Privacy Policy

Last updated: October 30, 2026

This policy covers the Iron Streak app and website (ironstreakapp.com). "Iron Streak", "we" and "us" mean the developer of Iron Streak. Using Iron Streak is also covered by our Terms of Service.

1. Information we collect

Account information

• Your email address, and your name if you enter it or your sign-in provider (Apple or Google) shares it.
• Your birthday, which is used to work out your age for calorie targets and to celebrate your birthday in the app. You can change it in Profile → About you.
• A profile photo, if you choose to add one.
• In the iPhone app (iOS 26 and later), if you share your age range when Apple's sheet asks, whether it says you're under 18 or 18 and over, and when. We don't receive your birthday or exact age from Apple. Like the birthday you give, it decides whether the protections for people under 18 apply to your account. You can change what Apple shares in your iPhone's Settings.
• If you sign in with Apple or Google, an identifier for your account with them. With Sign in with Apple you can hide your email, in which case we receive a private relay address instead.
• If you start without an account (a guest account, in the iPhone app), we create an account with a random identifier and no email, name or password, and store your app data with it like any account's. When you save it, the email, or the Apple or Google identifier, and the birthday you give are added to that same account. A guest account can't be signed back in to, so signing out of it deletes it and its data. Guest accounts nobody uses for 30 days may be deleted.

Fitness, nutrition and body information you enter

• Survey answers: your goal, experience, training days, session length, equipment, exercise preferences, areas you want to go easy on (such as injuries), biological sex, height and weight.
• Your workout plan and workout logs, including exercises, weights, reps and reps in reserve.
• Exercises you add yourself (from a search, or brought in with an import): each one's name, the muscle it works, its equipment and how it's logged. They're stored with your account and are never shared with other users, even in a plan you share in Community.
• Your food diary, calorie and macro targets, bodyweight entries, body measurements and weight goal.
• Workout history you choose to import from a Strong or Hevy export file.
• Your settings, such as weight units, theme color, dark mode, haptics and reminder preferences.

Feed and messages (optional)

• If you set up a Feed profile: the name and @username you choose, your profile photo and your workout streak and best streak.
• For your Feed profile, your best lift for each exercise (weight, reps and date), the up to three you pick as Top PRs, and the weekly challenge medals you've earned.
• Your friends, friend requests and the people you've blocked.
• Whether your account is public, the accounts you follow and the people who follow you, with when each follow started.
• Your invite link's code, who joined with it and when, and what it did (friends right away, or a friend request). If you're invited by someone and your account is new: a referral record of who invited you, when, how many workouts you've finished since (counted from your saved workout log), and the App Store offer code each of you was given once you'd finished 2. Offer codes are redeemed with Apple, which doesn't tell us who redeemed them.
• What you post: words (a caption, with any #hashtags and @mentions in it), photos and videos as you edited them, subtitles you put on a video, the friends you tag, a workout you add (its name, date, lifts and totals, with any title and description you write), and your comments, likes and reposts.
• Which friends each of your posts tags or @mentions, and which posts tag or mention you, with when, so each person can see it in their Activity and be told once.
• Posts the Iron Streak bot makes for you after a workout (the workout itself, with each lift and the weight and reps of each set, your PRs, streak milestones, finished weekly challenges and how much you lifted), unless you turn them off in Feed options.
• Your sharing choices in Feed options → Privacy: Show my workouts to everyone, Show my streak on Top streaks and Compete with friends.
• While Compete with friends is on (it is unless you turn it off): for each of your last 26 weeks, how many workouts you finished and sets you did, how many workouts your plan had, and which days you trained and had a workout planned, for This week with friends, buddy streaks and nudges; and, with each of your best lifts on your Feed profile, an estimated max worked out from your logged sets, for the rankings among friends on each lift. Turning it off deletes the weeks.
• Nudges you give and get (who nudged whom, the day and when), kept 30 days, and a record of which friends were told about your PRs or medals, kept 2 days, to limit those notifications.
• Your Year in Review, if you post it to the Feed (in December or early January): that year's workouts finished, weight lifted, PRs, best streak, challenge medals and the lift you gained the most on.
• Direct messages you send and receive, including photos, videos and shared posts, and whether a message has been read.
• Reports you make about a post, comment, message, account or community plan, with a copy of what you reported.
• If you turn on Let people who have my email or number find me (Feed options → Privacy; it's off unless you do, and not for people under 18): a code (a SHA-256 hash) made from your account's email address, and, if you add your phone number, a code made from it on your phone, so the number itself is never sent to us. Nobody can read these codes back, and turning the switch off deletes them. Phone numbers aren't checked by text message, so a number that's on more than one account matches nobody.
• When you use Find friends from your contacts (iPhone and Android apps, only after you allow access to your contacts): the app reads your contacts' names, emails and phone numbers on your phone and makes a code from each email and number there. It sends us only the first 4 characters of each code, which can't identify anyone, gets back the codes that start that way of people who can be found, matches them on your phone, and then asks for just the profiles that matched. We don't keep any of it, and names never leave your phone. People you find are shown with the name you saved them under, on your phone only.
• Labels we give some accounts, shown by their name: a verified check mark, and Founder for Iron Streak's founder. Iron Streak's founder can also make an account a moderator, which lets it review reports; that isn't shown to anyone else.
• If you turn on Feed notifications in the iPhone app: a push token Apple gives your device to deliver them, whether it's a test or App Store build, and which kinds of notification you want. In the Android app: the same, with a token from Google's Firebase Cloud Messaging.

