Privacy Policy

IronQuest is operated by Samy Ouachek ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the IronQuest mobile application and related services.

By using IronQuest, you agree to the practices described in this policy. If you do not agree, please do not use the app.

1. Data We Collect

Account data

When you sign up, we collect your email address through Apple Sign In or Google Sign In. We do not collect passwords — authentication is handled entirely by your chosen provider.

Profile data

During the AI coach onboarding, you provide information such as your fitness goals, training schedule, available equipment, and exercise preferences. This data is used to generate a personalized workout program.

Workout data

We store your workout programs, routines, sessions, sets, reps, weights, and performance metrics. This data powers the XP and rank progression system.

Device data

We collect your device identifier, platform (iOS or Android), and push notification token to deliver notifications and sync your data across sessions.

Subscription data

Subscription status and entitlements are managed by RevenueCat through the App Store or Google Play. We do not collect or store payment details (credit card numbers, billing addresses) directly.

2. How We Use Your Data

• Deliver and operate the IronQuest service
• Generate personalized workout programs via AI
• Track your progress, XP, and rank
• Sync your data between your device and our servers
• Send push notifications (rest timer alerts, session reminders)
• Process and manage your subscription
• Improve the service and fix issues

3. AI Processing

IronQuest uses Anthropic's Claude API to power the AI coach. When you interact with the AI coach, your profile answers and conversation messages are sent to Anthropic for processing.

Under Anthropic's API terms, data sent through the API is not used to train their models. We only send the minimum data necessary to generate your program — we do not send workout performance data or device information to the AI.

4. Third-Party Services

We share data with the following third-party services:

Each service operates under its own privacy policy. We encourage you to review them.

5. Local Data Storage

IronQuest is an offline-first app. Your workout data is stored locally on your device in a SQLite database. This allows the app to function fully without an internet connection.

When connectivity is available, your local data syncs with our servers to enable backup and multi-device access. The sync process uses an append-only event store — your data history is preserved, not overwritten.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we delete your data as described in section 7.

AI conversation data (coach Q&A and generated responses) is retained alongside your account data and deleted when your account is deleted.

7. Data Deletion

You can delete your account and associated data from within the app. When you request deletion, we remove:

• All workout events (programs, sessions, sets, performance data)
• AI conversation history and generated program data
• Device registrations and push notification tokens
• Custom workout programs you authored

Your authentication record (managed by our auth provider) and subscription record (managed by RevenueCat) may be retained separately according to their respective policies. To fully cancel a subscription, use the App Store or Google Play settings on your device.

8. Children's Privacy

IronQuest is not directed at children under 16 years of age. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it.

9. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable French and EU law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict processing of your data
• Withdraw consent at any time

To exercise any of these rights, contact us at samy@fenrirstudio.io.

10. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS), encrypted session tokens (JWE), and secure server infrastructure. However, no system is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by updating the date at the top of this page. Continued use of IronQuest after changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy or your personal data, contact:

Samy Ouachek
samy@fenrirstudio.io