Privacy Policy

This Privacy Policy explains how Iron Enano Training ("we", "us", or "our") collects, uses, and protects your personal information when you use our website at ironenanotraining.com and our mobile application (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. Your trainer may also store contact information and notes about you.

Health & Fitness Data

• Body measurements (weight, body fat, chest, waist, arms, thighs, etc.)
• Workout logs (sets, reps, weights, exercise selection, session notes)
• Daily check-in data (sleep, energy, mood, water intake, steps)
• Nutrition logs (calories, protein, carbs, fat)
• Fitness assessment results
• Onboarding form responses (training history, goals, injuries)

Communication Data

Messages exchanged between you and your trainer, including any text, emoji, or GIF attachments, and comments on activity feed posts.

Media You Upload

Profile pictures, progress and check-in photos, meal photos, and workout video clips you choose to upload. Uploaded media is stored in cloud object storage and is available only to you, your trainer, and service providers that process it on our behalf.

Mobile App Permissions

Our mobile app may request the following permissions:

• Camera — when you choose to take a progress, check-in, or meal photo, or scan a food barcode.
• Photo Library — when you choose to upload a profile picture or other supported photo, or save a stat sticker. We do not access your photos otherwise.
• Push Notifications — to alert you about new messages, comments, and trainer activity.
• Network State — to detect when you are offline and queue your changes.

Automatically Collected Data

We collect technical information necessary to operate the Service: IP address, device type, operating system, app version, and basic usage logs for security and debugging purposes. We do not use third-party advertising or analytics SDKs.

2. How We Use Your Information

We use the information we collect to:

• Provide the personal training and coaching services you sign up for
• Allow your trainer to plan, monitor, and adjust your training program
• Generate AI-assisted coaching summaries and draft responses for your trainer to review and edit. This is optional and off by default — we ask for your explicit permission before any of your data is shared for this purpose, and you can withdraw it at any time in your profile settings
• Generate AI-drafted workout and program templates, meal plans, and food-log entries (from text descriptions or meal photos), informed by your training history (workout logs, personal records, muscle-group volume, body measurements, and assessment results) and nutrition data; all client-tailored AI features require the same explicit opt-in consent, and your trainer reviews every draft before anything is saved
• Enable communication between you and your trainer
• Send you notifications about new messages, scheduled workouts, and program updates
• Authenticate you and protect your account from unauthorized access
• Comply with legal obligations and enforce our terms of service
• Diagnose technical issues and improve the Service

3. Data Sharing

We do not sell your personal data.

We share your information only in these limited circumstances:

• With your trainer. Your training data is shared with the trainer who has invited you to the Service. If your trainer closes their practice or deletes their account, your coaching relationship and records may be transferred to a successor trainer so your history is preserved — we notify you when this happens, and you can delete your account and personal data at any time if you don't wish to continue with the new trainer.
• Service providers. We use trusted third parties to operate the Service: cloud hosting (Hetzner), email delivery (Mailjet), media storage (AWS S3 or compatible), push notification delivery (Expo Push Service), and, when AI features are used, an approved AI provider (such as DeepSeek, OpenAI, or Anthropic). All AI features that use your data require your explicit opt-in consent (the consent prompt names the providers currently configured — at present DeepSeek for text features and Anthropic for meal-photo analysis) and consent can be withdrawn in your profile settings at any time; a change of provider requires fresh consent before any further data is sent. Trainer-facing AI drafting (workouts, programs, meal plans, coaching briefs) is requested by your trainer as part of delivering your coaching, while AI food logging is initiated by you. AI providers receive only the bounded coaching context needed for the requested feature; we exclude account contact fields and raw workout videos from coach-assistance prompts. These providers process data only on our behalf.
• Legal requirements. We may disclose information if required by law, court order, or to protect the rights, property, or safety of our users or others.

4. Data Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS/TLS), encrypted password storage, secure token-based authentication, and access controls limiting who can view your data. However, no system is completely secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active. If you request account deletion, your personal data and training history will be removed from our systems within 30 days, except where we are required to retain certain records for legal or accounting purposes.

AI coaching briefs and drafts are generated only when your trainer requests them, are shown to the trainer for review, and are not sent to you automatically. Temporary coach-assistance cache entries expire after 15 minutes. We retain provider, model, token, cost, and outcome metadata for security and cost auditing, but that ledger does not store the prompt or generated brief.

6. Your Rights

You may at any time:

• Access and download your personal data
• Update or correct inaccurate information
• Request deletion of your account and associated data directly from the app or website (Profile → Delete Account); requests are processed within 30 days
• Withdraw consent for optional features (e.g. push notifications)
• Turn off AI-assisted coaching at any time in your profile settings; future coach-assistance requests will be blocked, and your choice is never overridden by us or your trainer

To exercise these rights, contact your trainer or email support@ironenanotraining.com.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

8. International Users

The Service is operated from the European Union. By using the Service, you consent to your data being processed in the EU, which may have data protection laws different from those in your country.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@ironenanotraining.com.