Privacy Policy

1. Information We Collect

IronStride collects the following categories of information to provide and improve our services:

Account Information

• Name and email address (provided at registration or via Strava OAuth)
• Profile preferences (sport type, race goals, experience level)

Activity Data (via Strava)

• Running, cycling, and swimming activities
• Pace, distance, elevation, heart rate, power output, and GPS routes
• Gear information linked to activities

Health Data (via Apple Health or Health Connect)

• Heart Rate Variability (HRV)
• Resting heart rate
• Sleep duration and sleep stages
• Step count

Weather & Location

• Approximate location (city level) used transiently to fetch weather and AQI data
• Precise GPS location is not stored by IronStride; it is processed locally on your device

AI Interaction Data

• Activity summaries and coaching queries sent to our AI provider (Anthropic) for analysis
• AI-generated coaching responses stored in your account to form your coaching history

Technical & Usage Data

• Device type and operating system version
• App version and crash reports
• Feature usage patterns (anonymised)

2. How We Use Your Information

We use the information we collect exclusively to:

• Generate personalised AI coaching briefs and activity analysis
• Calculate your Recovery Score, Strain Score, and Race Readiness
• Provide weather intelligence and air quality alerts relevant to your training location
• Sync and display your Strava activities and health metrics
• Maintain and authenticate your account
• Diagnose technical issues and improve app stability
• Comply with applicable legal obligations

We do not use your information for advertising, profiling for third-party purposes, or sale to data brokers.

3. Third-Party Services

IronStride integrates with the following third-party services. Each operates under its own privacy policy:

4. Data Sharing

IronStride does not sell, rent, or trade your personal data. We share information only in the following limited circumstances:

• Service providers: The third-party services listed in Section 3 receive data only as necessary to deliver their function.
• Legal compliance: We may disclose information when required by law, regulation, or court order.
• Safety: We may share information to prevent fraud, protect the safety of users, or enforce our Terms of Service.
• Business transfer: If IronStride is acquired or merged, your data may transfer to the acquiring party, who will be bound by this Privacy Policy.

5. Data Retention

We retain your personal data for as long as your account is active. Specifically:

• Account and coaching data: Retained while your account is active, deleted within 30 days of account deletion.
• AI coaching history: Stored in Firestore as part of your account and deleted when your account is deleted.
• AI interaction data (Anthropic): Not retained by Anthropic beyond the immediate API call under our data processing agreement.
• Crash and diagnostic logs: Retained for up to 90 days for debugging purposes.
• Legal obligations: Some information may be retained longer where required by applicable law, fraud prevention, security investigations, or regulatory compliance.

You may request early deletion at any time. See Your Rights below.

6. Security

We implement industry-standard security measures to protect your data:

• All data transmitted between your device and our servers is encrypted using HTTPS / TLS 1.3
• Data stored in Firebase Firestore is encrypted at rest by Google
• Strava connection uses OAuth 2.0 — IronStride never stores your Strava password
• Access tokens are stored securely using platform keychain / secure storage
• AI requests to Anthropic are made over HTTPS and include only the minimum data required for coaching

7. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Delete your account and all associated data directly from the app (Profile › Settings › Delete Account) or by contacting us.
• Portability: Request your data in a portable format.
• Withdraw consent: Disconnect Strava or revoke health permissions at any time from your device settings.

To exercise any right, contact us at mitul.cse@gmail.com. We will respond within 30 days.

8. Health Data

IronStride accesses health data (HRV, resting HR, sleep) from Apple HealthKit and Google Health Connect solely to provide recovery and coaching features. We commit to the following:

• Health data is used only to calculate Recovery Score, Strain Score, and coaching recommendations
• Health data is never shared with advertisers, data brokers, or unrelated third parties
• Health data is never used to infer medical conditions
• You can revoke health data access at any time from your device's Privacy settings
• IronStride's use of Apple HealthKit data complies with Apple's HealthKit guidelines and does not permit sharing with third parties without explicit user consent
• IronStride's use of Health Connect data complies with Google's Health Connect data usage policy

9. Children's Privacy

IronStride is not directed at children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. International Users

IronStride is developed and operated from Bangladesh. If you use the app from outside Bangladesh, your data may be processed and stored in data centres operated by our service providers (Firebase/Google, Anthropic, Cloudflare) in the United States or other countries. By using IronStride, you consent to this transfer.

We take reasonable steps to ensure that your data receives adequate protection wherever it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated via an in-app notification or email. Continued use of IronStride after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact: