IronMentor Privacy Policy

Version: 1.1.1

Effective date: 14 October 2026

Responsibility and contact

IronMentor is the fitness service provided through the IronMentor app and website. Contact support@ironmentor.io for privacy questions, the responsible operator's details and requests about your information. This policy covers IronMentor's handling of information, including during beta testing. Apple, Google and other independent services also have their own policies.

Information we handle and why

• Account and sign-in: name, email, provider account identifier and profile information supplied by Apple or Google, and your IronMentor account ID. These support account creation, authentication and security. Apple may supply a private relay email. IronMentor does not issue or store an app password.
• Training and health: experience, goals, body measurements, exercise preferences, programs, logged sets, workout history, personal records and movement measurements. Injuries, limitations and medical-history answers you provide can be used to adapt fitness guidance and safety restrictions. This is not medical diagnosis or clearance.
• Nutrition: dietary preferences, food entries, portions, nutrient estimates and your saved edits. Optional recognition features process meal or label photographs as explained below.
• Content and communications: captures you choose to upload, coach calibration recordings, feedback, support messages and attachments. Enabled consultation features can handle appointments, assessments and information you authorize sharing with a selected practitioner.
• Purchases: subscription status, product and transaction IDs, purchase history and entitlement records received from payment providers. Apple and Google process their store payments; IronMentor does not receive your full payment-card number from those purchases.
• Device and service records: device and operating-system details, app version, security fingerprint, IP address, authentication events, consent records, service usage and diagnostic records. These support operation, security, access limits and troubleshooting. Country, region or timezone information can support regional settings and scheduling. The fitness features described here do not request precise GPS location.

We use this information to deliver requested features, maintain records, personalize training and nutrition, respond to support, prevent abuse and meet legal obligations. We do not sell personal information or use health information for advertising.

Camera, photographs, recordings and AI

Camera permission does not itself upload a recording. Routine on-device movement tracking processes frames and creates measurements locally. Saved workout measurements may synchronize with your account. Optional AI summary review sends the selected measured summary for feedback; that request does not itself upload video or raw body landmarks.

Capture Studio and explicit recording/upload flows are different: they can upload the selected video and recorded audio for calibration or review. Record only people and material you have permission to include. You can change camera and microphone permissions in device settings.

Supported on-device nutrition recognition runs locally. Cloud meal and label recognition requires the cloud-scan choice and sends the selected photograph and any confirmed food context through our server to the configured AI processor. The recognition endpoint does not save the raw photograph into your diary or audit record. Meal information you choose to save is retained. Cloud processing still involves the processor's service-side handling and retention.

Configured AI features currently use OpenAI for training, nutrition and summary review, and Google for Capture Studio calibration review. Requests can contain the information needed for the feature, including health or fitness context. Hosting, storage and network providers also process service data. Provider settings and the selected feature determine the recipient. Cloud processing is not on-device processing, and we do not promise zero provider retention. Contact support for details of the processing applicable to your request.

Apple Watch, Apple Health and biometrics

With the Watch companion and your Health permissions, IronMentor can read heart rate, active energy and workout information during exercise and save workouts and active energy to Apple Health. Summaries and supported readings can transfer to the paired phone; account synchronization depends on the enabled feature. You control permissions in Apple's settings. Revocation stops future authorized access but does not itself remove records already saved. HealthKit data is not used for advertising or sold.

Biometric confirmation is performed by the operating system. IronMentor receives an authentication result, not your Face ID or fingerprint template.

Sharing and service providers

We use providers for hosting/storage, network security, sign-in, AI, payments and operational support, supplying information needed for their function. Enabled practitioner or coach features may share information with the person you authorize. App feedback can go to our issue-tracking system; avoid unnecessary medical details or other people's information.

We may disclose limited information when required by law, to protect people or investigate misuse, or in a business transfer subject to applicable protections. We do not grant an unrelated advertising network access to your training or health records. Content you deliberately share through an external service is also subject to that service's controls.

Retention and account deletion

Account information and saved training, nutrition and content are retained while needed for your account and requested features. The Capture Studio storage prefix has an expiry rule making its raw uploads eligible for deletion after one day; storage deletion runs asynchronously. This is not a promise that all media, analysis results or backups disappear within 24 hours. Saved results, consent and security records serve different purposes.

Request deletion through the in-app account-deletion control when available in your installed version, the IronMentor website's Account deletion page, or support@ironmentor.io. Use the email associated with your account where possible. Support can help verify ownership if you cannot access it. Do not send a password or sign-in code.

The cancellation deadline is 60 days after the account is marked for deletion. We confirm the date. Before that deadline, explicitly cancel in the app when available or contact support to withdraw the request; signing in alone does not withdraw it. At the deadline, the request can no longer be cancelled and permanent cleanup of your account and associated personal data we control begins. Storage or service-provider retries may extend the time needed to complete cleanup; your account remains unavailable during cleanup. Contact support for the status of your request. Account deletion does not automatically cancel a store subscription, and cancellation is not a condition for requesting deletion.

Limited records may require retention for a specific legal, financial or security obligation. We explain applicable exceptions, their purposes and retention periods when handling a request. Backups are access-restricted and must not restore a deleted account into normal service. An applicable legal requirement for an earlier response or erasure is handled separately; the 60-day schedule does not remove statutory rights. Contact support for retention details or to exercise an earlier-erasure right.

Choices and rights

You can correct information available in the app, change permissions, decline optional uploads and request access, a copy, correction, deletion or restriction through support. Depending on applicable law, you may object, withdraw consent or complain to a data-protection authority. Withdrawal does not invalidate earlier lawful processing. Some core features cannot operate without the information needed for them.

Where a legal basis is required, we rely on the service relationship for necessary account/service processing, consent where required, proportionate legitimate interests for security and operation, and legal obligations where applicable. Health information is subject to the additional conditions required by law.

Security, transfers, age and changes

We use access controls, encrypted transport and other technical and organizational safeguards. No service guarantees absolute security. Providers may process information outside your country, subject to applicable transfer protections and processor terms.

IronMentor is intended for adults aged 18 or over. Contact support if a child may have provided information. Material policy changes will be identified through an updated policy and, where required, notice or renewed consent. The date and version above identify this policy. Contact support@ironmentor.io with any question or request.