Community plans (optional)

• Plans you share: the title, description and price you set, who it's best for if you pick that, the plan itself (each day's lifts, sets, reps and rest, for each of its weeks), an outline worked out from it (days a week, how many weeks, each day's name, how many lifts, the muscles they work, about how long a session takes and the equipment it needs), and whether it's listed.
• Which community plans you've started, to count how many people use each one and which are trending.
• Your ratings of community plans (1 to 5 stars), and reviews you write of them (your words, and when you wrote or edited them).
• Which published community plans you open, once a day for each, so their creators can see how many views each plan gets. Creators see the counts, never who.
• If you add a creator bio: the bio and the Instagram and TikTok usernames you add.
• For Fits you, the app sends your training days a week, session length, equipment list and goal with the request for that list. They're used to put the closest plans first and aren't stored with it.
• If you open a plan creator's own link (one ending in ?ref=creator), your device remembers it for 7 days, so buying their plan from it is recorded as a sale through their link.
• If you ask for a refund for a plan you bought: the reason you pick, any note you add, when you asked, and the answer.
• If you sell plans: the ID of the Stripe account you connect, its country, and whether Stripe lets it take payments and pay out. Stripe collects the details it needs to verify you and pay you (such as your name, address, date of birth, ID and bank account) and keeps them itself; we don't receive them.
• If you buy a plan: a record of the purchase (the plan, its price, Iron Streak's fee, the date, Stripe's IDs for the payment, whether it came through the creator's own link, and whether it was refunded). Stripe handles the payment, so we never see your card details.

Photo and video editing, the camera and drafts

• Edits you make to a photo or video (cropping, light and color, blur, text, drawings, stickers, trims, speed, music and voiceovers) are made on your device, and become part of the photo or video only when you post it. Iron Streak's music is its own, made on your device, so nothing is looked up or sent to play it.
• A stats card you put on a photo or video shows numbers from your Iron Streak data (a workout, its PRs and totals, your streak, a day's calories and macros). They're filled in on your device, and become part of the post only if you add the card and post it.
• The camera: when you take a photo or film a video for a post in the app, the camera (and for a video, the microphone) is on only while Iron Streak's camera screen is open. What you take goes to the editor, and is uploaded only if you post it.
• Voiceovers: the microphone records only while you record a voiceover, and the recording becomes part of the video's sound when you post it.
• Automatic subtitles (iPhone app): when you tap Make automatically, Apple's speech recognition listens to the video's sound and your voiceover on your iPhone itself. Iron Streak requires recognition on the device, so the sound isn't sent to Apple, to us or to anyone else; if your iPhone can't recognize your language on the device, they aren't made. The subtitles you keep (their words and timing) are posted with the video. You can also type subtitles yourself.
• Drafts: a post you save as a draft (its words, photos and videos, edits and all) is kept only on that device, in the app's own storage. It's never uploaded, and signing out removes it.

