IRN — Privacy Policy
1. Introduction
IRN (“IRN,” “we,” “our,” or “us”) operates the IRN workout tracking application for iOS (the “App”) and the related backend services and, for organizations, the IRN partner portal (together, the “Service”). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.
By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service. This Privacy Policy is incorporated into, and should be read together with, our Terms of Service.
2. Information We Collect
2.1 Account Information (Sign in with Apple)
Creating an account is required to save your workout data to our servers, sync it across your devices, and use features such as promo code redemption and Pro subscriptions. We use Sign in with Apple as our authentication method. When you sign in, Apple shares with us:
- A unique identifier for your account, generated by Apple specifically for IRN. This identifier is an app-specific alias assigned by Apple — it is not your actual Apple ID and cannot, by itself, be used to identify you outside of IRN.
- An email address, which — depending on the choice you make during Sign in with Apple — is either your real email address or an anonymized private relay address generated by Apple (“Hide My Email”) that forwards to your real inbox without revealing it to us.
We store this account information on our backend (via our database provider, Supabase) together with your display name, unit preference, and subscription status. We keep this information for as long as your account is active, both to operate the Service (identifying your account, syncing your data, and providing customer support) and for our own internal recordkeeping and safekeeping — including backup of your account so it can be restored if you reinstall the App or switch devices, and internal business reporting described in Section 3.
2.2 Workout and Training Data
The App stores the workout data you create or import, including workout plans, exercise templates, workout sessions, and logged sets (the specific weight and reps you record for each set, including separate left/right values for unilateral exercises). This data is stored on our servers, tied to your account, so that it syncs across your devices and is backed up if you lose or replace your device. This data is private to your account by default; see Section 4 for the limited circumstances in which it may be visible to others.
2.3 Subscription and Purchase Information
If you purchase a Pro subscription, Apple processes the payment. We receive limited purchase information from Apple via App Store Server Notifications, including the product purchased, a transaction identifier, and expiration/renewal status, which we use to activate and maintain your Pro entitlement. We do not receive your payment card details, billing address, or full Apple ID from Apple for this purpose.
2.4 Files You Submit for AI Import
If you use the AI import feature, you submit a file (a PDF, photo, or screenshot of a workout program) to our servers. We are transparent about how this file is handled:
- The file is transmitted over an encrypted connection to our backend (hosted on Vercel)
- The backend forwards the file to Anthropic’s Claude API solely to extract structured workout data from it
- The extracted workout data is returned to your device for you to review and save
- We do not retain the file itself on our servers after the request completes
- Anthropic processes the file subject to its own privacy policy (anthropic.com/privacy) and does not use content submitted through our API integration to train its models
Please do not upload documents containing personal information about anyone other than yourself, or any sensitive information beyond your workout program.
2.5 Organization, Program, and Coach Data
If you redeem a promo code to unlock a program published by an Organization (such as a gym, coach, or event organizer), we record that redemption against your account. If you accept a connection request from an individual coach, we record that connection and the access it grants. See Section 4 for what Organizations and coaches can and cannot see.
2.6 Information We Do Not Collect
We do not integrate third-party advertising or analytics SDKs, and we do not use your data for behavioral advertising. We do not access Apple HealthKit or collect body-metric or medical data (such as body weight, body fat percentage, or biometric readings) — the only “weight” data the App stores is the weight you log for a lift. We do not collect precise location data.
3. How We Use Your Information
We use the information described above to:
- Create and secure your account, and authenticate you across your devices
- Store, sync, and back up your workout data
- Provide the AI import feature and enforce usage allowances
- Activate and manage Pro subscription entitlements
- Operate promo code redemption and, if applicable, coach connections
- Provide customer support and respond to your requests
- Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service
- Generate internal business metrics and standards reporting — for example, aggregate counts of total, active, and Pro users over time — which we use to understand and operate our business. These internal reports rely on aggregate counts and do not identify you individually to anyone outside IRN.
