Privacy Policy

The data controller for personal data processed through the AIron web and mobile application is the person named at the top of this document ("we"). Contact: support@airon.coach.

• Account data — email address and display name, provided when you sign in.
• Profile data — age, gender, height, weight, goals, activity level, dietary preferences and language — all optional and entered by you.
• Training data — workouts, exercises, sets, cardio activities, plans and body measurements you log.
• Nutrition data — meals, portions, water intake, supplements, recipes, shopping lists and any food photos you upload.
• Camera & photos — meal, fridge and progress photos you choose to capture or upload, and camera access for barcode scanning. The camera is active only while those features are open.
• Voice & audio — when you tap the microphone to dictate in a chat, your speech is transcribed into text — usually directly in the browser; if browser dictation is unavailable, the recording is sent to our transcription service, which runs through Base44 (section 6). Recording starts only when you press the microphone button.
• Content you create — chat messages with the assistant, team messages, posts, comments and support tickets.
• Error reports — when something crashes, we automatically send the error message, the technical stack trace, the name of the screen where it happened (never the query string or any ID in the address), your screen size and browser version. So that the report can be acted on, it also carries the app version, whether the app was running in a browser or inside an app, the app language, your account type (athlete, coach or admin) and plan, a pseudonymous account code (derived from your account ID so that we can find your reports if you tell us something broke — it is not your name or email), a random code for that visit, whether your device was online, the names of the last 10 screens you opened and the internal names of the buttons you tapped there (never their labels or anything you typed), and the names and error codes of the last 3 requests to our servers that failed. This contains no screen recording, no screenshot, nothing you typed and none of your training, nutrition or health data, and nothing is stored on your device to do it. It runs for everyone, because a diagnostic report is our legitimate interest in keeping the app working (section 4) — not something we ask cookie consent for. We remove email addresses and tokens from these reports before they are sent.
• Technical data — application logs (errors, actions) and analytics events — analytics only if you consent to analytics cookies.
• Push notifications (iPhone app) — if you allow notifications in the iPhone app, we store the push token of your device with its language, time zone and app version, so that we can tell you about a new message from your coach or a reminder. Apple (Apple Push Notification service) delivers the notification, and it carries only generic text such as "New message from your coach" — never the message itself, a name, or any training, nutrition or health data; the app shows the content after you open it. You can turn notifications off at any time in your iPhone settings, and signing out unlinks the device. The token is deleted with your account; a technical log of sent notifications, linked to your account (type, result and internal record ids only, no content), is kept for 30 days and removed in a weekly clean-up.
• Funnel counts — when you finish a sign-up step — completing onboarding, asking to join or joining a team, or generating your first plan — our server records a count of that step: which step, which path (athlete, coach or team invite) and how old the account is in broad bands (under a day, a week, a month, older). The count holds no name, email, account ID, team or device details, and nothing is read from or stored on your device to make it. It is our legitimate interest in seeing where people get stuck signing up (section 4), so it is counted whether or not you accept analytics cookies. Each count is deleted after 13 months.
• Payment data — handled entirely by our payment providers; we store only the subscription status and a provider customer id, never card numbers.

Weight, body measurements, nutrition and training logs can reveal information about your health. We process this data only on the basis of your explicit consent, given by choosing to enter it, and only to deliver the features you use. You can withdraw consent at any time by deleting the data or your account.

• Contract (Art. 6(1)(b)) — to provide the app: storing your logs, plans, teams and coaching features.
• Consent (Art. 6(1)(a), Art. 9(2)(a)) — health-related data, analytics cookies, optional messaging channels (Telegram) and marketing emails.
• Legitimate interest (Art. 6(1)(f)) — security, abuse prevention, error logging and counting how many people complete each sign-up step.
• Legal obligation (Art. 6(1)(c)) — accounting records for paid subscriptions.

When you use AI features (chat with the assistant, plan generation, photo meal analysis, fridge analysis), the relevant content — your message and a limited context of your recent training and nutrition data — is sent to the AI providers named in section 6 to generate a response. It is not used to train public models. AI output is informational only and is never medical advice.

• Who receives it — Base44 (our platform and AI gateway); Anthropic (Claude) and Google (Gemini) for the assistant chat and meal analysis; OpenRouter, which by default routes to Google (Gemini) or DeepSeek, for dictated-workout parsing, progression forecasts and assistant context; and ElevenLabs for spoken workout cues. What each one receives, and why, is in section 6.
• You are talking to an AI — the assistant chat in the app and the assistant on Telegram are AI systems, not human coaches, and they say so in the chat itself (EU AI Act Art. 50).
• AI-generated content — plans, meal estimates, fridge suggestions and the assistant's replies are generated automatically. They can be inaccurate or incomplete — always check anything that affects your health.
• Human coaches are separate — messages with a real coach or team happen in team chat and direct messages, which are never answered by AI on your coach's behalf.
• No automated decisions about you — we do not use AI to make legally significant decisions about you, and no emotion recognition or biometric categorisation is performed.

