Back

Irongate Privacy Policy

Effective date: July 27, 2026

Last updated: July 27, 2026

Irongate ("Irongate," "we," "us") is operated by Davenports LLC, a Connecticut limited liability company. This policy explains what we collect through the Irongate app, why, and what you can do about it.

1. Who can use Irongate

Irongate is intended for users 17 and older. We do not knowingly collect personal information from anyone under 13, and if we learn we have, we'll delete it.

2. What we collect

Account information: email address, display name, password (stored hashed, never in plain text), and an optional referral/founder code.

Content you create: priorities, habits and habit-completion history, goals, milestones, daily action plans, calendar/schedule entries, workout and nutrition logs, and any posts, comments, or activity you share in the social/accountability features ("Your Corner," Feed).

Accountability/social data: if you connect with other users for accountability, we share the subset of your activity you post or that connection-visibility settings expose (e.g., streaks, workout completions) with the people you're connected to. We do not share this outside your connections without your action.

Payment information: if you subscribe to Irongate Premium, payment is processed entirely by Apple through the App Store. We do not receive or store your card details — we receive only a subscription status/receipt token from Apple to confirm your entitlement.

Usage data: basic app-usage events (e.g., feature opened, action completed) to understand what's working. No third-party advertising trackers.

AI Coach conversations: if you use the AI Coach feature, your messages and the relevant snapshot of your logged data (habits/nutrition/schedule summary) are sent to our AI provider (currently Anthropic) to generate a response. See §5.

Health data from Apple Health (opt-in): if you connect Apple Health in Settings, we read steps, active calories, heart rate, distance, and workouts to power the Fitness dashboard and Habits' auto-complete-from-Health feature. This requires your explicit permission through iOS's own Health permission prompt in addition to the in-app opt-in — you can revoke it at any time in iOS Settings → Privacy & Security → Health. We never write anything back to Apple Health.

3. What we don't collect (yet, and won't without updating this policy)

Location data, contacts, or photos/camera. If we add any of these, this policy will be updated first and you'll be asked for the relevant permission.

4. Why we collect it

  • To provide the core features (calendar, habits, goals, priorities, tracking)
  • To power the AI Coach's personalized responses
  • To enable the accountability/social features you opt into
  • To process your subscription through Apple
  • To fix bugs and improve the app
  • To communicate with you about your account (not marketing unless you opt in)

5. Who we share it with

  • Supabase (our database and authentication provider) — hosts all app data. Governed by Supabase's own security practices; data is encrypted in transit and at rest.
  • Apple — processes all subscription payments; we never see your payment method.
  • Anthropic (Claude API) — receives your AI Coach messages and the data snapshot needed to answer them, only when you use that feature. Not used to train Anthropic's models beyond their standard API data-use terms at the time of your use.
  • We do not sell your data. We do not share your health, fitness, or nutrition data with advertisers, data brokers, or insurers.
  • We may disclose data if legally required to (e.g., a valid subpoena) — see §8 for how we handle this.

6. Your rights

You can, at any time:

  • Export your data (request via irongate.app.support@gmail.com until an in-app export exists)
  • Delete your account and all associated data in-app under Settings → Account → Delete Account
  • Correct inaccurate account information
  • Opt out of any non-essential communications

California and EU residents have additional rights under the CCPA and GDPR respectively (access, deletion, portability, and the right to lodge a complaint with a supervisory authority); contact us at irongate.app.support@gmail.com to exercise them.

7. Data retention

We keep your data as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we're legally required to retain it longer (e.g., financial records tied to subscriptions).

8. Legal requests for data

If we receive a subpoena, warrant, or other legal demand for user data, we will: (a) verify its validity, (b) narrow it to the minimum required, and (c) notify the affected user unless legally prohibited from doing so. We do not proactively share data with law enforcement absent legal process.

9. Security

Data is encrypted in transit (TLS) and at rest. Access to production data is limited to what's operationally necessary. No system is perfectly secure; we'll notify affected users if a breach involving their data occurs, as required by law.

10. Changes to this policy

If we materially change what we collect or how we use it, we'll notify you in-app before the change takes effect.

11. Contact

irongate.app.support@gmail.com

Davenports LLC, Connecticut, USA