Privacy Notice

Under Iron is run by Riley Nicholas Laska-Branch, who is the data controller for personal data processed through the service. Contact: rileyb1078@gmail.com.

What we collect and why

• Workout data (routines, sets, history, body weight, photos) — stored on your device by default. If you sign in, a backup is kept online to sync across devices. Basis: providing the service (contract).
• Account details (email, password, name, handle, profile photo) — to create and secure your account. Basis: contract.
• Social content (posts, comments, likes, messages, groups, follows) — to provide social features you choose to use. Basis: contract.
• AI split builder messages — to generate your plan. Basis: contract.
• Run location — used during a GPS run to measure distance; only the results are saved. Basis: consent (your device permission).
• Technical data (IP address, device and browser info, logs) — for security, fraud prevention and fixing problems. Basis: legitimate interests.
• Support messages — to answer you. Basis: legitimate interests.

Who we share it with

• Service providers that host the app, store data and run the AI features.
• Paddle, our Merchant of Record, for selling the product, managing subscriptions, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

We do not sell your personal data.

Retention

We keep online data while your account is active. When you delete your account or the data is no longer needed, it is deleted or anonymised, except where the law requires us to keep it.

Your rights

Depending on where you live, you may access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Email rileyb1078@gmail.com; we respond within 30 days. You may also complain to your local data protection authority.

Security

We use appropriate technical and organisational measures, including encrypted connections and access controls that limit who can read your data.

Cookies and storage

We use only essential browser storage to keep you signed in and save your workouts and preferences on your device. We do not use advertising cookies.

International transfers

Our providers may process data outside your country, using appropriate safeguards such as standard contractual clauses.