Effective Date: September 23, 2026
K2R2 Brands Private Limited ("K2R2 Brands," "we," "us," or "our"), which operates Iron Chapter, is the data controller for the personal data described in this policy and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Iron Chapter mobile application and website (collectively, the "Service").
Account Information: When you create an account, we collect your name, email address, and authentication credentials (managed via Apple Sign-In, Google Sign-In, or email/password through our authentication provider).
Profile & Health Data: To personalize your experience, we collect information you provide during onboarding and throughout app usage, including:
Wearable Device Data: If you connect a wearable device (Apple Health, Google Health Connect, Fitbit, Whoop, Strava, or Oura Ring), we sync health metrics including steps, heart rate, heart rate variability (HRV), sleep stages, SpO2, breathing rate, skin temperature, workouts, and weight where supported by that provider and visible in the app. This data is stored securely in our database and used solely to power your progress dashboard, recovery insights, and AI recommendations. We do not use or disclose HealthKit, Health Connect, or wearable health and fitness data for advertising, marketing, or use-based data mining.
Fitbit via Google Health: If you connect Fitbit, Iron Chapter requests read-only access through Google Health. With your permission, Iron Chapter imports and stores supported activity, workout, sleep, heart rate, and body measurements in your Iron Chapter account to show your Fitbit history and activity and recovery trends. Google Health imports are excluded from the wearable data sent to our AI coaching providers. We do not use Google Health data for advertising or AI model training.
Disconnect Fitbit in Connected Devices to stop future syncs. Previously imported data stays in your Iron Chapter account until it is deleted. You can request deletion using the options in Section 6. Iron Chapter's use of data received from the Google Health API adheres to the Google Health API Developer and User Data Policy, including its Limited Use requirements.
AI Conversation Data: Messages you send to our AI coach (Pulse) are processed to provide personalized coaching. We store conversation history to maintain context and improve your experience.
Voice Recording Data: When you choose voice logging or voice search, the audio you record is sent securely to a transcription provider (Groq or OpenAI) to convert your speech to text. Iron Chapter uses the transcript to complete the requested log or search. We do not intentionally store the recording in your Iron Chapter account as an audio file.
Support and Bug Report Data: If you contact support or submit a bug report, we collect the information you choose to provide, such as your message, app area, device details, and screenshots or logs you attach.
Purchase and Subscription Data: We process subscription status, product identifiers, purchase receipts, renewal state, and entitlement information through Apple, Google, and RevenueCat so we can unlock paid features and provide billing support.
Usage Data: We automatically collect device information, app usage patterns, crash reports, diagnostics, and performance metrics to improve the Service.
We use your information to:
Iron Chapter uses third-party AI services, including OpenAI and DeepSeek for coaching and plan generation, and Groq or OpenAI for voice transcription. When you interact with Pulse, relevant context from your profile and recent logs may be sent to the coaching provider to generate a response. When you use a voice feature, the selected recording is sent to the transcription provider to create text. We do not share your name, email, or account credentials with AI providers; only the health, nutrition, fitness, conversation, or voice data needed for the feature you requested is sent.
We may use aggregated, de-identified usage patterns to train and improve our own AI models in the future. This data cannot be used to identify you personally.
Your data is stored on Supabase, a secure cloud database platform with row-level security (RLS) policies ensuring that each user can only access their own data. All data is encrypted in transit (TLS 1.2+) and at rest.
Wearable authentication tokens (e.g., Fitbit OAuth tokens) are stored encrypted in our database and are never exposed to client-side code after initial exchange.
While we implement commercially reasonable security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security.
We do not sell your personal data. We may share information with:
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at [email protected]. You can also request account and data deletion at theironchapter.com/delete-account. We will respond within 30 days.
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain limited records for legal, tax, security, fraud prevention, or regulatory compliance. Anonymized, aggregated data may be retained indefinitely.
Iron Chapter is not intended for users under the age of 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with their data, please contact us at [email protected].
The Service may contain links to third-party websites or integrate with third-party services (e.g., wearable platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
Your data may be processed and stored in countries outside your country of residence, including the United States. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app and updating the "Effective Date" above. Continued use of the Service after changes constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or our data practices, contact us at:
K2R2 Brands Private Limited
(data controller, operator of Iron Chapter)
Email: [email protected]
Website: https://theironchapter.com