This Privacy Policy describes how IronPulse ("we," "the app," or "the service") collects, uses, and shares your personal data.
---
1. Information We Collect
1.1. Account Information
- Email address: Collected for registration and login.
- Password: Stored securely in hashed form via Supabase infrastructure. We never have access to your raw password.
1.2. Profile Information
- Display name (optional)
- Biological sex, age, height, weight (optional, used to personalize your experience)
- Fitness goals (Build Muscle, Increase Strength, Lose Weight, Improve Endurance)
1.3. Workout Data
- Custom workout programs you create
- Completed workout sessions (date, duration, exercises)
- Set data (reps, weight lifted)
- Personal records
- Custom exercises you create
1.4. Device & Usage Data
- In-app preferences (weight unit: kg/lbs, theme: light/dark)
- Usage statistics (excluding error reports)
---
2. How We Use Your Information
We use the collected information to:
- Provide the service: Save, display, and sync your workout data across devices.
- Account management: Create, authenticate, and manage your account.
- Statistics: Generate personal progress charts and analytics based on your workout history.
- Improvement: Enhance app performance and user experience.
- Communication: Send important account-related notifications (password reset, etc.).
---
3. Where Your Data Is Stored
- All data is stored securely on Supabase infrastructure using encrypted connections (SSL/TLS).
- Database servers are located within the European Union.
- A local copy is kept on your device via AsyncStorage for offline use. This copy stays on your device only.
---
4. Who We Share Your Data With
We do NOT:
- Sell, rent, or share your workout data, exercise history, or profile information with third parties for marketing purposes.
Required sharing:
- Supabase Inc.: Our database and authentication provider. Your data is protected under Supabase's security policies.
- Legal obligations: If required by court order or legal mandate, your data may be shared with authorized authorities.
---
5. Data Security
- All data transmission is encrypted via HTTPS (SSL/TLS).
- The Supabase database is protected with Row Level Security (RLS) — each user can only access their own data.
- Your password is stored hashed using the bcrypt algorithm and is never kept in plain text.
- We use industry-standard security measures, but no online service can guarantee 100% security.
---
6. Data Retention
- Your data is retained as long as your account remains active.
- When you delete your account, all personal data is permanently removed from the database within 30 days.
- Local data on your device is automatically removed when you uninstall the app.
---
7. Your Rights (GDPR & Privacy Law Compliance)
You have the following rights:
- Right of access: Learn what data we store about you.
- Right to rectification: Correct inaccurate or incomplete data.
- Right to erasure: Request deletion of your account and all associated data.
- Right to data portability: Request a copy of your data.
- Right to object: Object to data processing activities.
To exercise these rights, contact us at shungite.dev@gmail.com. Your request will be answered within 30 days.
---
8. Children's Privacy
This app is not directed at children under the age of 13. We do not knowingly collect data from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
---
9. Cookies & Tracking
- This app does not use cookies.
- No third-party analytics or advertising tracking tools are used.
- Only session tokens managed by Supabase are used for authentication purposes.
---
10. Third-Party Services
Our app uses the following third-party service:
┌──────────┬───────────────────────────┬──────────────────────────────┐
│ Service │ Purpose │ Privacy Policy │
├──────────┼───────────────────────────┼──────────────────────────────┤
│ Supabase │ Authentication & database │ https://supabase.com/privacy │
└──────────┴───────────────────────────┴──────────────────────────────┘
---
11. Offline Use
The app works offline. When there is no internet connection:
- Your data is stored locally on your device.
- Once connectivity is restored, local data is automatically synced with the server.
- No data is transmitted to third parties during this process.
---
12. Policy Changes
We may update this privacy policy from time to time. In case of significant changes:
- You will be notified via an in-app notice.
- A notification will be sent to your registered email address.
- Continued use of the app after changes are published constitutes acceptance of the updated policy.
---
13. Contact Us
For questions about this privacy policy:
📧 Email: shungite.dev@gmail.com
---
14. Effective Date
This Privacy Policy is effective as of June 19, 2026 and applies to all versions of the IronPulse app.
---
In short: Your data is used solely to provide you with the service. It is not sold, shared, or misused. Your workout data is your workout data — and it always will be.
THANKS