Privacy
Last updated 15 November 2026
IRONLOG is a training log. This page says exactly what it stores, where it goes, and who can see it. It is written to be read, not to be skimmed past.
The short version
- There are no adverts, no analytics, no tracking pixels, and no third-party scripts of any kind.
- Nothing is sold or shared with anyone for marketing.
- Your training is visible to your crew. That is the point of the app, and it is the main thing to understand before you log anything.
- You can delete your account, and everything in it, from inside the app.
What is stored
To have an account: your email address, a display name, a hashed password. No phone number, because the app does not send text messages.
Because you answered the survey: your goal, biological sex, age, height, weight, how active you are, your training experience, how many days and how long you train, what equipment you have, how you eat, how aggressive a pace you chose, and any joints you flagged as giving you trouble.
As you train: every workout — the exercises, sets, weights, reps, how hard each set felt, how long the session took, and any notes or captions you write — plus your bodyweight entries, any tape-measure readings you take, what you drink, the meals and ingredients you log, and any reactions you leave on other people's sessions.
If you turn on the weekly reminder: the address your browser gives us for sending a notification to that device, the timezone it is in, and the hour you asked to be reminded at. One row per device, deleted when you turn reminders off.
Proof photos, if you take them.
Your invite: a record that you were invited, when, and by whom, plus any invites you hand out yourself. Invite links are stored only as a one-way hash, never as something that could be used to sign in.
Some of this is health information: your bodyweight and measurements over time, what you eat, and the joints you told us bother you. It is treated as the most sensitive thing here. It is never used for anything other than building your plan and showing you your own history.
Who can see it
Everyone in your crew sees your workouts, your display name, your proof photos, and the reactions you leave. Your crew is set by your invite; you cannot change it from inside the app, and neither can anyone else in it.
Nobody outside your crew can see any of it. Proof photos are stored in a private bucket and served only to signed-in members of your crew — a photo link on its own gives a stranger nothing.
Your email address, survey answers, bodyweight, measurements, meals and water are never shown to your crew. Only you see those.
Notifications
The weekly reminder is off until you turn it on, and it is the only notification this app sends. There is nothing promotional, and nothing that exists to pull you back into the app.
The notification itself is sent empty. Apple, Google or Mozilla — whoever runs the push service your browser chose — is told only that your device should wake up. Your phone then asks this app what to say, over its own connection. So the wording, which would otherwise be a sentence about your bodyweight, never passes through anybody else's servers. If the check-in has been done by the time your phone wakes, nothing is shown at all.
Turning reminders off in the app deletes the device's row immediately.
Where it is kept
- Neon — a Postgres database in AWS
us-east-2(Ohio, USA). Accounts, workouts, survey answers, bodyweight. - Cloudflare R2 — Eastern North America. Proof photos only, in a private bucket.
- Cloudflare Pages and Workers — serve the app itself and run the hourly job that sends the weekly reminder.
- Your browser's push service — Apple, Google or Mozilla, depending on the browser, and only if you turn reminders on. It is told to wake your device and nothing else; see Notifications above.
Those are the only companies involved. None of them is given your data for their own purposes. The app sends no email and no text messages.
Cookies
One cookie, called better-auth.session_token. It is what keeps
you signed in. It is marked HttpOnly, Secure and
SameSite=Lax, and it lasts 60 days or until you sign out.
There are no advertising or analytics cookies, so there is no consent banner to click through. A cookie that exists purely to keep you signed in does not require one.
The app also stores your workouts on your own phone, so it keeps working in a basement gym with no signal. "Erase everything on this phone" in the Me tab clears that; signing out clears it too.
How long it is kept
Until you delete it. There is no automatic expiry and no archive you cannot reach. Delete your account and the rows are removed immediately, including the proof photos.
Two things survive deliberately, and neither identifies you: the invite you arrived on keeps a record that it was used — without your address, which is erased — so the same link cannot be claimed a second time. Any unused invites you handed out are deleted, since nobody else could withdraw them.
What you can do
- See it — all of it is already in the app: your plan, your history, your bodyweight trend.
- Correct it — redo the survey, edit or delete any session.
- Delete it — Me → Delete my account. This removes your account, every workout, your bodyweight and measurement history, your meals, your plan, every proof photo and every reminder subscription, from the server as well as your phone. Your posts disappear from your crew's feed. It cannot be undone.
If you are in the UK or EU, those are your rights under GDPR; in California, under the CCPA. The app implements them directly rather than making you ask.
Age
IRONLOG is for adults: the survey will not accept an age below 18. This is stricter than COPPA requires, and it is deliberate — an AI coach commenting on somebody's body and eating is not something to extend to a minor's account until there is a real policy for that. Nobody can sign up without an invite, so please do not invite anyone under 18.
Security
Passwords are hashed, never stored as text. Sign-up requires an invite token; there is no open registration. Passkeys are supported if you prefer not to use a password at all.
There is no automated password reset at the moment. If you are locked out and have no passkey, whoever runs your crew has to set a new password for you, which signs out every other device.
Getting in touch
Questions, or you want your data removed and cannot get into your account: privacy@ironlogging.app.
This policy describes what the software actually does, verified against the code. It has not been reviewed by a lawyer. If IRONLOG ever takes payment, adds analytics, or opens to the public, it needs revisiting before that happens.