IRN — Privacy Policy
1. Introduction
IRN (“IRN,” “we,” “our,” or “us”) operates the IRN workout tracking application for iOS (the “App”) and the related backend services and, for organizations, the IRN partner portal (together, the “Service”). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.
By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service. This Privacy Policy is incorporated into, and should be read together with, our Terms of Service.
2. Information We Collect
2.1 Account Information (Sign in with Apple)
Creating an account is required to save your workout data to our servers, sync it across your devices, and use features such as promo code redemption and Pro subscriptions. We use Sign in with Apple as our authentication method. When you sign in, Apple shares with us:
- A unique identifier for your account, generated by Apple specifically for IRN. This identifier is an app-specific alias assigned by Apple — it is not your actual Apple ID and cannot, by itself, be used to identify you outside of IRN.
- An email address, which — depending on the choice you make during Sign in with Apple — is either your real email address or an anonymized private relay address generated by Apple (“Hide My Email”) that forwards to your real inbox without revealing it to us.
- If you choose to share it, the name Apple passes us during sign-in — which we store as your account’s display name. You can change your display name in the App at any time.
We store this account information on our backend (via our database provider, Supabase) together with your unit preference and subscription status. We keep this information for as long as your account is active, both to operate the Service (identifying your account, syncing your data, and providing customer support) and for our own internal recordkeeping and safekeeping — including backup of your account so it can be restored if you reinstall the App or switch devices, and internal business reporting described in Section 3.
2.2 Workout and Training Data
The App stores the workout data you create or import, including workout plans, exercise templates, workout sessions, and logged sets (the specific weight and reps you record for each set, including separate left/right values for unilateral exercises). This data is stored on our servers, tied to your account, so that it syncs across your devices and is backed up if you lose or replace your device. This data is private to your account by default; see Section 4 for the limited circumstances in which it may be visible to others.
You can use the App without creating an account. In that case your workout data is stored only on your device and is never sent to our servers. A small set of preferences — your weight unit, weekly workout goal, custom exercise names, and a cached copy of any Organization branding you’ve redeemed — is also stored in your personal iCloud Key-Value storage so it follows you between your own devices; this data is held in your iCloud account under Apple’s terms, not on our servers.
2.3 Subscription and Purchase Information
If you purchase a Pro subscription, Apple processes the payment. Apple then sends us real-time subscription-status notifications directly (server-to-server) whenever your subscription changes — for example when it starts, renews, changes, or expires. We verify Apple’s signature on these notifications and keep a record of the product purchased, a transaction identifier, and the expiration/renewal date, associated with your account, so your Pro status stays accurate across your devices.
Separately, each time you use the AI import feature, the App sends your subscription’s current signed transaction record to our server as part of that request, so we can confirm you have an active subscription and track your monthly import allowance — this happens per import, not as a general account update.
We do not receive your payment card details, billing address, or full Apple ID from Apple for either of these.
2.4 Files You Submit for AI Import
If you use the AI import feature, you submit a file (a PDF, photo, or screenshot of a workout program) to our servers. We are transparent about how this file is handled:
- The file is transmitted over an encrypted connection to our backend (hosted on Vercel)
- The backend forwards the file to Anthropic’s Claude API solely to extract structured workout data from it
- The extracted workout data is returned to your device for you to review and save
- We do not retain the file itself on our servers after the request completes
- Anthropic processes the file subject to its own privacy policy (anthropic.com/privacy) and does not use content submitted through our API integration to train its models
Please do not upload documents containing personal information about anyone other than yourself, or any sensitive information beyond your workout program.
2.5 Organization and Program Data
If you redeem a promo code to unlock a program published by an Organization (such as a gym, coach, or event organizer), we record that redemption against your account. See Section 4 for what Organizations can and cannot see.
2.6 Share-Card Activity
When you save or share a workout share card from the App, we record that you did so, along with the workout session it was created from, whether you saved or shared it, the date and time, and — if the card carried an Organization’s branding — which Organization and program. We use this to understand which features are used and to give Organizations aggregate share statistics for their programs (see Section 4.2). It does not include the image itself, and we do not know where or with whom you shared it.
2.7 Information We Do Not Collect
We do not integrate third-party advertising or analytics SDKs, and we do not use your data for behavioral advertising. We do not access Apple HealthKit or collect body-metric or medical data (such as body weight, body fat percentage, or biometric readings) — the only “weight” data the App stores is the weight you log for a lift. We do not collect precise location data.
3. How We Use Your Information
We use the information described above to:
- Create and secure your account, and authenticate you across your devices
- Store, sync, and back up your workout data
- Provide the AI import feature and enforce usage allowances
- Activate and manage Pro subscription entitlements
- Operate promo code redemption
- Provide customer support and respond to your requests
- Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service
- Generate internal business metrics and standards reporting — for example, aggregate counts of total, active, and Pro users over time — which we use to understand and operate our business. These internal reports rely on aggregate counts and do not identify you individually to anyone outside IRN.
We do not sell your personal information, and we do not use it for third-party advertising.
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We share information only in the following circumstances:
4.1 Service Providers
- Apple — processes Sign in with Apple authentication and all in-app purchases (apple.com/legal/privacy)
- Supabase — hosts our account authentication system and database, where your account and workout data are stored (supabase.com/privacy)
- Vercel — hosts our backend infrastructure (vercel.com/legal/privacy-policy)
- Anthropic — processes files you submit for AI import, as described in Section 2.4 (anthropic.com/privacy)
4.2 Organizations (Aggregate and Redemption-Level Data Only)
If you redeem a promo code for an Organization’s program:
- The Organization receives anonymized, aggregate usage statistics about their programs — for example, total and active member counts and the number of share cards created for their programs across a given month. These aggregate figures do not identify you individually and cannot be used by the Organization to single you out.
- Separately, the Organization can see that your account redeemed their specific program and when — this is tied to your account, but does not include your name, email address, or the contents of your workout logs. Your workout data itself is not shared with the Organization through program redemption alone.
4.3 Legal and Safety
We may disclose information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
4.4 Business Transfers
If IRN is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
5. Data Storage, Retention, and Security
Your account and workout data are stored on our servers (via Supabase, hosted in the United States) for as long as your account remains active. Transaction and subscription records may be retained longer where necessary to prevent duplicate purchase fulfillment, comply with legal obligations, or resolve disputes.
We use industry-standard safeguards to protect your information, including encryption in transit (HTTPS) and database-level access controls that restrict a given account to its own data, with narrowly scoped exceptions for the Organization features described in Section 4. No system is completely secure, and we cannot guarantee the absolute security of your information.
You can permanently delete your account and all associated data at any time through Settings > Delete Account & All Data within the App. Deletion removes your profile, workout plans, exercise templates, session history, logged sets, program redemptions, and share-card activity from our systems. Anonymous subscription-metering records keyed on your Apple transaction identifier (not your account) may persist until the end of the current billing month. Data stored only on your device or in your personal iCloud account is not affected by server-side deletion; delete the App to remove it. This action is currently irreversible, so please be certain before confirming.
6. Your Choices and Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information (most account fields can be edited directly in Settings)
- Delete your account and associated data, as described in Section 5
- Object to or restrict certain processing of your information
- Receive a copy of your information in a portable format
To exercise any of these rights, email us at liam@irnapp.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling certain requests.
7. Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at liam@irnapp.com and we will promptly delete it.
Users between 13 and 17 may use the Service only with the involvement of a parent or guardian, as described in our Terms of Service.
8. California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended, gives you additional rights over your personal information, including the right to know what personal information we collect, use, and disclose about you; the right to request deletion; the right to correct inaccurate information; and the right to non-discrimination for exercising your privacy rights.
We do not sell or share (as those terms are defined under the CCPA) personal information, including that of consumers under 16, so no opt-in or opt-out mechanism is required for that purpose. Categories of personal information we collect are limited to identifiers (your Apple-provided account identifier and email/relay address), commercial information (subscription and transaction records), and the user-generated content described in Section 2 (your workout data).
California residents under 18 also have the right to request removal of content they have posted within the Service; see Section 2.1 of our Terms of Service for how to exercise this right through the App.
To exercise your California privacy rights, contact us at liam@irnapp.com.
9. International Users
The Service is operated from the United States. If you use the Service from outside the United States, your information will be processed in the United States and in other countries where our service providers operate, which may have data protection laws different from those in your jurisdiction. By using the Service, you consent to this transfer and processing.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will update the “Last Updated” date above and, for material changes, provide notice within the App. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Privacy Policy.
11. Contact Us
Questions or requests regarding this Privacy Policy can be sent to:
liam@irnapp.com