Privacy Policy

The short version

• IRONOS is a training app for triathletes and endurance athletes. To coach you, we need some health and fitness information. That information is sensitive. We collect it only with your consent and use it only to run IRONOS for you.
• We don't sell your information. We don't use it for advertising. Our apps contain no advertising or tracking code.
• When you use the AI coach chat, your message and a summary of your training are sent to our AI provider (UltimateAI, or Cloudflare Workers AI as a backup) so it can write a reply. We don't keep your chat transcripts on our servers. They stay on your device.
• Friends only see what you choose to share. The run recorder keeps your route on your phone.
• Our rules engine adjusts your training automatically and tells you why each time. The AI coach can only suggest changes, and they only happen if you confirm them.
• You can export or delete your data from inside the app at any time.

1. Who we are

IRONOS is run by a sole trader based in Melbourne, Victoria, Australia ("IRONOS", "we", "us", "our").

Privacy contact: rudrakshswebsite@gmail.com

This policy covers:

• the IRONOS iPhone app
• the IRONOS Android app
• the IRONOS web app at ironos-bmm.pages.dev
• our website and waitlist
• emails we send.

It explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We hold health information, so we treat ourselves as covered by the Privacy Act whatever our size. As a Victorian business that holds health information, we also aim to meet the Health Privacy Principles in the Health Records Act 2001 (Vic).

2. What we collect

Some of this is health information, which the law treats as sensitive information. Section 4 explains how your consent works.

Account details (required)

• Your email address and display name.
• Your password, stored only as a salted one-way hash. We never store or see the password itself.
• If you sign in with Google: your name, email address, profile picture link and a Google account identifier.
• If we offer Sign in with Apple and you use it: your name, and either your email or an Apple private-relay email.
• Your IRONOS account ID and your personal invite code. If you joined through someone's invite link, we record that link's code too.
• Your account tier. Everyone is on the free tier.

Health screening and agreements (required before we build a plan)

• Your age. IRONOS is for adults 18 and over.
• Your answers to our pre-exercise health screening. For example, whether a doctor has told you that you have a heart condition, or whether you get chest pain or feel faint when exercising. Also any notes you add, and whether you've told us a doctor has cleared you to train. (Health information.)
• Your acceptance of our terms, training waiver and this policy. We record the full name you type as your signature, which version you accepted, the date and time, your IP address, and your device or browser type.

Training profile (mostly required)

• Height, weight, resting heart rate and maximum heart rate. Lactate threshold heart rate is optional. (Health information.)
• Injury history, for example "achilles" or "knee". (Health information.)
• Your race goal, race name and date.
• Your experience level, the hours you can train each week, the days you're available and your preferred rest days.
• Swim, bike and run baselines, for example a recent 5 km time, cycling FTP or swim pace.
• Your equipment (power meter, heart-rate strap, smart trainer) and whether you can get to a pool or open water.

Nutrition and recovery preferences (optional)

• Your dietary pattern, for example vegetarian.
• Food allergies and intolerances, and gut sensitivity (may be health information). We treat allergies as hard exclusions in fuelling suggestions and meal ideas.
• Preferred training fuels, race-fuelling experience, sweat rate and hydration notes.
• Usual sleep hours and quality, recovery notes, and the climate you expect on race day.

We don't collect what you eat or your calorie intake. We don't set weight-loss targets.

Daily fuel guidance

To estimate your daily energy, protein and carbohydrate needs, we use your weight, height, age, your planned training, and your dietary preferences and allergies. This is general guidance, not a diet plan. If you tell us about an eating-disorder history or a medical nutrition need, we don't show calorie numbers at all.

Daily check-ins (optional, but most of IRONOS runs on them)

• Your ratings. Fatigue, soreness, mood and motivation, each on a 1–5 scale. Sleep hours and sleep quality. (Health information.)
• Health flags. Whether you're unwell, any injury area and its severity, and any warning symptoms you tick, such as chest pain or fainting. (Health information.)
• Your notes, if you add any.
• What we calculate. Your readiness score and band (green, amber or red).

