Privacy Policy

1. Who we are

IRONLOG ("we," "our," "the app") is a personal gym progress tracking application. This policy explains what information we collect when you use IRONLOG, why we collect it, and how you can control it. If you have questions, you can reach us using the contact details at the bottom of this page.

2. Information we collect

Account information: username, email address, and a securely hashed password (we never store your password in plain text). If you sign in with Google, we receive your name, email, and Google account ID from Google — we never see or store your Google password.

Fitness and health data you choose to enter:

• Body weight, body fat percentage, and body measurements (chest, waist, arms, etc.)
• Workout logs — exercises, sets, reps, weight lifted, RPE, and notes
• Nutrition logs — calories and macronutrients you enter
• Goals you set (weight, strength, workout frequency)
• Profile details you provide — age, gender, height, activity level, experience level

Technical information: IP address, browser type, and device information, collected automatically for security purposes (such as rate limiting and fraud prevention) and basic error monitoring.

Push notification data: if you opt in to push notifications, we store a browser-generated subscription token used only to deliver notifications to your device.

3. How we use your information

• To provide the core features of IRONLOG — tracking your workouts, weight, nutrition, and progress over time
• To calculate analytics, personal records, and progress insights from data you've entered
• To authenticate you and keep your account secure
• To send you account-related emails (password resets, email verification) and, if you opt in, workout reminders or achievement notifications
• To detect and prevent abuse, such as automated account creation or brute-force login attempts

We do not sell your personal data or fitness data to third parties. We do not use your health data for advertising.

4. Who we share information with

We do not sell or rent your data. We share limited information only with the following service providers, solely to operate the app:

• Hosting infrastructure (Amazon Web Services) — stores the application and database
• Email delivery (Brevo) — sends password reset and verification emails
• Google Sign-In (if you choose to use it) — handles authentication only

Each provider only receives the minimum data needed to perform its function, and is bound by its own privacy and security obligations.

5. Data retention

We retain your account and fitness data for as long as your account is active. If you delete your account, we delete your personal data from our active systems. Data may briefly persist in backups for a limited period before being purged as part of routine backup rotation.

6. Your rights and choices

• Access and export: you can export your data from within the app at any time.
• Correction: you can edit or delete any data you've entered directly in the app.
• Deletion: you can request full account deletion by contacting us; we will delete your account and associated personal data.
• Withdrawing consent: you can disconnect Google Sign-In or disable push notifications at any time from your account settings.

7. Security

We use industry-standard measures to protect your data, including password hashing, encrypted connections (HTTPS/TLS) for all traffic, and rate limiting on authentication endpoints. No system is 100% secure, and we encourage you to use a strong, unique password for your account.

8. Children's privacy

IRONLOG is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above. Continued use of IRONLOG after changes means you accept the updated policy.

10. Contact us

If you have questions about this policy or your data, contact us at akarshjain2006@gmail.com.