Ironstride Privacy Policy

Effective date: October 2026

This policy explains what information Ironstride collects, why, who receives it, and the choices you have. "Ironstride", "we", "us" and "our" mean Braydon Mikesell. Questions: support@ironstride.app.

The short version

• No ads. No tracking. We never sell your data. There are no advertising tools, third-party analytics tools or tracking tools in the app.
• Your full GPS tracks and raw heart rate readings stay on your phone. Our server gets workout totals, not the path you walked, unless you choose to save a route or turn on route previews.
• Apple Health data is used only to run Ironstride's features. It is never used for ads, marketing or data mining, and never sold.
• Your crew sees your progress on the trip, never your real location, your routes or your heart rate.
• You can delete your account and its data from inside the app. Copies in our encrypted daily backups are gone within about 44 days.
• You can download the main parts of your data from inside the app (Settings, Your data, Download my data), and you can ask us by email for a full copy of everything we hold about you.
• Ironstride is for people aged 13 and older.

1. What we collect and why

Your account

• Email address, account id and how you sign in (Apple, Google or email and password). We use these to sign you in, confirm your email and reset your password.
• Sign in with Apple shares only your email address, or a private relay address if you choose "Hide My Email".
• Google sign-in also sends your name and profile photo. Our database removes them before they are saved. We keep only your email and Google account id.

Your profile

• Callsign: the name your crew sees. Pick any name you like; it does not need to be your real name.
• Goals and plans: your daily, weekly and monthly goals, your daily goal in minutes, and the short walking plan and backup plan you write.
• Your phone's time zone and its history, so your days and streaks follow your own clock.

Your workouts

For each workout you record, add by hand, or bring in from Apple Health, we store:

• the sport, distance, time, start time and time zone;
• moving time and the times you were moving or paused;
• a few fair-play numbers, such as the number of GPS points, gaps and top speed (no map positions);
• any private note you add;
• which of your campaigns it counted for.

We use this to show your history, goals, streaks, medals, campaign miles and your long road, and to keep progress fair.

Which workouts are saved to your account.

• A workout counts in every campaign you belong to when it starts. Workouts that count for a campaign are always saved to your account, so your crew's trip moves.
• Personal workouts (ones that count for no campaign) are saved to your account by default, so they appear on your other devices. You can turn off Sync personal workout summaries in Settings to keep new personal workouts only on your phone. This also covers workouts Ironstride brings in from Apple Health on its own (see section 3).
• We also keep a record of when you joined and left each campaign, so a workout counts only in campaigns you were in when it started.

Workouts you import

If you import your history from Strava, or GPX, TCX or FIT files from other apps, your files are read on your device. For each imported workout we store only:

• the sport, start time, total and moving time, distance and climb;
• a simplified route line, which can show where you started, such as your home;
• the other app's workout number, so the same workout is not imported twice;
• where it came from (Strava or the file type) and when you imported it.

We do not store the file, its name, the workout's title or notes, photos or heart rate. Imported workouts are history only. They show in your Activities and never count toward goals, streaks, medals, Strides, your long road or campaigns. No one else can see them.

Strength days

The sessions you log (day, time zone, how you logged it), each set (exercise and reps or seconds), names of exercises you add, a running timer, and how many timers you discarded each day. Only you can see your sets.

Your long road

If you pick a long road, we store the road you picked (a famous road, or two US towns you choose), its towns, and how far along it you are. It is a virtual road, never your real location. Only you can see it.

Location

See section 4 for the details. In short: we use your location while you record, and only send map positions to our server when you choose to save a route, turn on route previews, or race a saved route.

Campaigns and crews

When you start or join a campaign, we store:

• the campaign's name, road, towns, dates, style and settings;
• who is in the crew, when they joined, and their callsign;
• campaign miles, Strides, Workshop items, vehicle looks (including looks earned from medals), races between crewmates, and the trail signs people leave (picked from a fixed list of phrases);
• what the creator writes: a short dedication, links added to places on the road, and messages, facts and rewards at stops.