Apple Health and Health Connect (optional, only if you connect them)

• Apple Health (iPhone). We read heart rate variability, resting heart rate, sleep (time asleep), workouts (type, start time, duration, distance, average and maximum heart rate), body weight and VO2 max. We read the last 14 days, or the most recent value for weight and VO2 max.
• Health Connect (Android). We read sleep sessions, heart rate variability, resting heart rate, exercise sessions and heart rate during exercise, from the last 14 days.
• The only thing IRONOS writes is a run you record in the app, saved to Apple Health as a workout, and only if you allow it. We don't write anything to Health Connect.
• We sync when you open the app.
• You can turn access off at any time in Apple Health or Health Connect settings.

Workouts you log, record or sync

Sport, start time, duration, distance, heart rate, power, perceived effort and notes. We also record the training load we calculate and which planned session the workout matched. (Fitness information. Heart rate is health information.)

Run recording (optional)

• When you record a run in the app, your phone's GPS measures distance and pace. Your location is used only while you're recording. Your route stays on your phone, and we never receive it.
• We receive only the run summary: start time, duration and distance.
• If you allow it, the app also saves the run to Apple Health as a workout.

Your plan and its history

• Your sessions and whether each one is done or missed.
• Every change to your plan: what changed, which rule changed it, and the plain-English reason we showed you.
• Coach suggestions, and whether you accepted them.
• Whether your plan is paused. If you resumed it, the date you confirmed a doctor had cleared you to train.

AI coach chat (optional)

• What we send. When you send a message, we send it to our AI provider (section 7) so it can write a reply. With it go up to 12 earlier messages from the conversation on your device, plus a summary of your training. Section 7 lists what that summary contains.
• What we don't keep. Our servers don't store the text of your chats. Your device keeps the transcript.
• What we do keep:
  • how many messages you send each day, and how much AI processing they use, so we can apply the daily limit
  • short notes the coach records when you tell it something that affects your plan, for example "travelling 12–16 Nov" or "left knee sore after long run" (may be health information)
  • plan-change suggestions the coach makes
  • if a message triggers our safety screen, the fact that your plan was paused and why. We keep that record, but not the message itself.

Friends, streaks, invites and sharing

• Friends (optional). When you add a friend with their code, or accept a friend request, we store the friendship. Your friends see your display name (first name and last initial, never your email), your streak, your race goal, the day you were last active, and this week's sessions, training time and distance.
• Sharing your workouts. If Share my activity with friends is on (Friends → ⋯), your friends also see your completed workouts from the last 14 days: sport, title, date, duration and distance. Turn it off at any time. Your streak stays visible.
• Kudos. Friends can give kudos on shared workouts. We store who gave kudos to which workout.
• Removing or blocking a friend. Either of you can remove the other at any time. Once removed, they stop seeing anything about you. You can also block someone from the Friends tab. A blocked person can't find you or contact you, and any friendship or request between you is removed.
• Invites. If someone signs up with your invite link, they send you a friend request. Nothing is shared until you accept it in the Friends tab, and you can decline it, or block them, instead. We keep a removed friend from re-requesting you for 30 days, and a block until you or they delete the account.
• Streaks. We work out your current streak from your workouts and check-ins, and store your best streak.
• "Share my week". The app writes a short summary, and you choose whether and where to share it. We don't see who you share it with. We only count that a share happened.

Waitlist

Your email address, where you heard about us, any invite code, the date, and your consent to receive emails from us.

How IRONOS is used

• Daily totals of product events, such as sign-ups, completed check-ins and chat messages sent. These are counts only, with no account ID attached.
• The days your account was active, stored as your account ID plus the date. We use them to work out things like how many people come back after 7 days. They're deleted with your account.
• We don't use advertising IDs, third-party analytics, advertising or tracking code, or session recording. We don't track you across other apps or websites.

Technical and security information

• IP address, device or browser type, and your time-zone offset (so "today" means your today).
• Sign-in sessions, failed sign-in attempts, rate-limit records and a security log of account events.
• Diagnostics. Our hosting provider (Cloudflare) records standard technical details of requests and errors, such as the address requested, the time and the result, so we can keep IRONOS running and fix faults. IRONOS apps include no third-party crash-reporting or diagnostics tools.