AI Trainer usage

• A count of how many AI Trainer messages, form checks, meal photos and meal descriptions you've used each day (and the free ones a free account has used), and which weeks you've had the AI Trainer's weekly check-in, so the limits can be applied. To keep costs in check, we also keep a daily total of how much AI each of these features used for your account (the number of requests and their size in tokens, and which AI model answered), and our server's logs note the same with a shortened account ID.

Subscriptions

• Iron Streak Pro is a subscription (or, where it's offered, a one-time Lifetime purchase) bought in the iPhone app. Apple handles the purchase, the free trial and billing: we never see your payment details. The purchase carries your Iron Streak account's ID (a random identifier, not your name or email) so it can be matched to your account.
• So that Pro also works on the website and for the AI features, we store your subscription status with your account: the plan, Apple's transaction IDs for it, when the current period or free trial ends, whether it will renew, and whether it was refunded. The app sends us Apple's signed record of your subscription, and Apple tells our server when it renews, ends or is refunded.
• In the Android app, Pro is bought through Google Play, which handles the purchase, the free trial and billing the same way. The app sends us Google Play's purchase token, our server asks Google Play about it, and Google Play tells our server when it renews, ends or is refunded; we store the same subscription status, with Google Play's order ID and purchase token.

Technical information

• To stop abuse, we count how many food searches, profile photo checks and contact lookups each account makes each day, and keep those counts for about a week. For the AI features' daily limits we keep the time zone your account first used them in (it changes when you travel, at most once a day), and a total of what the AI features cost Iron Streak each day, for all accounts together.
• When the app or website contacts our servers or service providers, they receive standard request information such as your IP address, device or browser type, and the time of the request. Our hosting providers may keep this in logs for security and troubleshooting.
• The app stores your sign-in session and theme color on your device so you stay signed in, and a copy of your Iron Streak data so it opens and keeps logging without a connection. It also keeps the products you've scanned, and the amount you last logged of each, so a barcode you scan again comes up at once, even offline. Signing out removes these.

Health Connect (Android app, optional)

• Only if you turn on Profile → Health Connect and allow it in Health Connect's permission screen.
• Iron Streak then saves your weigh-ins (as weight) and your finished workouts (as strength training sessions, with the active calories it estimates they burned) to Health Connect on your phone, and reads weight entries other apps saved there (for example a smart scale) for days that don't have a weigh-in, the same way as Apple Health below.
• Iron Streak reads no other Health Connect data. It's used only to provide these features: never for advertising or marketing, never sold, and never shared with third parties (except as part of your bodyweight trend when you use the AI Trainer). Turn it off in the app any time, and change or remove Iron Streak's access in Health Connect.

Apple Health (iPhone app, optional)

• Only if you turn on Profile → Apple Health and allow it in the Health permission screen.
• Iron Streak then saves your weigh-ins (as body weight) and your finished workouts (as strength training, timed from when you logged them, with an estimate of the active calories burned) to Apple Health on your iPhone. If you also turn on Food there, it saves the calories, protein, carbohydrates and fat of each food you log (with the food's name, at the time you logged it), and keeps them up to date when you change or delete a food.
• It reads body weight entries other apps saved in Apple Health (for example a smart scale) from the last 90 days, and adds them to your weight log for days that don't have a weigh-in. Weigh-ins brought in this way are stored with your account like ones you type, so they sync to your other devices and appear in your weight trend.
• It also reads body fat percentages other apps saved (from the last 90 days) to show on the Weight page. These stay on your iPhone: they aren't stored with your account or sent to us or anyone else.
• When you tap Read from Apple Health while setting your calorie target in Nutrition (and allow it), it reads your latest height, weight and biological sex from Apple Health once, to fill in that form. What you then save becomes part of your nutrition profile and is stored with your account, like details you type.
• Iron Streak reads no other Health data (except on Apple Watch, below). Health data is used only to provide these features: never for advertising or marketing, never sold, and never shared with third parties (including our AI provider, except as part of your bodyweight trend when you use the AI Trainer, as described below). We don't store Health data in iCloud.

Apple Watch (optional)

• The Apple Watch app gets today's workout and your streak from the iPhone app over Apple's own watch connection, and sends the sets you log on the watch back to the iPhone app, which logs them to your account like sets you log there.
• If you allow it in the Health permission screen on your watch, a workout you do with the watch reads your heart rate and active calories while it runs, to show them on the watch, and is saved to Apple Health as a strength training workout. Your heart rate stays on your watch and in Apple Health: it isn't sent to the iPhone app or to us. For a day the watch saved a workout, the iPhone app doesn't save a second one.

Usage data and error reports. To fix bugs and improve the app, Iron Streak records which parts of the app get used (for example finishing the survey, logging a set, finishing a workout or opening Pro) and errors the app hits, with the app version and whether it's the iPhone app or the website. These records are linked to your account, kept in Iron Streak's own database (not a third-party analytics service), and used only by Iron Streak. You can turn this off any time in Profile → Your data → Share usage data.

Ad measurement (iPhone app). If you installed Iron Streak by tapping an ad (for example on TikTok), the app tells Apple's SKAdNetwork how far you've got, as a step number (such as made a plan, finished a workout or started a free trial). Apple passes that number on to the ad network later, without your name, account, device or anything you logged, so the ad can be measured without tracking you. For any other install, nothing is sent. Turning off Share usage data stops it too.

We don't collect your precise location or advertising identifiers, and your contacts are never uploaded (see Find friends from your contacts, above). There are no ads, no third-party analytics and no tracking across other companies' apps or websites in Iron Streak.

2. How we use your information

• To create your account and keep you signed in.
• To build and adjust your workout plan, track your progress and streak, and calculate calorie and macro targets.
• To sync your data across your devices.
• To answer your AI Trainer questions, review the form in lifting videos you choose to send, and estimate the nutrition in meal photos you choose to send.
• To show your Feed posts to your friends (and, with a public account, to anyone signed in, and in your followers' Feeds), deliver your messages, and let people find you by your name or username (unless you turn that off).
• To keep the Feed safe: checking posts, comments, messages, profiles, plans, reviews and creator bios for words the community rules don't allow, and reviewing what people report.
• To review reports and remove content or accounts that break the Feed's community rules.
• To show reminders you turn on. Reminders are scheduled on your device.
• To send Feed notifications you turn on, about messages, friend requests, new followers, comments, likes, reposts, posts that tag or mention you, friends' PRs and medals, nudges from friends, and sales of your plans and refund requests for them; and to tell you when a refund you asked for is answered, or when Iron Streak's founder verifies your account.
• To show you and your friends who compete how your weeks compare (This week with friends, buddy streaks, nudges and rankings on each lift), and, only if you turn it on, to show your workouts or your streak to everyone on Iron Streak.
• To list the community plans people share with their ratings and reviews (in the orders you pick, such as Fits you and Trending), let you start, buy, try, rate and review them, show creators their plans' views, starts and sales, pay their creators through Stripe, and pass refund requests to creators and refund through Stripe.
• To check whether your account has an active subscription.
• To find and fix bugs, and to see which parts of the app help people keep training, from the usage data and error reports described above (unless you turn them off).
• To reply when you contact us, and to keep Iron Streak secure and working.

We don't sell your information, and we never use your fitness, nutrition or body information for advertising or marketing.

