Iron Flow - Privacy Policy

Effective: April 25, 2026

Last updated: April 25, 2026

Summary

Iron Flow is a workout tracking app for iOS and macOS. By default it works fully offline — your training data lives on your device. If you sign in with Apple, you can opt to sync your data to our backend so it follows you across devices. We don't sell your data, we don't run ads, and we don't track you across other apps or websites.

What we collect

We only collect data when you sign in to enable cross-device sync. If you never sign in, no data leaves your device.

When signed in, the following are stored in our backend (Supabase):

Category	Specific data
Account	Email address (received via Sign in with Apple — usually a private relay address), display name you set, your user ID
Training	Workouts, sets, reps, weights, RPE, exercise history, personal records, rest times, notes
Body metrics	Body weight entries you log
Customizations	Custom programs, templates, avatar icon, avatar color, theme preference, weekly workout target, tracked-exercise list

We do not collect: location, browsing history, search history, contacts, photos, audio, financial info, advertising identifiers, crash logs sent off device, or any data used to track you across other apps or sites.

Why we collect it

App functionality. That's the only reason. We use this data to show you your training history, sync it across your devices, and personalize your in-app experience (theme, units, etc.).
We do not use your data for advertising, analytics shared with third parties, profiling, or tracking.

Where it's stored and how it's protected

On your device: All data is also stored locally on your device using Apple's SwiftData. The app works fully offline.
In our backend: Sign-in-required data is stored in Supabase (Postgres + auth). Each row is protected by row-level security so only you can read or write your own data. Data in transit is encrypted via HTTPS/TLS. Data at rest is encrypted by Supabase.
We do not retain logs of personally identifying information beyond what is necessary to operate the service.

Apple Health (HealthKit)

Iron Flow can optionally read body weight data from Apple Health. This integration:

Requires your explicit permission via the Settings screen
Only reads data — Iron Flow does not write to Apple Health without your action