Messages you send us

If you email us, we keep your email address and what you wrote so we can answer you.

What we don't collect

• Your location, except while you're recording a run. Even then, your route stays on your phone.
• Your contacts, photos, microphone or camera.
• Advertising identifiers.
• Payment card details. IRONOS is free.
• Strava or Garmin data.
• Your sex or gender. We don't ask.

3. How we collect it

• From you, when you sign up, complete your intake, check in, log or record a workout, add friends, chat with the coach or email us.
• From Apple Health or Health Connect, but only after you grant permission on your device.
• From Google or Apple, if you choose to sign in with them.
• Automatically, when you use IRONOS (see "How IRONOS is used" and "Technical and security information" above).

If you don't give us some information:

• Without your age and health screening, we can't build a plan.
• Without heart rate variability, resting heart rate or sleep data, your readiness score uses only your check-in and training load.
• Without check-ins, your plan still adjusts for missed sessions, but not for how you feel.
• Without your weight, we can't show daily fuel numbers.
• You can use IRONOS without the AI coach, friends or the run recorder.

4. Sensitive information and your consent

Health information is sensitive information under the Privacy Act. We collect it only with your consent, and only what is reasonably necessary to coach you.

• Health information for coaching. You provide it when you complete the health screening, intake and check-ins. We need it to build and adapt your plan.
• Apple Health or Health Connect. We read nothing until you grant permission on your device.
• Location. Your phone asks for your permission before the run recorder can use GPS.
• The AI coach. Nothing goes to an AI provider unless you send a message. When you do, what we send includes health information and goes outside Australia (section 7).

Withdrawing consent. You can withdraw consent at any time:

• Turn off Apple Health, Health Connect or location access in your device settings.
• Stop using the coach chat.
• Delete individual workouts.
• Delete your account.

If you withdraw consent for the core health information (your screening and training profile), we can't keep coaching you, so you'll need to delete your account. Withdrawing consent doesn't undo anything we lawfully did before.

5. How we use your information

We use it to:

• create, secure and run your account
• check you're an adult and that it's reasonable for you to start training (age and health screening)
• build your training plan (training profile, screening outcome, availability)
• work out your daily readiness and adjust your plan, with a reason each time (check-ins, Apple Health or Health Connect data, workouts, plan)
• apply our safety rules (section 6), using check-in flags, coach chat messages (screened before they reach the AI) and injury history
• show your progress and your streak
• give general daily fuel, fuelling and race-day guidance that respects your allergies
• run the AI coach (section 7)
• show your friends what you've chosen to share
• send sign-in links, security alerts and important notices about the service
• send product news, only if you opted in
• understand how IRONOS is used, in total, so we can improve it
• keep IRONOS secure, prevent abuse and enforce our terms
• keep records of what you agreed to, and meet our legal obligations.

What we never do with your information:

• Sell it, or use it for advertising.
• Give it to insurers, employers or data brokers.
• Use your health information to train AI models.
• Use it to make decisions about your credit, insurance, employment or the price you pay.

We may publish or use aggregate statistics that can't identify anyone, for example the share of IRONOS athletes who check in at least 5 days a week.

6. Automated decisions

IRONOS uses computer programs to make decisions about your training. Most are made entirely by software, with no person involved at the time. Here is what they are.

