This says what Ironwood collects, why we have it, who else can see it, and how to make it go away. It is written to be read rather than to be survived.
The short version. We hold your account details and your training records because the app cannot work without them. We do not sell them, we do not run advertising, and there are no third-party trackers in the app or on this website. You can delete your account yourself, from inside the app, at any time.
Who we are
Ironwood is operated by Ironwood Operations, LLC, a Maryland limited liability company, at 306 W Redwood St #4685, Baltimore, MD 21201, USA. We are the controller of the information described here. Write to support@ironwoodfit.com about anything on this page.
What we collect
Things you give us
- Account details. Your name and email address. Your password is held by our identity provider, never by us.
- Sign in with Apple or Google, if you use it. We receive your name and email address from Apple or Google to create and sign in to your account, and nothing else from them. If you choose Apple's Hide My Email, we receive a relay address instead.
- Training records. The sets you complete: movement, weight, repetitions, effort ratings, rest, and any notes you write.
- Profile answers. Your experience, goals, available equipment, training days, session length, and the units you prefer.
- Body measurements you choose to log. Bodyweight entries, and readiness or soreness you report.
- Competition results, if you record meets or attempts.
- Videos you upload of your own lifts.
- Apple Health, if you connect it. On iPhone you choose what Ironwood may read and write. Resting heart rate, heart rate variability and sleep are shown on your phone beside your training and never leave it. A body weight from Apple Health reaches Ironwood only when you choose to add it as a weigh-in. Ironwood can save your finished strength sessions and logged body weight to Apple Health. Health data is never used for advertising or marketing and never sold. Change any of it in the Health app at any time.
- Anything you write to us. Bug reports, feature requests, beta access requests, and support email.
Things we record as you use the app
- Product analytics. Which screens you open and which actions you take, so we can tell what works. These events are stored in our own database. There is no third-party analytics service, no advertising identifier, and no tracking pixel.
- Server logs. Ordinary request logs including your IP address, kept for security and debugging.
- Notification tokens. If you turn on notifications, the address Apple gives your device for them, so we can send the ones you asked for.
What we deliberately do not collect
Ironwood does not ask for and does not store medical diagnoses, medications, or treatment history. We do not collect precise location. We do not use your camera or microphone except when you record or choose a video yourself. We do not offer the app to anyone under 16 and do not knowingly collect anything from them.
Why we hold it
- To run your account and sign you in.
- To build your programs, prescribe weights, and adjust future sessions from what you log.
- To show you your own history and progress.
- To let a coach you have joined see the training they are responsible for.
- To answer you when you write to us.
- To keep the service secure and to fix it when it breaks.
Where the law requires a legal basis, ours is performance of our contract with you for everything needed to run the app, and our legitimate interest in a secure and improving product for logs and analytics.
Aggregated training data
We use training records in aggregate and stripped of identity to build Ironwood's strength standards: the relationships between movements and the starting-weight estimates every member benefits from. These are statistical models built from many people's records, not artificial intelligence, and nothing derived from them identifies you or reveals your training to anyone else.
This use continues after you delete your account, because once a record has been folded into an aggregate it can no longer be pulled back out of it.
Who else sees it
We do not sell your information and we do not share it for advertising. It reaches:
- A coach you join. Only if you join one, and only the training they need to coach you. You can see who has access and end it.
- Anyone you send a trophy or share link to. Nothing leaves Ironwood until you choose to share it.
- Our service providers, who process data on our instructions: Supabase for sign-in, Google Cloud for hosting, database backup and video storage, and Resend for the transactional email we send you. Each is bound to use it only to provide that service.
- YouTube, when you play a movement video. Videos play through YouTube's player, and YouTube may collect information under the Google Privacy Policy. Ironwood uses YouTube API Services to choose the videos and shares nothing about you to do so.
- Authorities, where the law actually requires it, and no further than it requires.
Our providers are in the United States, so that is where your information is stored and processed.
How long we keep it
Your account and training records stay while your account is open, because that history is the point of the app. After deletion, see below. Server logs are kept for a short operational period. Database backups roll off on their own schedule shortly after deletion.
Deleting your account
Open the app and go to Settings, then Account, then Delete account. You confirm by typing DELETE. Nobody has to approve it and you do not have to email anyone.
- Your account is closed immediately and stops being visible to any coach.
- Your videos are deleted immediately.
- Your personal training records are deleted within 30 days.
- Aggregated, de-identified data stays, as described above, because it no longer contains your records.
If you change your mind inside those 30 days, write to us and we will try to stop it. After that it is gone and we cannot bring it back.
Getting a copy of your data
There is no self-serve export yet. Email support@ironwoodfit.com from your account address and we will send you your records. We are building the button; until it exists, the email works.
Your rights
Depending on where you live, you may have the right to see what we hold, correct it, delete it, obtain a portable copy, object to some processing, or complain to a regulator. Ask us at support@ironwoodfit.com and we will answer within 30 days. We will not charge you for asking, and we will not treat you differently for having asked.
Cookies and tracking
This website sets no cookies and loads nothing from a third party. The app stores your sign-in session and a few preferences on your own device so you stay signed in and the app works offline. None of that follows you anywhere else, which is why there is no cookie banner here.
Security
Traffic is encrypted in transit. Passwords are held by our identity provider and never reach us. Access to production data is limited to the people who operate the service. No system is perfect, so if we ever discover a breach affecting you, we will tell you.
Changes
If we change this policy in a way that matters, we will say so in the app before it takes effect. The date at the top always reflects the current version.
Contact
Ironwood Operations, LLC
306 W Redwood St #4685, Baltimore, MD 21201, USA
support@ironwoodfit.com