to coaches and administrators, and to the member who brought them. No other member sees them. A guest can ask any coach to have their record removed, and we'll delete it — they don't have an account to do it themselves.
No opt-out for the rows other members can see. Sharing a self-written workout is the only visibility choice in the app. "Other members" means people a coach or admin approved — not the public. There are no public profiles.
Boards ranking lifts relative to bodyweight can be worked backwards — dividing a lift by its percentage gives the bodyweight behind it. Another member could work out roughly what you weigh.
Why we're allowed to
Running your account and calculating your targets is our agreement with you. Showing coaches your data is your consent, given at onboarding — withdrawable any time. Your emergency contact is held to protect you in an emergency. Showing records and scores to other members is our legitimate interest in running a community app, disclosed before you join. We also keep a record of which documents you accepted and when.
Who we share with
- Supabase — hosting, database, sign-in and file storage. Holds everything listed above, stored in Tokyo, Japan.
- Google — Google Sign-In. Receives your Google ID and basic profile.
- Resend — our email provider. Handles the approval email and the copy of your signed waiver. Receives your email address and the contents of those messages.
- Apple and Google — the app stores. Download and crash data under their own policies.
Nutrition lookups. Searching a food or scanning a barcode sends the search text or barcode to USDA FoodData Central and Open Food Facts — through our server, not your phone. Nothing identifying you goes with it. They see the search term and our server, not you.
We may also disclose data where legally required, or to protect someone's safety in an emergency.
How long we keep it
While your account is active. After you delete it, everything is removed or anonymised within 30 days, with one exception.
A copy of your signed waiver is emailed to you when you accept it, and a PDF is stored so a coach can produce it if it is ever needed. That PDF is kept for the same 6 years described below and is not deleted with your account.
The waiver. When you delete your account we keep a copy of your waiver acceptance — the name you typed, your guardian's name if you're under 18, the version and the date — for 6 years. Nothing else goes with it: no account, no email, no training data, and no link back to any of them. We keep it because the waiver is the record that you understood and accepted the risks of training, and that record has to outlive the account for it to mean anything. Your acceptance of these Terms and this Privacy Policy is not archived and goes with everything else.
Deleted data clears from backups within 30 days as they rotate.
Your rights
Access your data, correct it (most is editable in the app), delete it, object to or restrict processing, withdraw consent, ask for a portable copy, or complain to the UAE Data Office.
Email ironfituae.app@gmail.com — we'll reply within 30 days. It's free, and nothing about your place in the community changes because you asked.
Deleting your account
Profile → Settings → Delete account. You don't need to ask us. It's permanent — profile, emergency contact, weigh-ins, nutrition, personal workouts, records, scores, the workouts you marked as done and your reactions all go. Your waiver acceptance is archived as described above; nothing else is. Where you were part of a team result, the result stays for your teammates with your name removed.
Security
Encrypted in transit and at rest. Access rules are enforced at the database level by row-level security, so the table above is applied by the server rather than just hidden in the app's screens. Auth tokens sit in your device's secure storage. Only approved coaches and administrators have staff access.
No system is perfectly secure. If a breach puts your rights at risk, we'll tell you.
Under 18
Members under 18 need a parent or guardian to accept this policy, the Terms and the Waiver on their behalf.
We may update this policy. If a change materially affects who sees your data or what we do with it, we'll tell you in the app before it takes effect.