3. AI Trainer, form checks and meal photos

The first time you use the AI Trainer, a form check, Photo log or Describe your meal, the app tells you what it sends and to whom, and asks first. You can take that back any time in Profile → Your data → Share with the AI; the app then asks again before sending anything.

When you send a message to the AI Trainer, the app sends your message and your recent messages in that conversation, along with context from your account so the answer fits you. That context covers:

• your schedule and logged workouts (about a week back and two weeks ahead) and your weekly plan;
• your goal, experience, age, sex (when you've given it, so calorie advice stays above a safe minimum), equipment and areas to go easy on;
• your weight units and nutrition targets, your recent food totals, and your bodyweight trend and goal.

It doesn't include your name or email address. This information goes through our server to Anthropic, which writes the reply.

Once a week, from Monday morning to Wednesday, the AI Trainer offers a weekly check-in. When you open it, the app sends the same context as for a message, plus a summary of last week worked out on your device (workouts done and missed, sets and PRs, how many days you logged food and their average calories and protein, and your weigh-ins), and Anthropic writes the check-in. We keep a record of which weeks you've had one (the week and when), so there's one a week.

When you use Photo log, the photo you take or pick is resized on your device and sent through our server to Anthropic to estimate what's in it. If you fix an estimate with a note, the same photo is sent again with your note and the first estimate. When a barcode isn't found and you snap the package's nutrition label, that photo is sent the same way for the label to be read. When you use Describe your meal, the words you type are sent the same way. Nothing is logged or saved until you review and confirm it.

When you ask for a form check, the video you pick or record stays on your device: you pick one rep from it, the app takes 16 still frames from that part, resizes them, and sends only those frames, the lift's name, any note you add and your recent sets of that lift through our server to Anthropic, which describes your form. The video itself and its sound are never uploaded. Filming in the app records the picture only, without sound.

We don't store your AI Trainer conversations, meal or label photos, or form-check frames on our servers. Today's conversation (with small thumbnails of any form-check frames) is kept on your device so it's still there when you reopen the app, and a new one starts the next day; signing out or deleting your account removes it. Your form checks (the lift, the frames and the review) are also kept on your device only, as your form check history, so you can look back at them and compare them; they're never uploaded, and you can delete each one, or all of them with Reset all data or by deleting your account. Anthropic processes this content only to provide the service to us, and under its commercial terms it doesn't use content sent through its API to train its models. See Anthropic's privacy policy for details.

A new profile photo is made smaller on your device and kept privately (only you can see it) while it's checked: our server sends it to Anthropic, which says whether it fits the community rules. One that does goes on your profile; one it isn't sure of waits, still private, for Iron Streak's founder or a moderator to approve or reject it, and a rejected one is deleted. On an iPhone whose Sensitive Content Warning or Communication Safety is on, Apple's own check on your iPhone looks at it first, and nothing is sent for a photo it flags.

AI answers can be wrong, and a form check from a few still frames can miss things or misjudge them. It isn't medical advice. Nothing the AI Trainer suggests changes your data until you approve it.

4. Who we share it with

We share information only with the service providers that run Iron Streak for us, and only what they need:

• Supabase: sign-in, database and file storage (your account, your app data, your profile photo, your Feed posts, photos, videos and messages, and progress photos you choose to back up).
• Vercel: hosting for the website and our server functions. AI Trainer messages, form-check frames and meal and label photos pass through it on their way to Anthropic.
• Anthropic: the AI behind the AI Trainer (including form checks), Photo log, Describe your meal, reading food labels and checking new profile photos, as described above.
• Cloudflare: on the website, when it's turned on, Cloudflare Turnstile checks that whoever is signing up, signing in or resetting a password isn't a bot. It receives standard request information and signals from your browser, under Cloudflare's privacy policy. It isn't used in the apps.
• Apple and Google: only if you choose to sign in with them. Apple also handles Iron Streak subscriptions bought in the iPhone app, and tells us when one renews, ends or is refunded. If you turn on Feed notifications, Apple's push notification service delivers them: it receives your device's push token and the notification (the sender's name and a short preview, such as the start of a message or a caption). Automatic subtitles use Apple's speech recognition on your iPhone only, so nothing is sent to Apple for them. In the Android app, Google Play handles Pro the same way, and Google's Firebase Cloud Messaging delivers notifications (it receives the device's push token and the notification).
• Stripe: payments for paid community plans. When you buy one, you pay on Stripe's checkout page, which receives your payment details and email address. When you sell, Stripe verifies who you are and pays you out. Stripe handles this information under its own privacy policy.
• Open Food Facts: when you scan a barcode or search for a food, the app looks it up in this open product database. Only the barcode number or the words you searched for (and standard request information) are sent, not your account details.
• FatSecret: when you search for a food or scan a barcode, our server also looks it up in this food database (Powered by fatsecret Platform API), and it asks FatSecret again for the details of foods you logged from it, by FatSecret's ID for each food. Only the words you searched for, the barcode number or those IDs are sent, from our server, not your account details or your IP address.
• USDA FoodData Central: when you search for a food or scan a barcode, our server also looks it up in this U.S. government nutrition database. Only the words you searched for or the barcode number are sent, from our server, not your account details or your IP address.
• Google Fonts: the app loads its fonts from this service, which receives standard request information such as your IP address.

Other Iron Streak users. If you use the Feed, your friends see your Feed profile (name, @username, profile photo and streak, your best lifts and Top PRs, and the medals you've earned), your posts, photos, videos and reposts (with their captions, subtitles, the friends tagged in them and any workout you added), and the bot's posts for you. Friends you tag or @mention in a post see that you did, in their Activity and in a notification if they've turned them on; only friends can be tagged or told about a mention. Anyone who sees a post can see its comments and how many likes and reposts it has, and the people behind them. When a friend reposts or sends one of your posts, the people they share it with can see that post too. Someone with a pending friend request with you can see your Feed profile. Anyone signed in can find you by your name or username, and Iron Streak may suggest you to friends of your friends and to people who started a plan you shared, showing your name, username, photo and streak; Feed options → Let people find me turns this off (friends can always find you, and blocking works either way). People under 18 aren't shown in searches or suggestions, except to friends of their friends. A direct message is seen only by you and the person you send it to. Anyone signed in with a Feed profile can send you a message request, friend or not: one message, in words only, until you reply. People under 18 can message only their friends. Blocking stops both. People you have messages with can see your name, username, photo and streak. If something is reported, Iron Streak's founder and the moderators the founder chooses can see it, including a reported message, to review it. A post, comment, account or community plan that three people report is hidden until it's reviewed: an account shows as “Member”, without its name, username or photo, and a plan leaves Community lifts. People who have your email or number in their contacts can find you only if you turn that on, as above. Friends can save photos and videos you post; saved copies carry an Iron Streak label.

Competing with friends. While Compete with friends is on, friends who have it on too see how many workouts you've finished and sets you've done this week against your plan, whether you've trained today, your buddy streak with them, and where your best set on a lift ranks among theirs; and they can nudge you after 5 PM on a day you have a workout planned (once a day each, which sends you a notification if you have them on). When your bot posts a PR or a medal, your friends can get a notification about it. Turn Compete with friends off and you're left out of all of it.

Everyone on Iron Streak. If you turn on Show my workouts to everyone, the bot's workout recaps from today (the workout's name, how many lifts and sets, how long it took, its PRs and any medal) are shown to everyone signed in to Iron Streak, with your name, username and photo. If you turn on Show my streak on Top streaks, your streak is shown the same way when it's among the longest. Both are off unless you turn them on, turning one off takes you out at once, and people under 18 are never shown, whatever they choose. Each weekly challenge shows how many people have earned its medal, as a number, without names.

