Privacy policy (draft)

1. Who we are

IronEra is a strength training and wellness service provided by StrongHer. This policy explains what information IronEra collects, why, who can see it, and the choices you have.

[For counsel: legal entity name, registered address, and the contact for privacy requests.]

2. Information you give us

Account: your name, email address and password. The password is stored only as a one-way hash by the authentication library; the original password is not stored.
Setup and profile: preferred name, date of birth, optional height and body weight, an emergency contact, training experience, ranked goals, equipment, workout locations, weekly availability, exercise restrictions, and dietary preferences and allergies.
Records you create: workouts, sets, schedules, foods and meals, hydration, body measurements and notes. Optional progress photos and their images are also stored when you give the separate photo permission, and a meal photo when you choose to keep it with that meal (one per meal, shown only to you).
Optional health information: for example menstrual or menopausal status, asked only with an explanation, always skippable, and stored only after you give the specific consent.
Agreements: the waiver version you signed with the name you typed, and your consent decisions, each with the time, the policy version, and the network address and browser that sent it.

3. Information collected automatically

When you sign in we keep a session record (its time, network address and browser) so you stay signed in and can see your signed-in devices. IronEra uses no advertising, no third-party analytics and no tracking cookies. Authentication uses cookies. Your browser also stores your theme choice and an in-progress workout for offline logging. Mobile keeps a sign-in token and selected cached records and pending changes on your device. We also keep short-lived request counters for security, keyed by hashed identifiers.

[For counsel: review whether operational logs, error monitoring or product analytics added before launch need listing here.]

4. How we use it

To run your account and show you your own records.
To calculate figures such as training volume, estimated one-rep max and daily nutrition totals.
To send you account emails: confirmation links and password resets.
To keep the service secure, for example by limiting repeated sign-in attempts.

IronEra shows no advertising, and your health information is not used for advertising.

[For counsel: legal bases for processing where applicable, a statement on sale and sharing of personal information, and any further uses before launch.]

5. Sensitive health information

Optional health answers, including restrictions, dietary preferences, allergies, menstrual or menopausal status, sleep and recovery notes, need your health-information permission. Withdrawing it deletes those answers and related symptom, sleep and recovery records; ordinary workout and food logs remain. Progress photos have a separate permission. Withdrawing it permanently deletes the photos and their images. Wellness tracking (daily recovery check-ins, sleep and symptoms) uses the same health-information permission, and cycle tracking has its own permission; withdrawing either deletes the records it covers.

[For counsel: assess state consumer health data laws (for example Washington’s My Health My Data Act), FTC rules including the Health Breach Notification Rule, and whether HIPAA applies given the actual business relationships. HIPAA is not assumed to apply.]

6. Who can see your information

You. Each member’s records are separated in the database itself, so one account cannot read another’s.
StrongHer staff can see account details (name, email, role, status) to support you and keep the service safe. Authorised admin and support staff can also see limited profile details, emergency contacts, goal types, consents and waiver signatures. Staff in general cannot see your training, nutrition or health records; the database enforces this. Individual account views and staff changes are written to an audit log.
Your gym’s coaches. The coaches and admins of your gym (at StrongHer, every StrongHer coach, not only the coaches assigned to you) see your training (workouts, sets including any pain flags, records, goals and training setup) and your injuries and exercise restrictions, so they can coach you safely. A substitute coach covering one of your sessions sees the same until 24 hours after that session. They see your other health and wellness details (the notes and other optional health details on your profile, sleep, recovery, symptoms, cycle and body measurements, and in pre-session reports your average daily calories and protein and body-weight change) only if you turn on both “Optional health details” and “Share health details with your gym’s coaches”. Coaches and admins never see your individual food entries, meal photos, progress photos or AI coach conversations. Each time one of them opens your details or a report, it is written to the staff audit log. Turning sharing off stops that access at once; nothing is deleted.
Service providers that host the application, store the database and backups, and deliver account email. If you turn on “AI features” or “Meal photo analysis”, each request is sent to OpenAI, a service provider in the United States, which processes it for IronEra; a meal photo is sent once for an estimate. IronEra keeps a meal photo only if you choose to keep it with that meal, where only you can see it. Photos are private within the app, not end-to-end encrypted.

[For counsel: name the hosting, database and email providers once chosen, with their roles and locations.]

7. Your choices and rights

Correct your profile at any time in the app.
Download your account records as JSON. Photo details are included, but the image files are not, and the app has no image download yet, so keep your own originals. Passwords, session tokens, staff audit logs, shared content and previously deleted rows are not included.
Delete your account, which deletes the records linked to it.
Withdraw optional consents in Settings. Deleting a progress photo or withdrawing photo permission permanently removes the image from the live service; there is no undo. So does removing a meal photo, or removing everything logged in that meal. Turning off “AI features” permanently deletes your AI coach conversations and removes the AI-written summary from your coach’s pre-session reports; a daily count of AI requests, with no content, is kept for daily limits.

None of these depend on a paid plan.

[For counsel: rights under applicable state laws, how to make a request, verification, and response times.]

8. Keeping and deleting information

Your records are kept while your account exists. When you delete your account, its records are deleted. The staff audit log is kept so that staff actions remain accountable; its entries may still contain your account identifier. Backups remain until they expire. Delivered emails and email-provider logs may remain. Account deletion removes progress photos, meal photos and their images from the live database.

[For counsel: retention periods for the audit log, backups, and email delivery records.]

9. Security

Production connections require HTTPS, and database and email transport encryption depend on deployment configuration. Access is checked on every request, and the database enforces member-by-member separation in addition to the application’s own checks. No system is perfectly secure, and this description is not a certification.

[For counsel: encryption at rest, backup, and incident-response commitments as confirmed with the hosting provider.]

10. Age

IronEra is designed for women 40 and older. Onboarding requires members to be at least 18.

[For counsel: review eligibility wording and age verification.]

11. Changes and contact

Consent decisions record the policy version. Automatic requests to renew policy consent are not currently enforced. Questions can go to our support address, support@stronghersc.com. See also the terms.