Privacy Policy

IronQuest is operated by OUACHEK SAMY MOHAMED FRANCOIS, a sole proprietorship registered in France under SIREN 803 576 578, with its registered address at 12 Place de la Commune de Paris, 27140 Gisors, France ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the IronQuest mobile application and related services.

By using IronQuest, you agree to the practices described in this policy. If you do not agree, please do not use the app.

1. Data We Collect

Account data

When you sign up, we collect your email address through Apple Sign In or Google Sign In. We do not collect passwords — authentication is handled entirely by your chosen provider.

Profile data

During the AI coach onboarding, you provide information such as your fitness goals, training schedule, available equipment, and exercise preferences. This data is used to generate a personalized workout program.

Workout data

We store your workout programs, routines, sessions, sets, reps, weights, and performance metrics. This data powers the XP and rank progression system.

Health data (HealthKit)

With your explicit permission, IronQuest reads the following data from Apple HealthKit on iOS: step count, body weight, body fat percentage, lean body mass, height, and waist circumference. This data is synced to our servers alongside your other workout data to power your daily activity tracking, body-composition history, progression XP, and cross-device sync.

IronQuest also writes back to Apple Health the body measurements you log inside the app — weight, body fat percentage, lean body mass, and waist circumference — so your data stays consistent across your other health and fitness apps. Step count and height are read-only; we never write them. You can revoke HealthKit access at any time in iOS Settings → Privacy & Security → Health → IronQuest.

Device data

We collect your device identifier, platform (iOS or Android), and push notification token to deliver notifications and sync your data across sessions.

Subscription data

Subscription status and entitlements are managed by RevenueCat through the App Store or Google Play. We do not collect or store payment details (credit card numbers, billing addresses) directly.

2. How We Use Your Data

• Deliver and operate the IronQuest service
• Generate personalized workout programs via AI
• Track your progress, XP, and rank
• Sync your data between your device and our servers
• Send push notifications (rest timer alerts, session reminders)
• Process and manage your subscription
• Improve the service and fix issues

3. AI Processing

IronQuest uses Anthropic's Claude API, a third-party AI service operated by Anthropic, PBC, to power the AI coach. Before any data is shared with Anthropic, the app asks for your explicit consent.

Data shared with Anthropic

When you interact with the AI coach, the following data is sent to Anthropic to generate personalized coaching responses and your workout program:

• Body metrics (age, height, weight, biological sex)
• Fitness goals and training preferences
• Health information (injuries, medical conditions, and other health details you explicitly type into the AI coach)
• Lifestyle data (training frequency, session duration, available equipment)
• Exercise preferences and dislikes
• Your conversation messages with the AI coach

Data not shared with Anthropic

The following data is never sent to Anthropic: your email address, workout performance data (sets, reps, weights), step count and any other HealthKit data, device information, and subscription status.

How Anthropic handles your data

Under Anthropic's API terms, data sent through the API is not used to train their models. Data is processed solely to generate a response and is subject to Anthropic's data retention policies.

AI conversation data is retained alongside your account data and deleted when you delete your account (see section 8).

4. Apple HealthKit

On iOS, IronQuest reads the following data from Apple HealthKit: step count, body weight, body fat percentage, lean body mass, height, and waist circumference. IronQuest also writes back the body measurements you log inside the app (weight, body fat percentage, lean body mass, and waist circumference) so they stay in sync with your other health and fitness apps. Step count and height are read-only; we never write them. We commit to the following:

• HealthKit data is never used for advertising, marketing, or similar services.
• HealthKit data is never sold, shared, or disclosed to third parties for advertising or data-mining purposes.
• HealthKit data is never sent to Anthropic or any other third-party service listed in this policy.
• Health data read from HealthKit (steps, weight, body fat percentage, lean body mass, height, waist circumference) is stored on our servers solely to power your daily activity tracking, body-composition history, progression XP, and cross-device sync.
• Measurements written back to Apple Health are limited to values you explicitly log inside IronQuest (weight, body fat percentage, lean body mass, waist circumference). Once written, those entries live in your HealthKit store and are managed by you through the Apple Health app.
• You can revoke HealthKit permissions at any time through iOS Settings, and you can delete all health data stored on our servers by deleting your account (see section 8).

5. Third-Party Services

We share data with the following third-party services:

Each service operates under its own privacy policy. We encourage you to review them.

6. Local Data Storage

IronQuest is an offline-first app. Your workout data is stored locally on your device in a SQLite database. This allows the app to function fully without an internet connection.

When connectivity is available, your local data syncs with our servers to enable backup and multi-device access. The sync process uses an append-only event store — your data history is preserved, not overwritten.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we delete your data as described in section 8.

AI conversation data (coach Q&A and generated responses) is retained alongside your account data and deleted when your account is deleted.

8. Data Deletion

You can delete your account and associated data from within the app. When you request deletion, we remove:

• All workout events (programs, sessions, sets, performance data)
• Health metrics read from Apple HealthKit and stored on our servers (steps, weight, body fat %, lean body mass, height, waist circumference)
• AI conversation history and generated program data
• Device registrations and push notification tokens
• Custom workout programs you authored

Measurements that IronQuest has previously written to Apple Health (weight, body fat %, lean body mass, waist) remain in your HealthKit store after account deletion and are managed by you through the Apple Health app. Your authentication record (managed by our auth provider) and subscription record (managed by RevenueCat) may be retained separately according to their respective policies. To fully cancel a subscription, use the App Store or Google Play settings on your device.

9. Children's Privacy

IronQuest is not directed at children under 16 years of age. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it.

10. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable French and EU law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict processing of your data
• Withdraw consent at any time

To exercise any of these rights, contact us at contact@fenrirstudio.io.

11. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), encrypted session tokens (JWE), and secure server infrastructure. However, no system is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by updating the date at the top of this page. Continued use of IronQuest after changes constitutes acceptance of the updated policy.

13. Contact

For any questions about this Privacy Policy or your personal data, contact:

OUACHEK SAMY MOHAMED FRANCOIS
SIREN: 803 576 578
12 Place de la Commune de Paris
27140 Gisors, France
contact@fenrirstudio.io