Privacy Policy

Last updated: 9 September 2026

Ironroad ("we", "us") is a gamified workout-tracking app. This policy explains what we collect, why, and your rights. Questions: ironroadfit@gmail.com.

Information we collect

• Account: only if you create one — the app works without an account, and without one nothing leaves your phone but the analytics and crash data below. When you create an account with an email address, or with Google or Apple, we receive that address and a provider user identifier. If you use Apple's "Hide My Email", we only see the relay address.
• Your content: the workouts, routines, custom exercises, character/profile, and (optional) friend connections you create in the app.
• Subscription status: whether you have an active subscription, provided by Apple via RevenueCat. We never receive your card or payment details — Apple handles all payment.
• How you use the app: product analytics events — screens you reach, the answers you give during setup (your goal, your experience, how many days a week you train, the equipment you have, and how you heard about us), workouts started and finished, and the steps of the subscription flow. These are tied to an account identifier, never to your email or your name.
• Crash reports: when the app fails, the technical detail of the failure — stack trace, device model and operating system version — so it can be fixed.
• Diagnostics: basic server logs (timestamps, error information) to operate and debug the service.

How we use it

To provide the app: store and sync your workouts across your devices, compute your progression, power the optional friends feed, and gate premium features. The analytics and crash data are used for one thing only — to understand where the app is confusing or broken, and to fix it.

We do not sell your data. We do not use it for advertising, we do not track you across other companies' apps or websites, and we do not build advertising profiles. The app asks for no permission beyond notifications.

Who we share with

• Google / Apple — authentication.
• Apple — subscription billing (merchant of record).
• RevenueCat — subscription/entitlement management.
• Mixpanel — product analytics. It receives the events and setup answers described above under an account identifier; it never receives your email, your name, your workouts or your notes. Processed on Mixpanel's EU servers.
• Google (Firebase Crashlytics) — crash reports.
• Infrastructure providers who host our servers on our behalf.
• Other users only see what you choose to share via friend codes (your display name and workout activity); your session notes are never shared.

Data retention & deletion

We keep your data while your account exists. You can permanently delete your account and all associated data at any time from Profile → Delete account in the app; this removes your workouts, routines, custom exercises, friendships, and account record, and revokes the Sign in with Apple tokens where applicable. Deleting your account does not cancel an active subscription — manage that in your Apple ID settings.

Your rights

You may access, correct, or delete your data. Depending on your region (e.g. GDPR/CCPA) you may have additional rights; contact us to exercise them.

We process the analytics and crash data described above on the basis of our legitimate interest in keeping the app working and understanding where it fails. If you would rather we did not, write to ironroadfit@gmail.com and we will stop collecting it for your account and delete what we hold. Deleting your account removes it too.

Children

Ironroad is not directed to children under 13 (or the equivalent minimum age in your region), and we do not knowingly collect their data.

Changes

We may update this policy; material changes will be reflected by the date above.