Style packs

• Packs we give you: if we give you a style pack for free, we store which pack, when the gift ends, and a short note we write for ourselves.
• Packs you buy: Apple handles the payment. We store which pack you bought, the store's transaction number, and when it was bought or refunded. We never see your card or payment details.

Safety

• Reports you send: who sent it, what was reported, the reason you picked and any words you add.
• Blocks: who you blocked.
• Suspensions: if we suspend an account for breaking our Terms, we store until when, and a record of the suspension.

How the app is used, and errors

• The days you open the app, with the app's build number and platform. We keep this for 100 days and use it only to count how many people use Ironstride. We count with our own tools; no analytics company receives it.
• Error counts: when certain actions fail (for example, a workout could not sync), the app sends a fixed error code, the screen name, the build number and the platform. No account, message or device model is stored with it.
• To stop abuse, the app also sends a random id it creates on your phone when you report errors or try invite codes. We keep only a scrambled (hashed) form for one to two days, with no account attached.

When you contact us

If you email us, we keep your email and what you send so we can help you.

2. What stays on your phone

These stay on your phone and are not sent to us:

• the full GPS track of every workout you record (about one point a second);
• full routes brought in from Apple Health;
• raw heart rate readings from Apple Health or a heart rate strap;
• your heart rate strap's name and Bluetooth id;
• the "Where I've been" map, built from your own workouts;
• your reminder times, your weekly plan, and most settings.

Signing out. If some workouts haven't uploaded yet, the app tells you first and offers Upload now. If detailed maps of your workouts are only on that phone, you choose Keep them on this phone (the default) or Remove them. Kept maps stay locked to your account: they come back when you sign in again, and no other account on the phone can open them. Your totals stay in your account. To keep a workout's map line in your account, save it as a route or turn on route previews before you sign out.

Sharing is up to you. If you export a workout as a GPX file, it contains your full track with times. Share pictures can include a route outline only if you turn it on, and then its start and finish are hidden (see "Map visibility" in section 4).

3. Apple Health (HealthKit)

Apple Health access is off until you turn it on in You, Settings, Connected devices.

What we read, with your permission:

• workouts, workout routes and heart rate.
• When you turn on Bring in my workouts, Ironstride brings in new workouts from Apple Health, including workouts recorded by other apps and your Apple Watch. You can also choose to bring in your last 30 days.
• With Sync personal workout summaries off, workouts brought in this way stay on your phone, unless they count for one of your campaigns.

What we write, with your permission:

• when you turn on Save my workouts to Apple Health, Ironstride saves your recorded walks, runs, hikes and rides to Apple Health, with distance and the full route.
• Each saved workout carries a random Ironstride reference, so it is not brought back in twice. It does not include your account number.

What we store on our server:

• the workout's totals (sport, distance, time, start time, moving time), the same as other workouts;
• a heart rate summary for the workout: average, maximum, how much of the workout had a reading, time in the Easy, Steady and Hard zones, and the max heart rate you set;
• a receipt that records the Health workout's id, whether it came from an Apple Watch, and whether it was typed in by hand. It stops a deleted workout from being brought in again.

What stays on your phone: raw heart rate readings and full Health routes.

Our promises for Health data:

• We use it only to provide Ironstride's features to you: your history, effort zones and progress.
• We never use it for advertising, marketing or data mining.
• We never sell it.
• We never share it with other users. Your crew never sees your heart rate or Health routes.
• We do not give it to anyone else, except the service providers who store and run Ironstride for us (section 5), or when the law requires it.
• We do not store it in iCloud.

To stop: turn the switches off in Connected devices, or remove Ironstride in the Health app (your picture, Apps, Ironstride). Use Remove Apple Health imports to delete workouts you brought in. Copies saved to Apple Health stay there until you delete them in the Health app.

Pause for health: if you pause your streaks for illness or injury, we store the days of the pause so your streaks stay safe. We do not ask why, and your crew cannot see it.

Effort zones and numbers are a workout guide, not medical advice.

4. Location

• When: Ironstride asks for your location only while you use the app, never "Always". It uses it to record the workouts you start, to show where you are on the map, and to center the route builder.
• With the screen locked: a workout you start keeps recording when you lock your phone or open another app. iPhone shows a blue location indicator while this happens. Recording stops when you finish.
• Precise location: recording needs precise location for accurate distances.

