Ironstride Consumer Health Data Policy
Effective date: October 2026
This policy explains how Ironstride handles consumer health data: what we collect, why, where it comes from, who receives it, how long we keep it, and your rights. It adds to our Privacy Policy, which covers all the information we handle.
"Ironstride", "we", "us" and "our" mean the developer of the Ironstride app, named in our Privacy Policy. Ironstride has no affiliates (no other companies under common control).
Washington and Nevada law give their residents specific rights over consumer health data. We give the same rights to everyone who uses Ironstride, wherever you live.
1. What we count as consumer health data
Consumer health data is information linked to you that describes your physical health. In Ironstride, we treat all of these as consumer health data:
- heart rate summaries;
- workouts you bring in from Apple Health, and their import receipts;
- your workouts and moving minutes;
- health pauses;
- strength sessions;
- precise location in your saved routes, route previews and the routes you plan.
We do not collect your live location, raw heart rate readings, full Apple Health routes, or the full GPS track of a workout you have not saved as a route or route preview. Those stay on your phone. We never ask about diagnoses, symptoms or medications.
2. What we collect, why, and how we use it
| Data | What it is | Why we use it |
|---|---|---|
| Heart rate summaries | For a workout with heart rate: your average and maximum heart rate, how much of the workout had a reading, time in the Easy, Steady and Hard zones, and the max heart rate you set | To show your effort zones and your history |
| Apple Health imports and receipts | Workouts you bring in from Apple Health (sport, distance, time, start time, moving time). A receipt with the Health workout's id, whether it came from an Apple Watch, and whether it was typed in by hand | To add your Health workouts to your history and progress. The receipt stops a workout you deleted from coming back |
| Workouts and moving minutes | For each workout: the sport, distance, time, start time and time zone, your moving time and when you were moving or paused, a few fair-play numbers (such as top speed and GPS gaps, with no map positions), and any private note. Workouts you import from Strava or other apps (history only) | Your history, daily goal, streaks, medals, campaign miles and long road, and keeping progress fair |
| Health pauses | The days you pause your streaks for illness or injury. We do not ask why | To keep your streaks safe while you rest |
| Strength sessions | The day and time zone of each session, each set (exercise and reps or seconds), exercise names you add, and a running timer | Your strength log and Strides |
| Precise location in routes | Saved routes: the full line, including the start and finish, which can be your home. Route previews, if you turn them on: a copy of each new workout's line. Routes you plan on the map. Imported workouts: a simplified route line. Racing a saved route: your points are checked once to time the race, then thrown away | To show your routes on all your devices and on the "Where I've been" map, to plan routes, and to time races fairly |
How we process it.
- We store it in our database, hosted in the United States.
- We turn it into the totals, zones, streaks and progress you see.
- We copy it into our encrypted daily backups.
- We delete it when you ask (section 6).
Each person can read only their own consumer health data. Your crew sees only your campaign progress (section 4).
We use consumer health data only to provide the features you ask for, to keep Ironstride fair and secure, and to recover Ironstride from our backups after a problem.
We never use it for advertising, marketing or data mining. We never sell it. We do not use it to train artificial intelligence.
3. Where it comes from
- You, when you record a workout, add one by hand, log a strength session, pause for health, save or plan a route, or turn on route previews.
- Your phone's sensors: GPS while you record, and a Bluetooth heart rate strap if you connect one.
- Apple Health, only if you turn on Bring in my workouts. This can include workouts recorded by other apps and by your Apple Watch.
- Files you choose to import (a Strava archive, or GPX, TCX and FIT files). They are read on your device.
We do not buy consumer health data, and we do not get it from data brokers or other companies.
4. Who sees it, and who we share it with
We never sell consumer health data. We do not share it for advertising.
Your crew
When you join a campaign, your crew sees your progress on the campaign road, which comes from your workouts:
- your campaign miles;
- the day you reached each place;
- when you were last active, rounded to Today, This week or Earlier.
If a campaign's creator approves hand-entered miles, that creator sees each hand entry's callsign, sport, miles and date.
Your crew never sees your heart rate, routes, location, strength sets, health pauses or your list of workouts. You choose this by joining a campaign, and you can leave at any time.
Service providers that handle consumer health data for us
These companies store or handle consumer health data only to run Ironstride for us, under contracts that limit what they can do with it:
| Who | What they handle | Contact |
|---|---|---|
| Supabase (our database, sign-in and server host, in the United States) | All the consumer health data in section 2 that reaches our server | privacy@supabase.com |
| HeiGIT gGmbH, openrouteservice (route planning) | The points of a route you plan or edit, which can be near your home. The request comes from our server, with no account, name or email, and not your phone's internet address | eprivacy@heigit.org · Schloss-Wolfsbrunnenweg 33, 69118 Heidelberg, Germany |
| Google, Google Drive (backup storage) | Our encrypted daily backups. Google stores the locked files but cannot open them | Google privacy form |
Backup route service
If openrouteservice is not available, our server sends the same planned points to FOSSGIS e.V. (routing.openstreetmap.de), so your route can still be built. FOSSGIS is an independent association in Germany. It runs a free public routing service built on OpenStreetMap data. It is not our service provider: we have no contract with it, and its own privacy statement applies. FOSSGIS says it saves route requests in its server log.
- What it receives: the points of a walk, run, hike or bike route you plan or edit, which can be near your home, and whether the route is on foot or by bike. Also the town points of a campaign road or your long road.
- What it never receives: your account, name or email, your phone's internet address, your recorded workouts or tracks, or your heart rate. The request comes from our server and carries only Ironstride's name and support address.
- Contact: fossgis-routing-server@openstreetmap.de.
We send only the points of the route you are planning, never a recorded track. If you edit a route you saved from a workout, the points come from that saved route.