• Building your plan. Our rules engine decides alone. It uses your race goal and date, weekly hours, availability, baselines, experience, injury history and screening outcome. It sets your training phases, sessions, durations and intensities. You can edit your details and rebuild the plan.
• Whether we can build a plan yet. Software decides alone, using your age and screening answers. It blocks a plan if you're under 18, or until you confirm a doctor has cleared you. You can get medical clearance and confirm it in the app.
• Daily readiness and adaptation. Software decides alone, using your check-in, heart rate variability, resting heart rate, sleep and recent training load. It can make today's or this week's sessions easier or shorter, move them, or swap them for rest. It never increases your training. Every change shows its reason. You always decide whether and how you train.
• Missed sessions. Software decides alone, comparing your plan with the workouts you logged, recorded or synced. It marks sessions missed, and may move a key session or scale the week down. It never adds extra volume. If it got it wrong, log or sync the workout.
• Safety pause. Software decides alone, based on warning symptoms you tick at check-in or words in a chat message (such as chest pain or fainting). It pauses your plan: training advice stops, and you're told to see a doctor, or call 000 in an emergency. You resume by confirming a doctor has assessed and cleared you.
• Injury and illness adjustments. Software decides alone, using the injury area and severity, the illness flag and words in chat. It reduces or swaps affected sessions for a few days, or sets rest, and suggests a physio or GP. You can update your check-in.
• Support responses. If a chat message suggests disordered eating or a mental-health crisis, software stops it going to the AI coach. You see a fixed message with support services instead.
• Coach suggestions. The AI coach proposes a change, our rules engine checks it, and you decide. Nothing changes unless you tap to confirm. Suggestions expire after 24 hours.
• Daily fuel numbers. Software estimates your energy, protein and carbohydrate needs from your profile and planned training. It hides calorie numbers if you've told us about an eating-disorder history or a medical nutrition need.
• Chat limits. Software counts the messages you've sent today and total AI use across IRONOS. When a limit is reached, AI replies stop until the next day. Everything else keeps working.
• Sign-in protection. Software uses failed sign-ins, request rates and IP addresses. It can temporarily lock an account or slow requests. Wait and try again, or contact us.

Asking for a human review. Email rudrakshswebsite@gmail.com with "Review request" in the subject and tell us which decision you mean. A person (currently the founder) will look at the information used and the rule that applied. They'll explain the decision and correct it if it's wrong. We aim to respond within 14 days.

We won't lift a safety pause for you. Only your own confirmation that a doctor has cleared you does that. This is deliberate.

The readiness score is a training tool. It is not a medical measurement, and it doesn't diagnose or monitor any condition.

7. The AI coach

• Who provides it. Replies are written by a large language model reached through UltimateAI (api.ultimateai.org), an AI model gateway that processes information outside Australia. If UltimateAI is unavailable, replies come from Cloudflare Workers AI, which runs open AI models on Cloudflare's network. If neither is available, IRONOS answers from its built-in rules, and nothing is sent to an AI provider.
• What we send for each message:
  • your message, and up to 4 of your own earlier messages from the conversation on your device, with email addresses, phone numbers, links and your name removed. Earlier replies that your device sends back are never forwarded
  • a summary of your training built by our server: today's and tomorrow's sessions (without pace, heart-rate or power targets), this week's sessions and minutes, your readiness band and score, whether plan changes were made and a general category for them (such as "eased for recovery"), today's fuel guidance, your race goal (such as "Ironman") with the race date, an age band and experience level
  • which kinds of training zones you have (heart rate, power, pace) as yes or no only. Questions about your zone values are answered by IRONOS without the AI.
• What we don't send: your name, email address or password; injury, illness or health details, including the reasons for any plan change; heart-rate, power or pace values; the name you gave your race; coach notes.
• Safety screen first. Messages that suggest a medical emergency, a mental-health crisis or disordered eating are not sent to the AI at all. You see a fixed safety message instead.
• What we keep. Our servers don't store your chat text (section 2). Our AI providers handle what we send under their own terms.
• What the AI can and can't do. It can explain your plan and suggest changes. It can't change your plan itself: every suggestion is checked by our rules engine and needs your confirmation. AI can be wrong. Don't rely on it for medical advice.
• AI plan personalisation. If you turn it on, the AI also rewrites your plan's session notes and fits sessions around the preferences you gave us. For that we send, for each week of your plan:
  • your age band (a five-year range, not your age) and experience level
  • your race type (such as "Ironman"), race date and the number of weeks to go. We don't send the name you gave your race.
  • which kinds of training zones you have, as yes or no only
  • your weekly hours, the minutes you have free on each day and your preferred rest days
  • your equipment: power meter, heart-rate strap, smart trainer, pool and open-water access, as yes or no
  • your preference notes, but only the sentences that pass our safety screen and contain no health, injury, medication, diet or weight terms, with names, email addresses, phone numbers and links removed
  • session details: day, sport, type, intensity, duration, title and whether it is a key session
  We never send your name or email, or any heart-rate, power or pace values. Our rules engine checks every change; the AI can't make sessions longer or harder.
• We ask first. Nothing is sent to an AI provider until you agree in the app. You can turn AI off at any time in Account → Privacy; the coach and your plan keep working with our built-in rules.
• It's optional. You can use every other part of IRONOS without the AI coach.