What goes to our server, and only when you choose it:

• Saved routes. When you save a route from a workout, or plan one on the map, the whole line is stored in your account, including its real start and finish. This can include your home. Only you can see it. You can delete it at any time.
• Route previews (off unless you turn them on in Settings). A copy of each new workout's full line is stored in your account, so you can see it on your other devices and on the "Where I've been" map. This can include your home. Only you can see it. Turning previews off removes the previews already synced.
• Racing a saved route. When you race one of your saved routes, the workout's GPS points are sent once so our server can time the race fairly. We keep only the result and times, not the points.

Map visibility. Your own routes always show in full. When you share a picture of a route, Ironstride hides its start and finish: 200 meters by default, or 400 meters, 800 meters or 1 mile, or off. You choose this in Settings.

What never goes to our server: your live location, or the full track of a workout you have not saved as a route or a route preview.

Your long road is a virtual road you pick. We never use your real location for it.

Lock Screen: while you record, the Lock Screen can show your sport, campaign name, time, distance, speed and heart rate. Anyone who can see your phone can see it. You can turn off the heart rate and the campaign name in Settings.

To stop: iPhone Settings, Apps, Ironstride, Location. You can still add workouts by hand without location.

5. Who receives your information

We do not sell or rent your information, and we do not share it for advertising. These companies help us run Ironstride and receive only what they need:

Each of these companies has its own privacy policy.

Our own daily summary. We use an email service, Resend, to send ourselves one email a day with totals, such as how many people were active. It never contains information about any one person.

Our help site. Our help site, where this policy is published, is hosted on GitHub Pages, a service of GitHub, Inc. GitHub may log visitors' internet (IP) addresses for security. The site itself uses no cookies, scripts, analytics or tracking.

Links you open. Campaign creators can add links to outside websites. Ironstride also links to OpenStreetMap, for example to report a missing trail; that link includes the map point you are looking at. When you open a link, that website's own policy applies.

Apple's analytics. If you agreed in your iPhone settings to share analytics with app developers, Apple may give us crash reports and usage statistics. Apple controls that setting.

When the law requires it. We may share information if the law requires it, to protect someone's safety, to stop fraud or abuse, or to defend our legal rights.

If Ironstride changes hands. If Ironstride is sold or moved to another company, your information would move with it, under this policy. We would tell you first.

6. What other people see

Your crew (the members of a campaign you join, up to 8 people) can see:

• your callsign and your vehicle, with its looks;
• your progress and place on the campaign road, and the campaign's totals;
• when you were last active, rounded to Today, This week or Earlier;
• when you joined, and the day you reached each place, the goal and the finish;
• races you take part in and trail signs you leave.

One workout, every campaign. A workout counts in every campaign you belong to when it starts. Each crew sees only its own campaign's progress. Crewmates can't see which other campaigns you are in.

Hand-entered miles. Some creators approve hand-entered miles. If you add a workout by hand, it waits for approval in each of your campaigns whose creator does this. Each of those creators sees the entry's callsign, sport, miles and date.

Your crew never sees: your real location, your routes or maps, your heart rate or other Health data, your strength sets, your list of workouts, your private notes, your long road, a health pause, or your email.

Before joining. Someone with an invite code must sign in to preview a campaign. They see its name, road, length, how many people are in it, and the first letter of each member's callsign. They do not see full callsigns or any activity.

Blocking. When you block someone, what each of you shares is hidden from the other, and neither of you can preview or ask to join the other's campaigns. Neither of you is removed from a campaign you share, and the other person may be able to tell they were blocked.

Our team runs Ironstride with a few owner tools:

• They show counts, such as how many people were active, with small numbers hidden.
• For one person, they show the callsign, totals (such as miles, workouts and Strides), the campaigns the person is in, packs we gave, and how many reports and blocks involve them. They never show your routes, places, notes or heart rate.
• For a report, they show the reason and the reported words as they stand now, with the callsign of the person who wrote them.
• We can remove content, give packs, and suspend an account that breaks our Terms.

