IronLift — Privacy Policy

Last updated: May 15, 2026

1. Introduction

IronLift ("the App") is a workout tracking application with an optional AI-assisted Calorie Counter feature. Your privacy is important to us. This Privacy Policy explains what data the App collects, how it is stored or transmitted, and your rights regarding that data.

2. Data Stored Locally on Your Device

The App stores the following data locally and does not transmit it to any server:

• Workout data: exercise names, sets, reps, weights, duration, and difficulty ratings.
• Body weight entries: date and weight value of weigh-ins you record.
• Program configurations: workout schedules and program structures you create.
• Calorie log: foods you log to the Calorie Counter and your daily totals.
• App preferences: settings such as date format, animation toggles, and display modes.
• Local trial state: the timestamp at which you claimed the 7-day free trial of the Calorie Counter, used to determine whether the trial has expired.

Local data is stored using the device's standard secure storage (AsyncStorage on Android). No user account system exists.

3. Data Transmitted to Third Parties

The following data leaves your device when you use specific features. We collect only what is needed to provide the feature, and we do not sell or share your data for advertising.

3.1 AI Meal Estimation (only when you use the Calorie Counter's scan feature)

When you submit a meal photograph for AI analysis:

• The photograph and optional text hint are transmitted through our Cloudflare Worker to Google Gemini for processing.
• Gemini returns an estimate of food items, portion sizes, and macronutrients.
• We do not retain the photograph on our servers after the response is returned.
• Gemini's data handling is governed by Google's API terms; refer to Google's privacy policy for details.

If you do not use the scan feature, no photographs are transmitted.

3.2 Food Database Search (only when you search the food database)

When you search for foods by name or barcode, your query is sent to Open Food Facts (a free, public food database). No personal information is attached to the request. See world.openfoodfacts.org for their terms.

3.3 Subscription Management

If you purchase a subscription to the Calorie Counter, your purchase is handled by Google Play Billing. Subscription status is mirrored to RevenueCat, our subscription management provider, using an anonymous device-scoped identifier. RevenueCat receives:

• An anonymous user identifier (a random string generated by RevenueCat).
• The purchase token and product identifier of your subscription.
• Country and platform metadata provided by Google Play.

RevenueCat does not receive your name, email, workout data, or photographs. Refer to RevenueCat's privacy policy at revenuecat.com/privacy for details.

3.4 Server Time (anti-tamper)

When you claim the 7-day free trial, the App requests the current time from our Cloudflare Worker to prevent device-clock manipulation from extending the trial. No personal information is transmitted with this request.

4. Data We Do Not Collect

• We do not collect your name, email address, phone number, or other contact information.
• We do not use third-party analytics SDKs.
• We do not use advertising SDKs.
• We do not track your location.
• We do not access your contacts, calendar, or other apps.

5. Permissions

• Camera and photo library access: only used when you choose to scan a meal photo via the Calorie Counter. Photos are only transmitted when you explicitly submit them for analysis.
• Notifications: used locally for rest-timer alerts. No remote push notifications are sent.

6. Data Sharing

We do not share your data with third parties beyond the service providers listed in Section 3, each of which performs a specific function necessary to operate the App.

7. Data Backup, Export & Deletion

• You can export your workout and weigh-in data manually through the App's import/export feature.
• Local data is deleted permanently when you uninstall the App or clear its storage.
• Subscription records held by Google Play and RevenueCat persist according to their respective policies. To request deletion of your RevenueCat record, contact us using the information in Section 10.

8. Children's Privacy

IronLift is not directed at children under 13 and does not knowingly collect personal information from children. The Calorie Counter and AI features should not be used by children without the supervision of a parent or guardian.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last Updated" date above and included in App updates.

10. Contact

If you have questions about this Privacy Policy or wish to make a data request, please reach out through the App's distribution platform (Google Play Store) listing.