Legal
Iron Triangle Privacy Policy
Effective date: November 2, 2026
Iron Triangle Coaching LLC ("we") runs the Iron Triangle app and the irontriangle.co website. This policy says what we collect, why, who receives it and what you can do about it. Our Consumer Health Data Privacy Policy gives more detail on health data.
Contact: support@irontriangle.co.
What We Collect
You give us:
- Account details: your name, email address, password (stored only as a hash) and birth date.
- Body and health details: sex, height, bodyweight, fluid intake, check-ins, and your weight and nutrition goals.
- Food: what you log, plus any foods and recipes you create.
- Training: your programs, logged sessions, sets, rounds and training maxes.
- Fights and weight cuts: fight dates, weight classes, and your weight-cut plans.
- Your choices: what you agreed to, which version, and when.
- Messages: anything you send to support@irontriangle.co.
We collect automatically:
- Crash and performance reports: errors, how the app performed, your device type and the app version.
- Usage analytics: which features you use, your user ID, and device and app details. An analytics event can record that you changed a nutrition target and in which direction, but not the value.
- Connection details: our services and vendors receive your IP address when your device connects to them. Our hosting's request logs record it with each request, and your active sign-in sessions store it with your device or browser details.
On our website:
- Waitlist and free guide forms: your first name and email, your main sport if you join the waitlist, and when you agreed.
- Connection details: our hosting and API handle your IP address to serve the site and limit abuse. The rate limit holds it in memory only, but our hosting's request logs record it with each request.
The website sets no cookies and uses no analytics.
The camera is used to scan food barcodes. We do not keep those images. We do not collect your precise location.
How We Use It
- To run the app, calculate your nutrition targets and weight plans, and record your training.
- To sign you in, keep your account secure and send account emails, such as password resets and invitations.
- To find and fix problems and to decide what to improve.
- To send the guide or waitlist updates you asked for.
- To answer you when you contact us.
- To meet legal obligations and to keep a record of what you agreed to.
What We Don't Do
We do not sell your data. We do not show ads, use advertising trackers or use your health data for marketing.
Who Receives It
Companies that work for us. They handle data on our behalf:
| Company | What it does | What it receives |
|---|---|---|
| Google Cloud | Hosts our servers, database, files and website, in the United States | All the data above |
| Sentry | Crash and performance reports | Error details, device and app details, user ID |
| PostHog | Usage analytics | Usage events, device and app details, user ID |
| Resend | Sends email | Your email address and the message |
| RevenueCat, Apple and Google | Subscriptions and purchases | Purchase and subscription status, an account ID |
Apple and Google also handle purchases and app downloads under their own privacy policies.
Our staff. Our own staff can see your account details and data when they support you, enroll you in a program or maintain the service.
YouTube. Exercise videos play from YouTube. When you play one, YouTube receives your IP address and device details under its own privacy policy. It does not receive your logs.
Your gym, if you belong to one. The gym always sees your name and email as a member. Its coaches and admins see your weigh-ins from your time with the gym only if you agree under Share with My Gym in Settings. They cannot see your food logs. If you stop sharing or leave, the gym loses access to your weigh-ins.
Others, when required. We may disclose data if the law requires it, to protect someone's safety or our legal rights, or as part of a sale or merger of the company. A buyer would remain bound by this policy until you are told otherwise.
Your Choices
- Analytics: you can turn analytics off in Settings. Turning it off stops new usage events. Events already waiting on your phone may still be sent. The app also keeps checking which features are on for you, and those checks send your user ID and device details to PostHog.
- Crash reports: these stay on, because we need them to keep the app working. They do not depend on the analytics setting.
- Withdrawing consent: you can withdraw health data consent in Settings. The app cannot run without it, so it closes until you agree again or delete your account. Your data stays on your account until you delete it.
- Deleting your account: go to Settings, or email us. Deleting your account does not cancel a subscription. Cancel it through the App Store or Google Play.
- Waitlist and guide emails: email us to be removed, and we will delete your form details.
- Access and correction: you can see and correct most of your data in the app. Email us for a copy of it or for anything else.
We answer requests within 45 days. If we turn yours down, you can appeal by replying to us, and we answer within another 45 days.
How Long We Keep It
We keep waitlist and guide form details until you ask us to remove them or we no longer need them. Removed details stay in database backups for up to 30 days. Server logs are kept for 30 days. We keep account data while your account is open. When you delete your account:
- Your logs, body details, fights, goals, files and sign-in details are deleted, and your name and email are removed from your account record.
- We keep an anonymized record of what you agreed to and of some account events, including that you were a gym member and when.
- Deleted data stays in our database backups for up to 30 days, and deleted files can be recovered by us for up to 7 days. After that they are gone.
- We ask our vendors to delete what they hold. They may keep some of it for a limited time under their own retention rules.
- If you use the app on a second phone, it keeps its local data until someone next signs in on it.
Security
We encrypt data in transit and on our servers, restrict who can reach it, and store sign-in tokens in your phone's secure storage. Data held in the app on your phone relies on your phone's own protection, so use a passcode. No system is perfectly secure. If a breach affects you, we will notify you as the law requires.
Age
Iron Triangle is for people 18 and over. If you tell the app you are younger, it does not open and offers to delete your account. If you think someone under 18 has an account, email us and we will delete it.
Where This Applies
The app is offered from the United States, and your data is stored here. We give these rights to all our users, wherever they live. If your state gives you further rights, you can use them by emailing us, and you can contact your state's attorney general if you disagree with our answer.
Changes
When we change this policy, we update the date above. If a change is significant, we will tell you in the app or by email, and ask you to agree again where the law requires it.