Legal
Privacy Policy
Last updated — 13 September 2026
Dylan Smith · ABN 23 366 156 945 · Queensland, Australia
From Iron runs your habits as a ranked ladder. This policy explains exactly what the app collects, why, and what it never touches. It covers the From Iron iOS app and fromiron.com.
The short version
We collect the email you sign up with, the display name you choose, the habits and daily completions you enter, and the lifting sets you log. If you use local leaderboards, we also keep your town, region and country — never your exact position. If you add friends, link accounts or turn on bonus RP, we keep those too. We use all of it to run your rank, your leaderboard place and your challenges. Your Apple Health numbers and your gym's location stay on your device — for bonuses we only ever receive whether you met a goal. Your display name and rank points appear on the public global leaderboard. We do not track you, we do not run ads, and we do not sell or share your data with anyone.
What we collect
| Data | Why |
|---|---|
| Email address | To create and sign you into your account. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's private relay address. |
| Display name | Shown next to your rank on leaderboards. Your real name, a gamertag — your choice, and you can change it any time. |
| Habits and daily completions | The core of the app. These decide your daily RP, your rank and your streak. |
| Workouts, lifting sets and routines | Each workout you log — its name, day, start and finish time, and an optional Spotify soundtrack — with the exercise, reps, weight and RPE of every set, and any routines you save. These drive your workout history, estimated one-rep maxes and the body map. |
| Rank points, rank history, streak and queue | To place you on the ladder and show your progress over a season. |
| Account creation date | To award pre-season and founding badges. |
| Linked accounts | Only if you add them. The usernames you enter for Twitch, Kick, YouTube, TikTok, Instagram, X, Discord, Riot, Steam or Spotify, shown on your profile. We don't connect to those services or check the accounts are yours. |
| Profile picture | Only if you add one. The photo you choose, cropped square and resized, stored in our file storage and shown on your profile to other signed-in players. Removing it deletes the file. We do not read location or other information out of the photo — it is re-encoded on your phone before it is uploaded, which strips that. |
| Invite codes and recruits | Your own invite code, and — if you enter someone's code in your first week — who recruited you, so we can make you friends and pay the rank points that recruiting earns. Your code is not linked to anything outside From Iron. |
| Profile song | Only if you choose one. The Spotify id of the song, shown on your profile. See Spotify. |
| Friends, challenges, blocks and reports | Who you've added or blocked, the challenges you've sent, accepted and finished, and any reports you make about another player, so we can run those features and review reports. |
| Bonus RP settings and claims | Only if you turn bonuses on. Which bonuses you use, your daily cardio minutes and calorie target, your gym's name if you give one and the date you pinned it, and a record of each bonus earned — for example "cardio goal met on 13 September". See Bonus RP. |
| Town, region and country | Only if you choose to use local leaderboards. Places you on your town, region and country boards. Never your exact position — see Location. |
Apple Health
From Iron can read two kinds of information from Apple Health, and only if you grant permission: nutrition totals (calories, protein, carbohydrate and fat) and workout sessions (runs, rides, rows and swims, with distance, duration and average heart rate).
- It is read-only. From Iron never writes anything to Apple Health.
- It stays on your device. Health data is read on your iPhone, shown to you in the app, and used to calculate your progress locally. Your Health numbers are never transmitted to our servers, never stored in our database, and never shared with any third party.
- The one exception is a yes. If you turn on the cardio or calorie bonus, your iPhone checks your Health data against your goal and, when you meet it, tells us that you did. We receive and store only that a goal was met on a given day — never your minutes, distances, calories or anything else from Health.
- You can revoke it at any time in the iOS Settings app, under Privacy & Security → Health → From Iron. The rest of the app keeps working.
- We never use Health data for advertising, marketing or any form of data mining, and we never disclose it to third parties for those purposes.
Bonus RP
Bonuses are optional and every one of them is off until you switch it on in your profile. Leaving them off never counts against you.
- Gym check-in. You pin your gym while standing in it. The pin's coordinates are stored in your iPhone's keychain and never leave your device. When you finish a workout, your iPhone reads your precise position once, compares it to the pin, and tells us only whether you were there. We store your gym's name (if you give one) and the date you pinned it.
- Cardio goal and calorie target. Checked on your iPhone against Apple Health, as described above. We receive only whether the goal was met.
- Rated sets. Uses the RPE you enter on sets you log, which we already store.
Spotify
A profile can have a song from Spotify, and a workout can have a soundtrack — a Spotify song, album or playlist. We store only the Spotify id. To show its name and cover art, the app asks Spotify for them when a profile with a song is opened, which means Spotify receives a request from your device. Spotify's player only loads when you tap play on a song, and while it plays it is Spotify's service, covered by Spotify's privacy policy. From Iron never connects to your Spotify account.
Location
Location is used for two things, each only if you choose it: local leaderboards, turned on from the Board tab, and gym check-ins, turned on from your profile. If you use neither, From Iron never asks for your location.
- Local boards use an approximate position. We ask for a low-accuracy position, once, when you choose to use a local board. iOS lets you keep "Precise Location" switched off, and local boards still work.
- Gym check-ins need a precise position, and it stays on your phone. It is read when you pin your gym and when you finish a workout, compared on your iPhone, and never sent to us. With Precise Location off, check-ins simply won't confirm.
- Only place names are kept. Your position is converted on your iPhone into your town, region and country, and those three names are all we store. