Privacy Policy

Overview

Ironside is a workout tracker developed by Mitchell Seddon Henderson. This policy describes our privacy practices for the app.

Local data only

All workout and training data stays on your device. We do not operate cloud storage for your logs, and we do not sync your data to our servers.

No accounts or authentication

Ironside does not require sign-in. There are no user accounts, and we do not collect credentials for the app itself.

No ads, no tracking, minimal anonymous analytics

We do not use advertising networks or cross-app tracking. No personal data is collected or transmitted to us for marketing or profiling.

We collect a small set of anonymous usage signals (currently via TelemetryDeck) so we know the app is working: app launched, onboarding completed, first workout logged, trial gate shown, unlock purchased, and tip purchased. These signals are tied to a random installation identifier — not your name, email, or device identity — and TelemetryDeck additionally hashes it. They never include your workout data, body measurements, or anything you type.

We may use privacy-respecting crash reporting (currently Sentry) to receive anonymised error reports when the app crashes. These reports contain stack traces and device context (OS version, app version) but not your workout data, personal information, or identifying details. Crash reporting helps us fix bugs quickly. You cannot opt-out of crash reporting at this time; if this matters to you please email us.

In-app purchases

Ironside is free to download with a limited trial (10 logged workouts or 30 days, whichever comes first). After the trial, a one-time Full Unlock purchase is required to continue using the app. A voluntary tip jar is also available. All payment handling, receipts, and billing data are managed by Apple. Ironside only receives a confirmation of entitlement from Apple — we do not receive or store your payment details, card numbers, or billing address. Your workout history remains viewable read-only and data export remains available without purchase. For refund requests, contact Apple Support directly.

Optional AI features

If you choose to use AI features in Direct BYOK mode (Claude, ChatGPT, or Gemini), your API keys are stored only on your device. Requests are sent directly from your device to the AI provider you selected; they are not routed through Ironside servers. If you choose Backend proxy mode and a service is configured, AI requests are routed through the Ironside proxy so provider keys can stay server-side and quotas, kill switches, and abuse protection can be enforced.

AI chats, thumbs feedback, and editable coach memory are stored on your device. You can export AI data, clear coach memory, or delete all AI data from Settings. Ironside AI is for general strength-training education only and is not medical, dietetic, therapy, or emergency advice.

Apple Health, HealthKit & Health Connect

On native builds, Ironside may integrate with Apple Health (iOS) or Health Connect (Android). With your explicit permission Ironside will:

• Write completed strength workouts (an HKWorkout on iOS or an exercise session on Android) with start/end time, an estimated calorie total when available, and metadata containing the workout name, set count and total volume.
• Write bodyweight and body-fat measurements you log on the Body page, and any body metrics (including height) you save from the Settings panel.
• Read the latest weight, height and body-fat samples — only when you tap a Load or Sync button. Ironside never polls your health app in the background.

Health data stays on your device and is shared only with Apple Health or Health Connect. To revoke access on iOS, open Settings → Health → Data Access & Devices → Ironside. On Android, manage permissions in Health Connect or system settings.

Optional local notifications

On native builds, you can enable device-local notifications for rest timer completion, Smart Insights alerts after workouts, and workout idle reminders. These are scheduled on your device by the operating system — we do not operate a remote push notification service for them, and they never include your full workout history.

If a rest-timer Live Activity push service is configured at build time, iOS may send a Live Activity push token and timer end time to that service solely to dismiss the rest timer Live Activity when the app is backgrounded. No workout data is included.

CSV import and export

Importing and exporting CSV files is processed entirely on your device. Files you choose are not uploaded to us.

How data is saved

Settings and app data persist using Capacitor Preferences on native builds and localStorage on the web. This storage remains on your device.

This website

When you visit ironsideapp.com, we use Vercel Web Analytics and Vercel Speed Insights to collect anonymous page-view and performance statistics. No personal information or workout data is collected. This applies to website pages only, not the mobile app.

Contact

Questions about this policy? Emailironsideapp@gmail.com.