Privacy policy

Scope

This policy covers the IronFit mobile app (iOS and Android) and this website, ironfitapp.com. IronFit is an app where coaches build training and nutrition plans for their trainees and follow their progress. "We" means Mohammad Abu Salh, who operates IronFit from Hebron, Palestine.

Questions about this policy go to support@ironfitapp.com, or through the contact page.

Data collected

What we collect depends on your role and on what you choose to use.

• Account: your email address, display name, profile photo, phone number if you add one, role (coach or trainee), language, and your device push-notification token and app version. You sign in with an email code, Google or Apple.
• Trainee profile: gender, height, weight and weight history, date of birth, training goal and preferred training times, plus what you log: workouts, exercise results, progress, streaks, check-ins and a training risk assessment.
• Coach profile: experience, specialization, bio, price, gym name, phone number, a location you set, whether you coach online, your plan and subscription status, and the plans, exercises and media you create.
• Messages and images: messages and pictures exchanged between a coach and a trainee inside the app, and exercise media.
• Payments: see the payments section below.
• Location: only if you allow it, for nearby-gym and training-partner features. You can turn it off in your device settings.
• Camera and photo library: only if you allow them, to take or choose a profile picture or a receipt image. Notifications are also optional.
• Website forms: what you type into the contact, walkthrough and deletion-request forms (email, phone number, message). They are delivered through Formspree.
• Technical and usage data: crash and performance reports (Sentry), and usage analytics (Microsoft Clarity in the app; Google Analytics and Microsoft Clarity on the website, only after you accept). In the app, Clarity receives your account ID, the domain part of your email address (not the full address) and your role.

Purposes of processing

We use data to run the accounts and the coach-trainee relationship, deliver plans and progress tracking, send the notifications you enable, record payment requests, answer your messages, keep the service secure and stable, and understand how it is used so we can improve it.

Where the law asks for a legal basis, we rely on delivering the service you asked for, your consent (for analytics and for optional device permissions) and our legitimate interest in keeping the service secure and working. You can withdraw consent at any time.

Data sharing

We do not sell your personal data. We share data only with the services that run IronFit, each receiving what its job needs:

• Google Firebase: sign-in, the database, file storage, push notifications and app verification.
• Google Maps: the map and location features.
• Apple and Google: sign-in, and the store subscriptions you buy.
• Sentry: crash and error reports.
• Microsoft Clarity and Google Analytics: usage analytics, as described above.
• Formspree: delivery of the website forms.
• Cloudflare: website hosting and the forwarding of mail sent to our support address.

Some of these providers process data outside your country. Your coach and your trainees see data as described in the next section, and we may disclose data when the law requires it.

What a coach sees about a client

A coach sees the data of their own trainees: profile details, body measurements, goal, plans, logged workouts and progress, and the messages and payment requests between them. Access starts when the trainee joins that coach, for example through an invitation, and ends when the relationship ends or either account is deleted.

A trainee sees only their own data and their coach's profile, never other trainees. A coach cannot see another coach's roster. If you switch on training-partner availability, other trainees can find you and send you requests, and some of your profile details become visible to them.

Payments between trainee and coach

If your coach turns on in-app payment, we store the payout methods the coach adds (such as an iBURAQ alias, a wallet number or an IBAN). Only the coach sees them, and their trainees when they open a payment request.

We also store the details of each payment request (amount, currency, method used and status), and the receipt image if you attach one. Only you and your coach can see the receipt image.

We do not process any payment card, and we never receive or hold the money.

When you delete your account, we delete the payout methods and your receipt images. We keep payment records, because they are part of the other party's financial record.

Retention

We keep your data while your account is active. When you delete your account, an automatic cleanup removes your payout methods, your receipt images and your workout check-ins, and queues your private messages for erasure. Payment requests and sales records stay, because they are part of the other party's financial record.

Crash and analytics data are kept by those providers on their own schedules. Backups may take a short additional time to expire.

User rights

You can ask to access, correct or delete your data, and to object to or restrict how it is used. You can edit most profile data in the app, and delete your account from the app settings.

You can also send a request from the account deletion page or write to support@ironfitapp.com. We confirm receipt and write to you after we verify that the account is yours. Withdraw analytics consent with "Analytics settings" in the site footer, and withdraw device permissions in your device settings.

Data security

Data is stored with Google Firebase and sent over encrypted connections. Access rules limit each account to the data it is allowed to see, sign-in goes through Firebase Authentication, and the app uses Firebase App Check. No system is completely secure, so we cannot promise absolute security. Choose a strong sign-in method and tell us if you suspect misuse of your account.

Children

IronFit is for people aged 16 and over. If you believe someone under 16 has created an account, write to us and we will delete it.

Policy updates

We update this page when our practice changes and change the date at the top. If a change materially affects you, we tell you in the app or on this site.

Enquiry channel

Privacy questions and data requests go to support@ironfitapp.com.