Public accounts and following. Your account is private unless you turn on Public account on your Feed profile (it isn't available to people under 18, and an account that's suspended counts as private). While it's on, anyone signed in to Iron Streak who hasn't blocked you can see your Feed profile and your own posts, as friends do, with their likes, comments and reposts, and can like, comment on and repost them; your reposts of other people's posts still go only to your friends. They can also follow you, with no friend request: your posts then show in their Feed. Everyone can see how many followers you have; only you see who follows you, and people under 18 who follow you aren't listed by name unless you're friends. When you follow someone, they can see that you follow them, in their Activity and in a notification if they've turned them on, unless you're under 18. Every account follows Iron Streak's own account (@ironstreak) to start with; you can unfollow it. Turning Public account off makes your posts friends-only again. You can unfollow anyone, remove a follower, and blocking someone ends any follow between you.

Workout recaps. The bot's recap of each workout shows the workout's lifts and the weight and reps of each set to everyone who can see the post. They can copy that workout into their own plan; nothing of theirs is shared with you when they do.

If you have Iron Streak Pro and a Feed profile, a Pro badge shows on your profile to anyone who can see it. Nothing else about your subscription is shown.

Posts Iron Streak's founder makes in Founder mode are shown to everyone signed in to Iron Streak. If you like or comment on one, everyone who can see the post can see your comment, with your name and photo.

A community plan you share is shown to everyone signed in to Iron Streak (unless one of you has blocked the other), with your Feed name, username and photo, its outline and how many people have used it. Its lifts, sets and reps are shown to people who start it, or who buy it if it costs money. Buying a paid plan is a payment to its creator's own Stripe account, so the creator can see that payment in Stripe, including the name and email address given at checkout. In the app, creators see how many people viewed, started and bought each of their plans (and how many purchases came through their own link) and what they earned, not who. A paid plan's first training day is shown in full to anyone who can see the plan. When you ask for a refund, the plan's creator sees your request (the reason, your note, the price and the dates), not your name. Everyone signed in sees each plan's average rating and how many ratings it has, not who gave them. A review you write is shown, with your stars and your Feed name, username and photo, to everyone who can see the plan (unless one of you has blocked the other); one by someone under 18 is shown only to their friends. A creator bio and the Instagram or TikTok usernames you add are shown with your plans and on your Feed profile to everyone who can see them, never for someone under 18. Anyone signed in who opens your profile link (ironstreakapp.com/u/your-username) can see your name, photo and streak, and send you a friend request. Anyone else who opens that link sees a web page with your name and profile photo, not your streak or anything else, and only while Feed options → Let people find me is on, you're 18 or over and your account isn't suspended; otherwise the page shows just your username. These pages are kept out of search engines. A link to a community plan you shared (ironstreakapp.com/p/…) shows anyone who opens it the plan's title, description, price and your username. Your invite link (your profile link with your invite code, or its QR code) makes whoever joins with it your friend right away, for the first 10 people within 30 days of the link; after that, or once you make a new link, it sends you a friend request instead. With anyone under 18, it's always a friend request to accept. People you invited who are new to Iron Streak see that you invited them, and you see their name, photo and how many of their first 2 workouts they've finished.

We may also disclose information if the law requires it, or to protect the rights, safety and security of our users or others. If Iron Streak is ever transferred to a new owner, your information would transfer with it and remain covered by this policy.

5. Photos

Your profile photo is stored at a web address that isn't published or listed anywhere, but anyone who has that exact address can view the photo. Only use a profile photo you're comfortable with others seeing. A new one is kept privately until it's been checked, as described in section 3.

Photos and videos you post to the Feed or send in a message are stored privately. The app shows them through links that expire within an hour, and only to the people allowed to see them, as described above.

Progress photos you add on the Weight page stay on your device unless you turn on Back up to your account there. With backup on, a copy of each is stored privately with your account, where only you can see it (not your friends, not anyone else), so a new phone signed in to your account gets them back. Deleting a photo deletes its copy; turning backup off deletes all the copies; resetting your data or deleting your account deletes them too, and the photos on that device. Each account can keep up to 60 backed-up photos.