• Base44 — application hosting, database, file storage and the AI gateway: it relays the assistant's and the AI features' requests to the model providers below and selects the model itself for some features, including AI features (for example speech-to-text for dictation, and meal or plan analysis) that Base44 runs for us through its own model providers.
• Anthropic (Claude) — AI model provider for the assistant chat, reached through Base44. It receives your messages, any photo you attach, and the limited context of your training and nutrition data the assistant needs to answer.
• Google (Gemini) — AI model provider. It analyses the meals you describe (through Base44), can power the assistant chat when we select a Gemini model, and is a default model behind OpenRouter. It receives the content of the feature it serves.
• OpenRouter — AI model routing for dictated-workout parsing, progression forecasts and assistant context. By default it routes to a Google (Gemini) or DeepSeek model, which then receives the request (your dictated workout, or an exercise name and your recent sessions of it). If we select a different model for a feature, that model's provider receives the request instead, and we update this section.
• ElevenLabs — text-to-speech for spoken workout cues in the workout player. It receives only the short phrase to be spoken (an exercise name and a time, for example "Plank. 30 seconds."), never your account details; the generated audio is stored and reused.
• Cloudflare (AI Gateway) — and the model it routes to: used only by an internal administrator tool that matches exercise names people typed to our exercise library. They receive the exercise names only — no personal data, no account identifier and no other account data. They are not recipients of your account data.
• Stripe / PayU — payment processing for subscriptions and top-ups.
• Email and messaging providers — transactional email and, if you connect it, Telegram.
• Analytics — consent-gated Google Analytics 4 and Base44 platform analytics, loaded only after you accept analytics cookies (where applicable).
• AI assistants you connect yourself — if you mint an API token, pair an assistant, or approve an app at /AuthorizeApp (ChatGPT, Claude, or a script of your own), everything the token permits is sent to whoever operates that assistant, each time it asks. They are recipients you chose rather than processors acting for us, so their own privacy terms govern what they then do with it, and that can include progress photos if you grant the photo permission. Every connection is listed and revocable at /ApiAccess.
• Apple (Apple Push Notification service) — delivers the notifications of the iPhone app, if you allow them. It receives the push token of your device and the notification itself, which carries only generic text such as "New message from your coach" — never a message, a name, or any training, nutrition or health data (section 2).

We never sell your personal data. Transfers outside the EEA rely on the EU Standard Contractual Clauses.

When you join a team as an athlete, the team's owner and trainers ("your coaches") get access to your data so they can coach you. This applies to coaching teams and community teams alike. Before you join, the app shows you what they will be able to see and change and asks you to confirm it by ticking a box.

• What they can see — your workouts, training calendar and cardio, your nutrition log, your body measurements and progress photos, your strength goals and your habits; your profile details, including age, gender, height, weight, goals, diet settings and any health notes you entered; the answers you give in the team's intake and check-in forms; your messages with them; and when you last trained.
• What they can change — by default they can create, plan and edit your workouts and training calendar, and edit your nutrition log and meal plans. Through AIron's coach assistant (for example in Telegram), a coach can also log entries such as meals, workouts or body measurements for you.
• Your switches — Settings → Privacy & Safety → Coach access lists each team you belong to as an athlete, with a switch for each of these permissions. You can turn any of them off at any time, and a switch you turn off stays off. The switches control only some of the coach views: your profile details, form answers and messages stay visible to the team's owner and trainers while you are a member, the coach's calendar still shows your workouts and meals, and AIron's coach assistant still reads your workouts, meals and body measurements when a switch is off.
• Leaving a team — leaving the team ends its owner's and trainers' access to your account through the team from then on. They keep what they already have: your messages with them, the form answers you submitted to the team, and the workouts and plans they created for you, including results you later log on those plans.

We keep your data for as long as your account exists. Data held in accounts that have been inactive for an extended period may be removed, or reduced in detail, to preserve storage; we give reasonable advance notice to your account email before that happens, and signing in again resets the inactivity period. You can export your data at any time (section 9). When you delete your account, your personal data and content are deleted; anonymised or aggregated records and legally required accounting records may be retained. Application error logs are kept for a limited period for security and debugging. Funnel counts (section 2) are not tied to your account, so they are not removed with it; each is deleted after 13 months.

• Files you upload — on a Free plan account we may remove them under section 6 of the Terms of Service: case by case, never automatically, after at least 30 days' notice and with a way to download them. On a paid plan we keep them for as long as the plan is active.

You have the right to access, rectify, erase, restrict and object to processing, and the right to data portability and to withdraw consent at any time.

• Export — available in the web app (airon.app → Settings → Privacy & Safety → export your data, a machine-readable file) or by email to support@airon.coach.
• Delete — Settings → Privacy & Safety → Danger Zone → delete account, which removes your data. Public instructions: https://airon.app/AccountDeletion
• Complaint — you may lodge a complaint with your supervisory authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).

We use essential cookies and local storage to keep you signed in and remember your preferences — these are always on because the app cannot work without them. Analytics cookies and the support widget load only if you accept them in the cookie banner, and you can change your choice at any time. Automatic error reports and funnel counts (section 2) are not covered by this choice, because sending one stores nothing on your device and reads nothing from its storage — no cookies, no local storage.

The Service is not intended for children under 16. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

If you live in a US state with a privacy law (e.g. California, Virginia, Colorado, Washington), the rights in section 9 apply to you, and in particular:

• We do not sell your personal data, and we do not share it for cross-context behavioral advertising.
• Consumer health data — we collect health-related data only with your consent, only to provide the features you use, and we never sell it. You can withdraw consent and delete this data at any time (Settings → Privacy & Safety → Danger Zone → delete account).
• We do not discriminate against you for exercising any of your privacy rights.

We may update this policy; material changes will be announced in the app. Questions or requests: support@airon.coach. See also our Terms of Service.