This Privacy Policy explains what personal data Ironkor collects, how we use it, and how you can control it. Ironkor is operated from Portugal and acts as the data controller for your personal data under the EU General Data Protection Regulation (GDPR).
1. Data we collect
We collect the following categories of data:
- Account data. Email address, display name, and authentication metadata, handled by our identity provider (Clerk).
- Workout data. Routines, sessions, sets, exercises, notes, and any media you attach. This is the data that makes Ironkor useful to you.
- Training plan data. If you build a plan with the coach: your race (distance and date), your goal time, your current running volume, the days and times you can train, and the runs, rides and swims you log (distance, time, effort).
- Imported workouts. Only if you connect Apple Health or Health Connect in the app: the runs, rides and swims recorded there in the last 30 days, as the sport, start time, duration and distance. We do not read heart rate, sleep, or any other health data, and we never write to Apple Health or Health Connect. You can disconnect at any time in the app, and revoke access in Apple Health or Health Connect. Workouts already imported stay in your log until you delete them or your account.
- Health data. Only if you give explicit consent in the app: injuries, as a body area and whether they are current or past, and pain you report on a logged session, as a level from 0 to 10 and a body area. We store these as categories, never as free text in your plan.
- Conversations with the coach. The messages you exchange with the AI coach, stored so the conversation can continue.
- Subscription data. If you subscribe to Hardcore, your subscription status and identifiers are processed by RevenueCat. Payment details are handled by Apple or Google. We do not receive your full card or banking information.
- Diagnostic and analytics data. Aggregate, pseudonymized product-usage events processed by PostHog (screens viewed, features used, crash and performance signals). Analytics events do not contain the contents of your workouts or of your conversations with the coach.
- Device and technical data. Device model, operating system, app version, language, and approximate IP-based region. Used to debug issues and ship compatible builds.
2. How we use your data
- To provide the service: sync workouts across your devices, compute progress, surface personal records.
- To build and adapt your training plan: the coach and the plan engine use your answers, your logged sessions and, with your consent, your injuries and pain.
- To keep the service reliable and safe: prevent abuse, debug issues, monitor performance.
- To improve the product: aggregate analytics inform what to build next.
- To communicate with you: essential service messages about your account or billing. Marketing communications only with your consent.
3. Legal bases (GDPR)
We process your personal data on the following legal bases:
- Contract: to provide the service you signed up for.
- Legitimate interest: security, abuse prevention, and aggregate product analytics.
- Consent: marketing communications and any analytics that require it.
- Explicit consent (Article 9(2)(a) GDPR):health data (injuries and pain), asked for in the app before your first conversation with the coach. You can withdraw it at any time (see section 5).
- Legal obligation: for example, responses to lawful requests.
4. Processors we use
We share data with a small set of processors that operate Ironkor on our behalf:
- Clerk for authentication and account management.
- Convex for backend data storage and real-time sync.
- RevenueCat for subscription management.
- Apple App Store and Google Play for billing and subscription delivery.
- PostHog for product analytics.
- OpenRouter for routing the coach’s requests to the AI model, with zero data retention: prompts and answers are not stored and not used to train models.
- The AI model provider that answers the coach: Google Cloud (Vertex AI) or Amazon Web Services (Bedrock), on endpoints in the EU, with zero data retention. Requests are restricted to these providers; they are never sent to a provider not listed here.
We do not sell your personal data, and we do not share it with advertisers or data brokers.
5. Health data and the AI coach
The coach builds and adjusts training plans. It is not medical advice and does not replace a doctor or physiotherapist.
Before your first conversation, the app asks for your explicit consent to process health data. Without it, the coach is not available and the app does not ask about pain on your logs.
You can withdraw your consent at any time in the app, under Settings → Account → Privacy. Withdrawing deletes your conversations with the coach, the injuries in your plan and the pain in your logs. Your account, your plan and your logged sessions stay. Withdrawing does not affect processing that took place before it.
Your conversations are sent to the processors listed in section 4 only to answer you, and are never used to train AI models.
6. International transfers
Some of our processors are based outside the EU and EEA, including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses, and we take additional measures where they are required.
7. Data retention
We keep your data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, including your subscription status, the purchase and sign-in events we receive from RevenueCat and Clerk, your customer record at RevenueCat, and your co-op sessions. We keep no billing records: Apple and Google sell the subscription and issue the invoice, and they keep the purchase records the law requires. While your account is active, purchase and sign-in event logs are deleted after 90 days. Encrypted backups are rotated and purged within 90 days.
8. Your rights
Under the GDPR you have the right to:
- access your personal data;
- correct inaccurate data;
- delete your data;
- export your data (data portability);
- object to or restrict certain processing;
- withdraw consent at any time;
- lodge a complaint with your supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).
You can exercise most of these rights directly in the app, including export and deletion (see how to delete your account). For other requests, email info@ironkor.com.
9. Children
Ironkor is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Security
We use industry-standard measures to protect your data, including encryption in transit (TLS), encryption at rest where our processors support it, restricted internal access, and audit logging. No system is perfectly secure. If a breach affecting your personal data occurs, we will notify affected users and the competent supervisory authority as required by law.
11. Changes to this policy
We may update this Privacy Policy as the product evolves. Material changes will be announced in the app or by email at least 30 days before they take effect.
12. Contact
Privacy questions or rights requests? Email info@ironkor.com.