8. Who we share information with

We share personal information only with the service providers who help us run IRONOS, and only what each one needs.

• Cloudflare, Inc. Hosting, database, web delivery and network security. Receives everything we hold (section 2). Our database is hosted on Cloudflare's network. Requests and cached copies can be handled in Cloudflare data centres worldwide. Cloudflare is a US company.
• UltimateAI. AI coach replies (main provider). Receives chat messages and the training summary (section 7). Outside Australia.
• Cloudflare Workers AI. AI coach replies (backup). Receives chat messages and the training summary (section 7). Cloudflare's network.
• Our email delivery provider. Sends sign-in and account emails. Receives your email address and the email content. May be outside Australia.
• Google LLC. Sign in with Google (only if you use it), Google Play app distribution, and web fonts on our website. Receives sign-in data, and your IP address and browser details when fonts load. United States and worldwide.
• Apple Inc. Sign in with Apple (if offered) and App Store distribution. Receives sign-in data. United States and worldwide.

We may also disclose personal information:

• when the law requires or allows it, for example under a court order
• where we reasonably believe it's necessary to lessen or prevent a serious threat to someone's life, health or safety
• if IRONOS is sold or restructured. The new owner would have to keep protecting your information as this policy describes, and we'd tell you first.
• when you ask us to, for example when you share your week or share your activity with friends.

IRONOS doesn't monitor you in real time and doesn't contact emergency services for you.

IRONOS is free and doesn't take payments. If we introduce paid plans, we'll update this policy before we do.

9. Information sent overseas

Some of our providers handle information outside Australia:

• AI coach. UltimateAI (outside Australia) and, as a backup, Cloudflare Workers AI (Cloudflare's global network).
• United States. Cloudflare (a US company). Google and Apple (sign-in, app stores, web fonts).
• Cloudflare's global network. Your information may be handled in Cloudflare data centres in other countries while it's in transit or cached.
• Email. Our email delivery provider may handle sign-in emails outside Australia.

We send each provider only what it needs. Nothing goes to an AI provider unless you send the coach a message.

10. Apple Health and Health Connect

Health Connect (Android). IRONOS's use of information received from Health Connect will adhere to the Health Connect Permissions Policy, including the Limited Use requirements. Data we receive from Health Connect is:

• used only to provide the features you can see in IRONOS: readiness, plan adaptation, workout matching, progress and streaks, and, if you turn on activity sharing, showing your workouts to your friends
• never used for advertising, never sold, never given to data brokers, and never used to decide whether you're creditworthy or eligible for a loan
• not shared with third parties except as needed to provide those features (our service providers in section 8, including our AI provider if you use the coach), to comply with the law, or for security
• not read by people, unless you ask us to (for example for support), it's needed for security or the law, or it's been aggregated so it can't identify anyone.

Apple Health (iPhone). Data we read from Apple Health is used only to provide IRONOS's training features. It is:

• never used for advertising, marketing or data mining
• never sold
• never stored in iCloud by us
• not shared with third parties except as needed to provide IRONOS (our service providers in section 8), or when you choose to share your workouts with friends.

Turning off access in Apple Health or Health Connect stops new data reaching us. Data already synced stays in your IRONOS account until you delete those workouts or your account.

