Last Updated: April 1, 2026
This Privacy Policy describes how IronLog ("we," "us," or "our") collects, uses, and shares your personal information when you use our mobile application (the "App") and related services (collectively, the "Services").
We collect personal information that you voluntarily provide to us when you register for the Services, as well as information collected automatically when you use the App.
1.1 Personal Information Provided by You:
Email address (used for account creation and authentication)
Password (hashed and stored securely — never stored in plain text)
1.2 Google Sign-In:
You may register or sign in using your Google account. When you do so, we receive your Google ID token and email address from Google. We do not receive or store your Google password.
1.3 Guest Mode:
You may use the App without creating an account. In guest mode, all data is stored locally on your device and is not synced to our servers.
1.4 Workout & Fitness Data:
When you use the App, you create and store fitness-related data, including:
Exercises (name, muscle group, category)
Training plans (name, day structure, exercise assignments)
Workout sessions (date, duration, exercises performed, sets, reps, weight)
1.5 Automatically Collected Information:
Analytics Data: We use PostHog (EU-hosted) to collect usage events such as screen views, feature interactions (e.g., workout started, plan created), and user preferences. Your identity is linked to an anonymous user ID, not your email address.
Crash Reports: We use Sentry to collect error logs, stack traces, device information (OS version, device model, app version), and limited session replays (sampled at 10%, or 100% when an error occurs) to diagnose issues.
Advertising Data: We use Google AdMob to display interstitial ads. AdMob may collect your device advertising ID, ad interaction data, and approximate location (if location permissions are granted).
Over-the-Air Updates: We use Expo Updates to deliver app updates. This transmits your app version, bundle fingerprint, and a device identifier to Expo's update servers.
1.6 Local Notifications:
The App may send local notifications for rest timers, workout reminders, and inactivity nudges. These notifications are generated entirely on your device — no notification data is sent to our servers. You can manage notification permissions in your device's settings.
We process your personal information for the following purposes:
To create and manage your user account and authenticate your identity.
To store, sync, and deliver your workout data across your devices.
To analyze App usage and improve the user experience (via PostHog analytics).
To identify and fix bugs and performance issues (via Sentry error tracking).
To display advertisements (via Google AdMob).
To deliver over-the-air App updates (via Expo Updates).
To send local notifications based on your preferences (rest timers, workout reminders, inactivity nudges).
We do not sell your personal information. We share your data with the following third-party service providers who process it on our behalf:
Service
Purpose
Data Shared
Supabase
Authentication & cloud database
Email, hashed password, workout/plan data
PowerSync
Data synchronization
Workout/plan data (per-user isolation enforced)
PostHog (EU)
Analytics
Anonymous user ID, usage events, screen views
Sentry
Error tracking & monitoring
Error logs, device info, session replays (sampled)
Google AdMob
Advertising
Device advertising ID, ad interactions, approximate location
Google Sign-In
Authentication
Google ID token, email address
Expo
Over-the-air updates
App version, bundle hash, device identifier
We may also disclose your information:
In connection with a merger, acquisition, or sale of assets.
Where required by law, legal process, or governmental request.
Local Data: Workout data is stored locally in an encrypted SQLite database on your device. Authentication tokens and user preferences are stored in encrypted local storage (MMKV with AES encryption, keys secured in the OS keychain).
Cloud Data: If you create an account, your data is synced to Supabase (PostgreSQL) with Row-Level Security ensuring that only you can access your own data.
We implement appropriate technical and organizational measures to protect your information. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
Data Type
Retention Period
Deletable by User
Account & workout data (Supabase)
Until account deletion
Yes
Analytics events (PostHog)
Per PostHog retention policy
No (anonymized user ID)
Error logs (Sentry)
90 days (auto-purged)
Automatic
Session replays (Sentry)
30 days (auto-purged)
Automatic
Ad interaction data (AdMob)
Per Google's data retention policy
Per Google policy
Local device data (SQLite/MMKV)
Until sign-out or app uninstall
Yes
We do not knowingly collect data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years of age. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete such data.
Depending on your location, you may have the right to access, correct, or delete the personal information we hold about you.
Account and Data Deletion:
You can delete your account directly within the App from the profile settings screen. When you delete your account:
All your workout data, exercises, plans, and account information are permanently deleted from our servers (Supabase).
Local data on your device is cleared upon sign-out.
Previously collected analytics events (PostHog) are retained under an anonymous ID and cannot be individually purged.
Sentry error logs and replays are automatically purged after 90 and 30 days, respectively.
You may also contact us at the email below to request account and data deletion.
We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy frequently to stay informed about how we protect your information.
If you have questions or comments about this Privacy Policy, or if you would like to request to review, update, or delete your personal data, please contact us by email at:
support@iron-log.app