6. How long we keep it

We keep your account and app data until you delete it or delete your account. When you delete your account, we delete your login, profile, profile photo (and any new one waiting for its check), backed-up progress photos, the codes for being found from contacts, the age range Apple shared, app data and its backups, AI Trainer message counts and AI usage totals, and subscription status, and your Feed profile, friends, follows, posts, photos, videos, comments, likes, reposts, messages (from both sides of each conversation) and notification tokens, and your community plans, your ratings, reviews, plan views, creator bio and refund requests, and the link to your Stripe account (the Stripe account itself is yours, with Stripe). Signing out removes that device's notification token. A plan someone bought can be hidden but not deleted, so its buyers keep it, until you delete your account. Records of purchases are kept for tax and accounting, without the account once it's deleted. Deleting a post or unsending a message removes it for everyone. Reports may be kept as long as needed to keep the Feed safe. Deleting your account doesn't cancel your subscription: Apple keeps billing it until you cancel it in your iPhone's Settings. Our service providers may keep request logs and backups for a limited time under their own policies.

Backups. Your app data (your plan, workouts, food log, weights, measurements and settings) is copied to a backup each day it changes, so that if it's lost or saved over, for example by another device, we can put it back as it was on any of the last 30 days. Only we can see the backups, and we use them only to put your data back: when you ask us to, or to fix a problem on our side. We delete the ones we no longer need to cover those 30 days, and deleting your account deletes them all. Backed-up progress photos (section 5) are kept separately, not in these backups.

7. Your choices and rights

• See and change your data: almost everything you've entered can be viewed and edited in the app.
• Delete your account: Profile → Delete account permanently deletes your account and all of its data. This can't be undone. You can also email us to ask.
• The Feed: delete your posts and comments, unsend messages, turn off the bot's posts in Feed options, and report or block anyone from the ⋯ menu on their post, comment or message. Removing a friend or blocking someone stops you seeing each other's posts. In Feed options → Privacy, choose whether everyone on Iron Streak sees your workouts or your streak, and turn Compete with friends off. Turn Public account on or off on your Feed profile or in Feed options, unfollow anyone, and remove a follower from your followers list.
• Community plans: edit, hide or remove plans you share from the Plan tab, change or remove your creator bio there (Your creator profile), edit or delete your reviews from their ⋯ menu, and report a plan or a review from its ⋯ menu. Manage or disconnect your Stripe account in Stripe.
• Contacts: turn Let people who have my email or number find me on or off, or take your number off, in Feed options → Privacy. Iron Streak reads your contacts only when you tap Find friends from your contacts; remove its access to them in your phone's Settings.
• Get a copy of your data: Profile → Your data exports your workouts, weigh-ins and food log as CSV files.
• Apple Health: turn it off in Profile → Apple Health, and change or remove Iron Streak's access, or delete what it saved, in the Health app. Data already saved to Health stays there until you delete it in Health.
• Notifications, camera and microphone: turn reminders off in Profile → Reminders, turn each kind of Feed notification on or off in Feed options, and manage notification, camera, microphone and speech recognition access in the iPhone Settings app. The rest timer may ask to send a notification when rest is over while you're out of the app.
• Other requests: to make another privacy request, email us. Depending on where you live (for example the EU, the UK or California), you may have the right to access, correct, delete or move your data, or to object to or limit how it's used. We'll respond as the law requires.

8. Security

Your data travels over encrypted connections (HTTPS). Our database only lets each account read and change its own data, and our secret keys stay on our server, never in the app. No system is perfectly secure, but we work to protect your information.

9. Children

Iron Streak isn't meant for children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us information, contact us and we'll delete it.

10. Where your data is processed

Our service providers may process and store information in the United States and other countries, whose data protection laws may differ from those where you live.

11. Not medical advice

Iron Streak is for general fitness and information only and isn't medical advice. Check with a healthcare professional before starting a new exercise or nutrition program.

12. Changes to this policy

We may update this policy from time to time. When we do, we'll change the date at the top, and for significant changes we'll let you know in the app or on this page.

13. Contact us

Questions or requests about your privacy? Email support@ironstreakapp.com.