Apple Health, on your phone
If you turn on Save my workouts to Apple Health, Ironstride writes your recorded walks, runs, hikes and rides, with distance and the full route, to Apple Health on your phone. Apple Health is your own store, under your control and Apple's rules. Copies stay there until you delete them in the Health app. Apple: privacy contact.
Map services
While a map is open, the map service sees the area shown. This can be the area around you while you record. Map services do not receive your workouts, heart rate or saved routes as data.
- Apple Maps, on iPhone: Apple privacy contact.
- Google Maps, in the Android app: Google privacy form.
- OpenTopoMap, only if you choose the Topo map layer. It also sees your phone's internet address: stefan@opentopomap.org.
Providers that never receive consumer health data
- Google, Gmail: sends sign-up and password emails (your email address only), and holds the emails you send us. Please don't email us health details we don't need. Contact: Google privacy form.
- Resend (Plus Five Five, Inc.): sends us one daily email with totals only, never information about any one person. Contact: privacy@resend.com.
Other cases
- When the law requires it. We may disclose consumer health data if the law requires it, for example a valid court order, or to protect someone's safety.
- If Ironstride changes hands, your consumer health data would move under this policy. We would tell you first.
- No one else. No third party collects consumer health data about your activity over time or across other websites and apps through Ironstride or our help site.
5. Your consent
- We collect consumer health data only to provide the features you ask for, or with your consent.
- Apple Health, location and a heart rate strap each need your permission, which your phone asks for first. Apple Health is off until you turn it on.
- Route previews are off until you turn them on in Settings.
- You can withdraw consent at any time: turn the switch off in Ironstride, remove Ironstride's access in the Health app or in iPhone Settings, or leave a campaign. We then stop collecting or sharing that data.
- Withdrawing consent does not delete data we already hold. To delete it, see section 6.
6. Your rights
You can:
- Confirm and see your data. Ask whether we collect, share or sell your consumer health data (we never sell it), and get a copy. We include a list of every company we shared it with and how to contact them (section 4). Much of it is in the app: Settings, Your data, Download my data. For a full copy, including heart rate summaries and Health receipts, email us.
- Correct it. Delete a wrong workout and add it again, or email us and we will fix it.
- Delete it, in the app (below) or by email.
- Withdraw your consent (section 5).
To delete in the app:
- A workout: open it, tap the options button, then Delete workout.
- A saved route: open it, then Delete route.
- Route previews: Settings, turn off Route previews, then Remove route previews.
- Workouts brought in from Apple Health: Connected devices, Remove Apple Health imports.
- Everything: You, then your profile, then Delete account.
What deletion covers.
- Deleting in the app removes the data from our database at once, and so from Supabase, which hosts it.
- We tell any other service provider that holds your data to delete it.
- Copies in our encrypted backups, on our own computer and in Google Drive, are gone within about 44 days.
- Our host's own backups, if any, are gone within 7 days.
- Copies you saved to Apple Health stay there until you delete them in the Health app.
How to make a request
- In the app, using the steps above.
- By email to support@ironstride.app. This is our designated request address. Write from the email address on your account and tell us what you want.
We may ask you to confirm that the request comes from you, for example by replying from your account's email address. We never ask for a password.
Our deadlines start on the day we receive your request. Confirming that the request comes from you does not add time.
- We answer within 45 days of receiving your request.
- If we need more time, we will tell you why before those 45 days end, and take at most 45 more days.
- We delete data usually right away. We always delete within 30 days of confirming a deletion request, and never later than the answer deadline above.
- In Canada, we answer a request to see your information within 30 days of receiving it. Our Privacy Policy explains your rights in Canada.
Requests are free, at least twice a year.
7. Appeals
If we turn down your request, in whole or in part, we will tell you why.
To appeal, reply to our answer, or email support@ironstride.app with "Appeal" in the subject line. We will answer your appeal in writing within 45 days of receiving it and explain our decision.
If we deny your appeal, you can complain to your state's Attorney General:
- Washington: Washington State Office of the Attorney General, online complaint form, or call 1-800-551-4636 (in Washington) or 206-464-6684.
- Nevada: Nevada Office of the Attorney General, Bureau of Consumer Protection, online complaint form, or call (888) 434-9989 or (702) 486-3132.
- Other states: find your Attorney General at naag.org.
8. How long we keep it
| Data | How long |
|---|---|
| Heart rate summaries | Until you delete the workout or your account |
| Workouts, moving minutes and strength sessions | Until you delete them or your account |
| Apple Health import receipts | Until you delete your account. They stay after a single workout is deleted, so it is not brought in again |
| Health pauses | Until you delete your account |
| Saved routes and route previews | Until you delete them or your account |
| Points sent to time a race | Not kept. Only the result and times are kept |
| Records used to keep progress fair after you delete a workout (its time window and counted miles, no heart rate or location) | 35 days |
| Encrypted backups | Up to about 44 days |
9. How we protect it
- Our database lets each person read only their own heart rate summaries, Health receipts, health pauses, strength sets, saved routes and route previews.
- Information travels over encrypted connections (HTTPS).
- Our daily backups are encrypted with AES-256 and a passphrase that only we have.
- Raw heart rate readings stay on your phone, protected by iPhone's file protection.
- Only the developer can open our database and owner tools. The owner tools never show routes, places or heart rate.
- There are no advertising, third-party analytics or tracking tools in the app.
- We do not set up geofences around health care facilities.
10. Changes to this policy
We will change the effective date at the top when we update this policy. If a change is important, we will tell you in the app before it takes effect. If the law requires it, we will ask for your consent again.
11. Contact
Email: support@ironstride.app (our designated request address)
Our Privacy Policy covers everything else.