Privacy Policy

IronPact · Last updated August 7, 2026

Before publishing: fill in the bracketed placeholders below (legal entity name, jurisdiction, and support contact) once incorporation is complete. Everything else reflects what the app actually collects and does today.

This Privacy Policy explains what information IronPact ("we", "us") collects when you use the IronPact app, why we collect it, and the choices you have. IronPact is operated by [Legal Entity Name].

Information we collect

Category	Examples	Required?
Account	Email address, password (hashed by our authentication provider), display name, username	Yes
Fitness & health	Workouts, sets, reps, weight lifted, personal records, training goal and experience level, optional bodyweight and body-fat percentage	Workouts yes; bodyweight/body-fat optional
Social	Friend connections, pact membership, usernames and display names visible to other users	Optional — only if you use social features
Payment	Subscription and token-purchase history. Card details are handled entirely by Stripe; we never receive or store your card number.	Optional — only if you purchase
AI features	Training goals, experience level, equipment, and recent workout summaries, sent to Anthropic (Claude) to generate a training plan	Optional — only if you use AI Plan Generator
Support	Name, email, and message content if you contact support	Optional
Usage analytics	In-app events such as signing up, logging a first workout, claiming a mission, joining a pact, generating a plan, or opening the subscription page — with a session identifier and your user ID. Stored in our own database, not sent to a third-party analytics provider.	Automatic

We do not collect advertising identifiers, location data, or device fingerprints, and we do not use third-party analytics or advertising SDKs. If that changes, this policy will be updated first.

How we use your information

To create and maintain your account and let you log in
To store and display your workouts, progress, and personal records back to you
To power the AI Plan Generator, which sends the profile and workout context described above to Anthropic's API to generate a personalized training plan
To operate social features you opt into — friends, pacts, and leaderboards — which necessarily show your username, display name, and activity to the other users you connect with
To process purchases through Stripe and grant the tokens or subscription you paid for
To respond to support requests and to review reports made under our user conduct policy
To understand how the app is used in aggregate — which features people reach, and where they drop off — so we can improve it. We do not use this data to build advertising profiles or sell it to anyone.

Who we share information with

We do not sell your personal information. We share it only with the service providers that make the app work, each bound to use it solely to provide their service to us:

Supabase — hosts our database and handles authentication
Anthropic — processes AI Plan Generator requests (goal, experience, equipment, and a summary of recent workouts; never your email or payment details)
Stripe — processes payments; we never see your full card number

Other IronPact users see only what your profile and activity settings choose to share — username, display name, workout counts, and streaks with friends and pact members.

Your choices

Access and export. Your workout history is visible in-app at any time.
Delete your account. Go to Profile → Delete Account. This permanently deletes your account and all associated data — workouts, missions, cosmetics, pacts, friendships, and tokens — immediately and cannot be undone.
Block and report. You can block another user from Friends or Pending Requests at any time; blocking prevents them from sending you friend requests or seeing your activity. You can report a user from the Friends list.
Optional fields. Bodyweight and body-fat percentage are never required to use the app and can be left blank.

Data retention

We retain your data for as long as your account is active. If you delete your account, your data is deleted immediately as described above. We may retain report records referencing a deleted account's user ID for a limited period to enforce our conduct policy, without retaining the deleted account's personal data.

Children's privacy

IronPact is not directed at children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has created an account, contact us at the address below and we will delete it.

Security

Data is stored with Supabase, which enforces row-level security so that, with narrow exceptions described in this policy (such as social features you opt into), only you can read your own data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

International users

Your information may be processed in countries other than the one you live in, including the United States, by the service providers listed above.

Changes to this policy

If we make material changes, we will update the "Last updated" date above and, where required, notify you in-app.

Contact

Questions about this policy or your data: [support email — e.g. support@ironpact.sigro.app], or use the in-app Support form.