Privacy Policy

Last updated: August 30, 2026

1. Who we are (Controller)

AIron ("we") is the data controller for personal data processed through the AIron web and mobile application. Contact: support@airon.coach.

2. What we collect

  • Account data — email address and display name, provided when you sign in.
  • Profile data — age, gender, height, weight, goals, activity level, dietary preferences and language — all optional and entered by you.
  • Training data — workouts, exercises, sets, cardio activities, plans and body measurements you log.
  • Nutrition data — meals, portions, water intake, supplements, recipes, shopping lists and any food photos you upload.
  • Camera & photos — meal, fridge and progress photos you choose to capture or upload, and camera access for barcode scanning. The camera is active only while those features are open.
  • Voice & audio — when you tap the microphone to dictate in a chat, your speech is transcribed into text — usually directly in the browser; if browser dictation is unavailable, the recording is sent to our transcription service. Recording starts only when you press the microphone button.
  • Content you create — chat messages with the AI coach, team messages, posts, comments and support tickets.
  • Error reports — when something crashes, we automatically send the error message, the technical stack trace, the page path (never the query string), your screen size and browser version. This contains no screen recording, no screenshot and none of your content, and nothing is stored on your device to do it. It runs for everyone, because a diagnostic report is our legitimate interest in keeping the app working (section 4) — not something we ask cookie consent for. We remove email addresses and tokens from these reports before they are sent.
  • Technical data — application logs (errors, actions) and analytics events — analytics only if you consent to analytics cookies.
  • Payment data — handled entirely by our payment providers; we store only the subscription status and a provider customer id, never card numbers.

3. Health-related data (special category)

Weight, body measurements, nutrition and training logs can reveal information about your health. We process this data only on the basis of your explicit consent, given by choosing to enter it, and only to deliver the features you use. You can withdraw consent at any time by deleting the data or your account.

4. Why we process it (legal bases)

  • Contract (Art. 6(1)(b)) — to provide the app: storing your logs, plans, teams and coaching features.
  • Consent (Art. 6(1)(a), Art. 9(2)(a)) — health-related data, analytics cookies, optional messaging channels (Telegram/WhatsApp) and marketing emails.
  • Legitimate interest (Art. 6(1)(f)) — security, abuse prevention and error logging.
  • Legal obligation (Art. 6(1)(c)) — accounting records for paid subscriptions.

5. AI processing

When you use AI features (coach chat, plan generation, photo meal analysis, fridge analysis), the relevant content — your message and a limited context of your recent training and nutrition data — is sent to our AI processors to generate a response. It is not used to train public models. AI output is informational only and is never medical advice.

  • You are talking to an AI — the AI Coach chat in the app and the Telegram/WhatsApp coach are AI systems, not human coaches, and they say so in the chat itself (EU AI Act Art. 50).
  • AI-generated content — plans, meal estimates, fridge suggestions and coach replies are generated automatically. They can be inaccurate or incomplete — always check anything that affects your health.
  • Human coaches are separate — messages with a real coach or team happen in team chat and direct messages, which are never answered by AI on your coach's behalf.
  • No automated decisions about you — we do not use AI to make legally significant decisions about you, and no emotion recognition or biometric categorisation is performed.

6. Who we share data with (processors)

  • Base44 — application hosting, database, file storage and the AI gateway.
  • OpenRouter — AI model routing used to generate coaching responses, plans and food analysis.
  • Stripe / PayU — payment processing for subscriptions and top-ups.
  • Email and messaging providers — transactional email and, if you connect them, Telegram/WhatsApp.
  • Analytics — consent-gated Google Analytics 4 and Base44 platform analytics, loaded only after you accept analytics cookies (where applicable).

We never sell your personal data. Transfers outside the EEA rely on the EU Standard Contractual Clauses.

7. Coaches and teams

If you join a team, you control what is shared: visibility of your workouts, body metrics and goals, calendar editing and other coaching permissions are all OFF until you approve each request. You can revoke any permission at any time in the team settings. Leaving a team stops future sharing.

8. How long we keep it

We keep your data for as long as your account exists. When you delete your account, your personal data and content are deleted; anonymised or aggregated records and legally required accounting records may be retained. Application error logs are kept for a limited period for security and debugging.

9. Your rights

You have the right to access, rectify, erase, restrict and object to processing, and the right to data portability and to withdraw consent at any time.

  • Export — Settings → Billing → export your data (machine-readable file).
  • Delete — Settings → Billing → Danger Zone → delete account, which removes your data. Public instructions: https://airon.app/AccountDeletion
  • Complaint — you may lodge a complaint with your supervisory authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).

10. Cookies

We use essential cookies and local storage to keep you signed in and remember your preferences — these are always on because the app cannot work without them. Analytics cookies and the support widget load only if you accept them in the cookie banner, and you can change your choice at any time. Automatic error reports (section 2) are not covered by this choice, because sending one neither reads nor writes anything on your device.

11. Children

The Service is not intended for children under 16. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

12. US State Privacy Rights

If you live in a US state with a privacy law (e.g. California, Virginia, Colorado, Washington), the rights in section 9 apply to you, and in particular:

  • We do not sell your personal data, and we do not share it for cross-context behavioral advertising.
  • Consumer health data — we collect health-related data only with your consent, only to provide the features you use, and we never sell it. You can withdraw consent and delete this data at any time (Settings → Billing → Danger Zone → delete account).
  • We do not discriminate against you for exercising any of your privacy rights.

13. Changes and contact

We may update this policy; material changes will be announced in the app. Questions or requests: support@airon.coach. See also our Terms of Service.

© 2026 AIron — AI Fitness Coach