Privacy Policy

1. Introduction

Iron & Grits ("we," "our," or "us") is a strength training application. This Privacy Policy explains how we collect, use, and protect information when you use the Iron & Grits mobile application.

By creating an account, you agree to this policy. If you do not agree, please do not use Iron & Grits.

2. Information We Collect

Account data: your email address, name, and username when you register.

Fitness data: workouts you log, including exercises, sets, reps, weight, rest periods, workout duration, and personal records.

Nutrition data: food and meals you log, including descriptions, any photos of food you choose to scan, and the calorie and macronutrient values associated with them.

Body data: any body weight or measurement data you enter voluntarily.

AI interaction data: messages you send to Atlas, our AI coaching assistant, and the food descriptions or photos you submit for analysis, along with the responses and estimates generated.

Device and usage data: app version, operating system, crash reports, and general usage patterns to improve the app.

What we do not collect: payment information, location data, HealthKit data, contacts, or biometric identifiers.

3. How We Use Your Information

We use your information to:

• Provide and improve the Iron & Grits app and Atlas coaching
• Personalize training recommendations and progressive overload suggestions
• Maintain your workout history and personal records
• Send account-related communications (not marketing)
• Diagnose and fix technical issues

4. How We Share Your Information

We do not sell your personal data. Ever.

We share data only with the following processors:

Supabase (database and authentication): your account credentials, profile, and all workout and nutrition data are stored on Supabase infrastructure. Supabase is SOC 2 Type II certified.

OpenAI and Google (AI processing): messages you send to Atlas, relevant workout context, and any food descriptions or photos you submit for analysis are transmitted to OpenAI's and/or Google's AI APIs to generate coaching responses and food estimates. Under these providers' current API data-usage policies, API-submitted data is not used to train their models.

No other third parties receive your data. We do not use advertising networks.

5. Health and Fitness Data

Your workout logs, nutrition logs, body metrics, and fitness history are sensitive personal information. We treat this data with heightened care:

• Used exclusively to provide and improve Iron & Grits features for you
• Never sold, rented, or licensed to any third party
• Never shared with advertisers, insurers, or employers
• Transmitted only to Supabase (storage) and OpenAI or Google (Atlas responses and food analysis) as described above

Iron & Grits is not a covered entity under HIPAA. However, we apply equivalent care standards to your health and fitness information regardless of legal requirements.

6. Data Retention

We retain your data as long as your account is active. If you delete your account (Settings → Delete Account), your profile, workout history, and all associated data are permanently deleted from our systems within 30 days.

7. Data Security

All data is transmitted over HTTPS/TLS. Passwords are hashed and never stored in plaintext. Database access is protected by Supabase Row Level Security, each user can only access their own records. We regularly review our security practices.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we work hard to protect your information, we cannot guarantee its absolute security, and you provide it at your own risk.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time.

To delete your account and all associated data: open Settings → Delete Account.

For other requests, contact us at support@ironandgrits.com.

California residents: we do not sell personal information as defined by the CCPA. You have the right to know what data we hold and to request deletion via the in-app delete function.

9. Children's Privacy

Iron & Grits is intended for users 18 years of age and older. We do not knowingly collect data from anyone under 18. If we become aware that a user is under 18, we will delete their account and associated data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or via email. Continued use of Iron & Grits after changes are posted constitutes acceptance of the updated policy.

11. Contact

Questions about this policy?

Email: support@ironandgrits.com