We look at personal information only when we need to, for example to handle a report or a support request.

Nobody else. Ironstride has no public profiles, no public feed and no search for people.

7. Children and teens

• Ironstride is for people aged 13 and older. Children under 13 may not create an account.
• We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete the account and its information. If you think a child under 13 is using Ironstride, email support@ironstride.app.
• Teens under 18 should use Ironstride with a parent's or guardian's permission. Today, Ironstride never shows anyone's location to other people.
• If we add features that share location-based information with others (for example, exploring your town or walking together live), people under 18 will be able to use them only inside a family crew that a parent or guardian creates. We will update this policy before any such feature launches.

8. How long we keep information

Backups

• Once a day we make a full copy of our database, so we can recover Ironstride if something goes wrong. It includes account and workout information.
• Each copy is locked with strong encryption (AES-256) and a passphrase that only we have.
• We keep each copy for 14 days, on our own computer and in our Google Drive, and then delete it. Google Drive keeps deleted files in its trash for 30 more days before removing them for good.
• So after you delete your account, or any of your information, a copy can remain in these locked backups for up to about 44 days. Then it is gone.
• We use backups only to restore Ironstride after a problem, never for anything else.
• Our database host may also keep its own backups for up to 7 days.

9. Deleting your information

Delete your account in the app: You, then your profile at the top, then Delete account. If you signed in with Apple, Apple asks you to confirm, and we disconnect Ironstride from your Apple ID.

This deletes, from our server and from your phone:

• your account and sign-in;
• your profile, workouts, imported workouts, strength log, saved routes, route previews and long road;
• Health receipts and heart rate summaries;
• reports you sent, blocks, Strides, medals, vehicle looks, packs we gave you, and settings.

What stays after you delete your account:

• Campaign miles you added stay in each campaign as anonymous "former member" miles, with no name or link to you, so your friends' totals do not change.
• Campaigns you started pass to another current or past member, or are deleted if nobody is left. Your dedication, place links and stop messages in them are cleared. The campaign's name stays, and we check that it does not include your name.
• Encrypted backups made before you deleted your account keep a copy for up to about 44 days (section 8). Then it is gone.
• Copies in Apple Health stay until you delete them in the Health app.
• Our host's logs stay for their log period.
• On your phone, one small display setting may stay until you delete the app.

Delete parts of your data:

• A workout: open it, tap the options button, then Delete workout.
• A saved route: open it, then Delete route.
• Route previews: Settings, turn off Route previews, then Remove route previews. Or delete one workout's preview from that workout.
• Workouts brought in from Apple Health: Connected devices, Remove Apple Health imports.
• Imported workouts (Strava and other apps): open one in Activities, then Delete import. Or Settings, Your data, then Delete all imports.
• Leave a campaign: Campaign settings, Leave campaign. Your past miles stay in the campaign's totals.

Can't use the app? Email support@ironstride.app from the email address on your account and ask us to delete it. We will confirm when it is done.

10. How we protect information

• Information travels over encrypted connections (HTTPS).
• Our database lets each person read only their own private information, and lets crewmates read only what section 6 lists.
• Only our team can open reports and the owner tools.
• Our daily backups are encrypted (section 8), and the connection that makes them checks that it is really talking to our database.
• Raw heart rate files on your phone are protected by iPhone's file protection.
• No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

11. Your choices and rights

Everyone can:

• see most of your information in the app;
• correct your callsign, goals and plans, and edit your campaigns;
• delete your information as described in section 9;
• turn off location, Apple Health, Bluetooth and notifications at any time in iPhone Settings or in Ironstride, and hide your heart rate and campaign name from the Lock Screen;
• download a copy of your information in the app: Settings, Your data, Download my data. You get one ZIP file with your workouts and saved routes as GPX files, a table of your workouts (CSV) and your profile, campaigns, medals, streaks, long road, strength sessions, settings and imported workouts (JSON), in formats other apps can read. It holds only your own information, never other people's;
• ask for a full copy of everything we hold about you, including things the download leaves out (such as heart-rate summaries, Strides, purchases, reports you sent and people you blocked), by emailing support@ironstride.app from your account's email address.