We do not sell your personal information, and we do not use it for third-party advertising.
4. How We Share Your Information
We do not sell, rent, or trade your personal information. We share information only in the following circumstances:
4.1 Service Providers
- Apple — processes Sign in with Apple authentication and all in-app purchases (apple.com/legal/privacy)
- Supabase — hosts our account authentication system and database, where your account and workout data are stored (supabase.com/privacy)
- Vercel — hosts our backend infrastructure (vercel.com/legal/privacy-policy)
- Anthropic — processes files you submit for AI import, as described in Section 2.4 (anthropic.com/privacy)
4.2 Organizations (Aggregate and Redemption-Level Data Only)
If you redeem a promo code for an Organization’s program:
- The Organization receives anonymized, aggregate usage statistics about their programs (for example, total and active member counts across a given month). These aggregate figures do not identify you individually and cannot be used by the Organization to single you out.
- Separately, the Organization can see that your account redeemed their specific program and when — this is tied to your account, but does not include your name, email address, or the contents of your workout logs. Your workout data itself is not shared with the Organization through program redemption alone.
4.3 Coaches (Only If You Opt In)
If you accept a connection request from an individual coach, that coach may view your training data on a read-only basis for as long as the connection is active. You are never connected to a coach without affirmatively accepting the request, and you can revoke an active connection at any time through the App, which immediately ends the coach’s access.
4.4 Legal and Safety
We may disclose information if required to do so by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
4.5 Business Transfers
If IRN is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
5. Data Storage, Retention, and Security
Your account and workout data are stored on our servers (via Supabase, hosted in the United States) for as long as your account remains active. Transaction and subscription records may be retained longer where necessary to prevent duplicate purchase fulfillment, comply with legal obligations, or resolve disputes.
We use industry-standard safeguards to protect your information, including encryption in transit (HTTPS) and database-level access controls that restrict a given account to its own data, with narrowly scoped exceptions for the Organization and coach features described in Section 4. No system is completely secure, and we cannot guarantee the absolute security of your information.
You can permanently delete your account and all associated data at any time through Settings > Delete Account & All Data within the App. Deletion removes your profile, workout plans, exercise templates, session history, logged sets, and program redemptions from our systems. This action is currently irreversible, so please be certain before confirming.
6. Your Choices and Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information (most account fields can be edited directly in Settings)
- Delete your account and associated data, as described in Section 5
- Object to or restrict certain processing of your information
- Receive a copy of your information in a portable format
To exercise any of these rights, email us at irnapp26@gmail.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling certain requests.
7. Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at irnapp26@gmail.com and we will promptly delete it.
Users between 13 and 17 may use the Service only with the involvement of a parent or guardian, as described in our Terms of Service.
8. California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended, gives you additional rights over your personal information, including the right to know what personal information we collect, use, and disclose about you; the right to request deletion; the right to correct inaccurate information; and the right to non-discrimination for exercising your privacy rights.
We do not sell or share (as those terms are defined under the CCPA) personal information, including that of consumers under 16, so no opt-in or opt-out mechanism is required for that purpose. Categories of personal information we collect are limited to identifiers (your Apple-provided account identifier and email/relay address), commercial information (subscription and transaction records), and the user-generated content described in Section 2 (your workout data).
California residents under 18 also have the right to request removal of content they have posted within the Service; see Section 2.1 of our Terms of Service for how to exercise this right through the App.
To exercise your California privacy rights, contact us at irnapp26@gmail.com.
9. International Users
The Service is operated from the United States. If you use the Service from outside the United States, your information will be processed in the United States and in other countries where our service providers operate, which may have data protection laws different from those in your jurisdiction. By using the Service, you consent to this transfer and processing.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will update the “Last Updated” date above and, for material changes, provide notice within the App. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Privacy Policy.
11. Contact Us
Questions or requests regarding this Privacy Policy can be sent to:
irnapp26@gmail.com