Privacy Policy

1. Overview

IronFuel - Fitness & Nutrition ("App", "we", "us", "our") is developed and operated by Brandon Evans (Bundle ID: com.bevans1017.ironfuel). This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

By using IronFuel you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

2. Data We Collect

Profile & Onboarding Data

• Name, age, gender
• Height, weight, body fat percentage (optional)
• Fitness goal, activity level, training experience
• Dietary restrictions and protein preferences
• Meals-per-day preference

Food & Nutrition Logs

• Meals logged, food items, serving sizes
• Macro and calorie data (protein, carbs, fat, calories)
• Daily water intake

Workout & Activity Data

• Workout plans and exercise logs
• Sets, reps, and weights recorded per session
• Daily step counts and step goal settings

Progress & Measurement Data

• Body measurements logged over time
• Progress records and trends

Account & Authentication Data

• If you use Sign in with Apple: a unique Apple user identifier and, if you choose to share it, your name and email address. We receive only what Apple provides — we never access your Apple ID credentials.
• If you use the App as a guest: an anonymous user identifier generated by Supabase. No personal account information is collected.

Usage & Technical Data

• App feature usage (e.g. AI generation counts for rate limiting)
• Subscription status (Pro / Free tier) via RevenueCat

3. How We Use Your Data

We use the data we collect solely to provide and improve IronFuel:

• Provide the Service: Calculate your TDEE and macro targets, generate personalised meal and workout plans, and power your daily tracking.
• Sync across devices: Store your data in the cloud so it is available when you reinstall the App or switch devices (authenticated users only).
• Manage subscriptions: Verify Pro status and enforce usage limits for AI-generated features.
• Improve the App: Understand aggregate usage patterns to prioritise features and fix bugs. We do not use your personal data for advertising or behavioural tracking.

We do not use your data to train AI models. Prompts sent to Claude AI are processed by Anthropic under their usage policies and are not stored by IronFuel beyond the duration of a session.

4. Third-Party Services

IronFuel relies on the following third-party services. Each has its own privacy policy governing how they handle data:

• Supabase — Cloud database and authentication. Stores your profile, food logs, workouts, measurements, and sync data. (Privacy Policy)
• Apple (Sign in with Apple / App Store) — Authentication and in-app purchase processing. Apple may collect data per its own privacy policy. (Privacy Policy)
• RevenueCat — Subscription and in-app purchase management. Receives your Apple user identifier and purchase receipt data to verify Pro status. (Privacy Policy)
• Anthropic (Claude AI) — Powers AI meal plan, recipe, and workout generation. Your fitness profile and goals are included in prompts to generate personalised content. (Privacy Policy)
• FatSecret — Food and nutrition database used for food search and macro data. Search queries may be sent to their API. (Privacy Policy)

We do not share your personal data with any third party beyond what is necessary to operate the services listed above.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service.

• Active accounts: All profile, nutrition, workout, and measurement data is retained indefinitely while your account remains active so your history is always available.
• Guest accounts: Data is stored locally on your device. Uninstalling the App will delete all local guest data permanently.
• Account deletion: Upon a verified deletion request, all personal data is removed from our Supabase database within 30 days. Backups may retain data for up to 90 days before being purged.

6. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate data at any time through the Profile screen in the App.
• Deletion: Request permanent deletion of your account and all associated data (see Section 7 below).
• Portability: Request an export of your data in a commonly used format.
• Objection: Object to any processing of your personal data that you did not consent to.

To exercise any of these rights, contact us at bevans1017@gmail.com. We will respond within 30 days.

7. Account & Data Deletion

You may delete your account and all associated data at any time using either of the following methods:

• In-App: Go to Profile → Delete Account and follow the confirmation steps. Deletion is processed immediately.
• By email: Send a deletion request to bevans1017@gmail.com from the email address associated with your account.

8. Children's Privacy (COPPA)

IronFuel is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13.

If you are a parent or guardian and believe your child under 13 has provided us with personal data, please contact us at bevans1017@gmail.com and we will delete that information promptly.

9. EU / UK Users — GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, the following applies under the General Data Protection Regulation (GDPR) and UK GDPR:

Legal basis for processing:

• Contract performance: Processing your profile and tracking data is necessary to deliver the Service you have requested.
• Consent: For optional data such as body fat percentage, you provide this voluntarily.
• Legitimate interests: Aggregate, anonymised usage analytics to improve the App.

Your GDPR rights include:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise any GDPR right, email bevans1017@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

Data is stored on Supabase infrastructure. Supabase is SOC 2 Type 2 certified and GDPR compliant. For details on cross-border data transfers, see Supabase's privacy policy.

10. Data Security

We take reasonable steps to protect your personal data against unauthorised access, loss, or disclosure:

• All data in transit is encrypted via HTTPS / TLS.
• Data at rest is encrypted in Supabase's managed infrastructure.
• Authentication is handled by Supabase Auth and Apple's Sign in with Apple — we never store or see your Apple ID password.
• Row-level security policies in Supabase ensure each user can only access their own data.

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at bevans1017@gmail.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where feasible, notify you via the App.

Continued use of the App after changes take effect constitutes your acceptance of the revised policy. The current version is always available at bevans1017-del.github.io/privacy.

12. Contact

For any privacy-related questions, data requests, or concerns, please contact us:

• Developer: Brandon Evans
• Email: bevans1017@gmail.com
• Website: bevans1017-del.github.io
• App: IronFuel - Fitness & Nutrition
• Bundle ID: com.bevans1017.ironfuel