Privacy Policy

Last updated: 6 September 2026

Ironpath ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Ironpath mobile application.

1. Information We Collect

We collect the following information when you use Ironpath:

• Account Information: Email address, display name, and one-way hashed password when you create an account.
• Body Metrics: Height, bodyweight, body fat percentage, date of birth, and fitness goal as provided during onboarding.
• Fitness Data: Lift weights, workout logs, cardio sessions, progress entries, and achievement data that you input into the app.
• Calorie Tracking Data: Daily calorie goals, food logs, saved and recent foods, meal and macro values, and barcode identifiers you choose to scan.
• App-open streak data: Account-scoped dates and timestamps stored locally on your device and used for local reminder scheduling.
• Subscription Information: Subscription status, plan type, and billing dates (payment processing is handled entirely by Apple App Store or Google Play — we do not store payment card details).

2. How We Use Your Information

We use your information to:

• Provide and maintain the Ironpath service, including tracking your fitness progress.
• Generate personalised projections, nutrition analysis, and motivational content.
• Request camera permission just in time when you choose a barcode or food-photo action. Barcode nutrition is looked up through Open Food Facts.
• Send a food photo to server AI only after you capture it, show the calorie and macro estimate for editing, and save those values only after you confirm the food-log entry. The photo itself is not persisted by the App's food-log database.
• Calculate informational calorie maintenance and daily estimated weight change using approved adult male Mifflin–St Jeor inputs and an approximate 7,700 kcal/kg energy conversion.
• Display your stats on the leaderboard (using your chosen display name only).
• Send transactional emails (account verification, password reset, welcome emails).
• Manage your subscription and provide customer support.

3. Data Storage and Security

Your account credentials, calorie goals, food entries, saved foods, recent-food snapshots, and daily nutrition totals are stored on servers. Passwords are hashed and never stored in plain text. Most workout and body data, account-scoped app-open streak timestamps, and local reminder settings are stored on your device. We use security measures intended to protect your personal information, but no storage method is completely secure.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share limited data with:

• Service Providers: Cloud hosting and email delivery services that help us operate the app (these providers are bound by confidentiality agreements).
• Open Food Facts: We request public product and serving nutrition using only the barcode you choose to scan.
• AI Processing: Request content may be processed by an AI service provider. A food photo is sent to server AI only after capture. Its editable estimate is saved only after confirmation; the image itself is not persisted by the App's food-log database.
• Legal Requirements: If required by law or to protect our rights.

5. Leaderboard

If you participate in the leaderboard, your display name, level, and fitness statistics will be visible to other Ironpath users. You can change your display name at any time from your Profile.

6. Assistant

Assistant messages are sent with the current request so a response can be generated. Ironpath does not store them as App chat history.

7. Your Rights

You have the right to:

• Access: View all data we hold about you (available in-app via your Profile and Stats).
• Correction: Update your personal information at any time via the Personal Info screen.
• Deletion: Permanently delete your account and all associated data using the "Delete Account Permanently" option in your Profile. This removes all server-side data and cannot be undone.
• Data Portability: Contact us to request an export of your data.

8. Children's Privacy

Ironpath is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us immediately.

9. Subscription and Payments

Subscriptions are processed through Apple App Store (iOS) or Google Play (Android). We do not have access to your payment card details. Subscription management, including cancellation, is handled through your device's app store settings.

10. Analytics and Tracking

Ironpath does not use third-party analytics or advertising trackers. We do not track you across other apps or websites. We do not sell your data to advertisers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

ironpathapp@gmail.com