We will answer requests within 45 days. The 45 days start on the day we receive your request. We may ask you to confirm your identity, but that does not add time. If we need more time, we will tell you why before the 45 days end, and take at most 45 more days. We delete information within 30 days of confirming a deletion request, and never later than that deadline. If you live in Canada, we answer within 30 days (see "Canada" below). We will not treat you differently for using your rights.

US state privacy rights. Depending on where you live (for example, California, Colorado, Connecticut, Texas, Virginia or other states), you may have the right to know what personal information we collect, to get a copy, to correct it, to delete it, and to opt out of its sale, of targeted advertising and of certain profiling. We do not sell personal information, do not share it for targeted advertising, and do not use it for profiling that has legal or similar effects. We do not collect, use or sell personal information to train large language models or other artificial intelligence. To use any of these rights, email support@ironstride.app. This email is our designated request address, including for requests under Nevada law.

Appeals. If we turn down your request, in whole or in part, we will tell you why. To appeal, reply to our answer, or email support@ironstride.app with "Appeal" in the subject line. We will answer your appeal in writing within 45 days of receiving it and explain our decision. If we deny your appeal, you can complain to your state's Attorney General or privacy agency:

• Connecticut: the Attorney General's online complaint form (choose "Consumer Data Privacy").
• Washington: the Attorney General's online complaint form, or 1-800-551-4636.
• Nevada: the Attorney General's Bureau of Consumer Protection, online complaint form, or (888) 434-9989.
• California: the California Privacy Protection Agency's complaint form.
• Colorado: the Attorney General's complaint page.
• Other states: find your Attorney General at naag.org.

Do Not Track. Some browsers send a "Do Not Track" signal. We do not track you over time or across other companies' websites or apps, and we do not let other companies track your activity through Ironstride or our help site. So the signal changes nothing: there is no tracking to stop. We also treat a Global Privacy Control signal as a request to opt out of the sale of personal information and of targeted advertising, which we never do anyway.

Consumer health data (Washington, Nevada and similar laws). Heart rate summaries, workouts and health pauses may count as "consumer health data". We collect them only to provide the features you ask for, we never sell them, and we share them only as section 6 describes and with the service providers in section 5. Our Consumer Health Data Policy explains what we treat as consumer health data, who receives it, how long we keep it, and your rights, including for Washington and Nevada residents.

Canada. If you live in Canada, Canada's federal privacy law (PIPEDA) protects your information, and in Quebec, so does Quebec's private-sector privacy law. You can:

• see your information: ask for the personal information we hold about you, how we use it and who received it. Access is free. We answer within 30 days of receiving your request. We take longer only where the law allows it: up to 30 more days if answering on time would unreasonably interfere with running Ironstride, or if we need to consult others first; or the time needed to give you the information in another format, for example because of a disability. If we need more time, we tell you within the first 30 days, with the new date, the reason, and your right to complain to the Privacy Commissioner of Canada;
• correct it: if your information is wrong or incomplete, ask us to fix it;
• withdraw your consent at any time, subject to legal or contract limits and reasonable notice. Turn the feature off in Ironstride or in your phone's settings, leave a campaign, or delete your account (section 9). We will tell you what changes when you withdraw, for example that a feature stops working;
• complain: please email us first at support@ironstride.app. You can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Quebec.

• The person responsible for protecting personal information at Ironstride is its developer, named at the top of this policy. Contact: support@ironstride.app.
• Your information is stored and processed outside Quebec, in the United States, by us and the service providers in section 5 (see section 12).
• You can complain to Quebec's Commission d'accès à l'information (cai.gouv.qc.ca).

12. Where information is stored

Our server is hosted by Supabase in the United States. Our encrypted backups are kept on our own computer and in Google Drive. If you use Ironstride from another country, including Canada, your information is moved to and stored in the United States. While it is there, US courts, law enforcement and government agencies may be able to get it under US law.

13. Changes to this policy

We may update this policy. We will change the effective date at the top. If a change is important, we will tell you in the app before it takes effect.

14. Contact

Ironstride
Email: support@ironstride.app

This email is also our designated request address for privacy requests and appeals.