11. Cookies, browser storage and your device

• Website and web app. We use first-party cookies only. ironos_session keeps you signed in. ironos_ref remembers an invite link for 30 days. See our Cookie Policy.
• Browser storage. The web app saves one small setting in your browser: which health-data connections you've switched on.
• What we don't use. No advertising, analytics or other third-party cookies.
• On your phone. The app keeps a copy of your plan, today's screen and your coach chat transcripts. Your sign-in is kept in the iPhone Keychain, or in the app's private storage on Android.
  • If your device is backed up (for example to iCloud or Google), those backups may include this data.
  • Deleting the app removes it from the device.

12. How we protect your information

• All connections to IRONOS are encrypted with TLS.
• Passwords are stored as salted PBKDF2-SHA-256 hashes. Session cookies are HttpOnly and Secure.
• Repeated failed sign-ins temporarily lock an account.
• Only the founder has administrative access. Admin functions use a separate secret key.
• We collect only what we need, and we delete data on the schedule in section 13.

No system is perfectly secure. If a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires.

Please keep your device locked and your password private. If you find a security problem in IRONOS, please email us.

13. How long we keep it

• Account, profile, health and training data: while your account is open.
• After you delete your account: there's a 30-day grace period, and you can ask us to cancel the deletion during it. Then your data is permanently deleted from our live database. Short-term database recovery copies roll off automatically after that.
• Agreement records (your typed signature name, the document version, the date, your IP address and device type): kept after your account is deleted, in case of a legal claim.
• Chat text: not stored on our servers.
• Daily chat usage counts: 60 days.
• Coach suggestions: expire after 24 hours, and are deleted with your account.
• Friendships, friend requests and kudos: until you or your friend remove the friendship, or until your account is deleted.
• Security log and sign-in records: while your account is open. Deleted with your account.
• Rate-limit records: until they expire (minutes to hours).
• Waitlist entries: until you unsubscribe or ask us to remove you.
• Aggregate statistics (no personal information): indefinitely.
• Emails you send us: as long as we need them to deal with your request and keep a record of it.

14. Your rights and choices

• Get a copy of your data. In the app: Account → Export my data (a JSON file). Or email us.
• Correct your data. Edit your profile and intake in the app, or email us.
• Delete your account and data. In the app: Account → Delete account. Or see how to delete your account, which includes deleting by email.
• Delete individual workouts. Open the workout in the app and delete it.
• Stop health data syncing. Turn off IRONOS in Apple Health or Health Connect settings.
• Stop location access. Turn off location for IRONOS in your phone's settings. You won't be able to record runs.
• Stop using the AI coach. Just don't use the chat. Nothing is sent to an AI provider unless you send a message.
• Stop sharing with friends. Friends → ⋯ → turn off Share my activity, or remove a friend.
• Stop product emails. Use the unsubscribe link in any product email.
• Ask for a human review of an automated decision. See section 6.
• Use a nickname. Your display name doesn't have to be your real name. We do need a working email address, and your waiver signature should be your real name.

We'll respond within 30 days. Access and correction are free. We may need to confirm your identity first. If we refuse a request, we'll tell you why and how to complain.

15. Complaints

Please contact us first at rudrakshswebsite@gmail.com. We'll acknowledge your complaint within 7 days and aim to resolve it within 30 days.

If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. If your complaint is about health information, you may also be able to complain to the Health Complaints Commissioner (Victoria) at hcc.vic.gov.au.

16. Age limit

IRONOS is only for people aged 18 and over. We don't knowingly collect information from anyone younger. Our systems reject profiles with an age under 18. If you think someone under 18 has an account, email us and we'll delete it.

17. If you're outside Australia

IRONOS is built for athletes in Australia. If you use it from another country, your information is handled as this policy describes and stored as set out in sections 8 and 9.

18. Changes to this policy

When we make a significant change, we'll tell you in the app and by email before it takes effect, and ask you to accept the new version. Significant changes include a new kind of information, a new purpose, or a new provider receiving health information. Small fixes, such as typos or a new contact address, just update the date at the top.

Previous versions are available on request.

19. Contact us

IRONOS is run by a sole trader based in Melbourne, Victoria, Australia.

Email: rudrakshswebsite@gmail.com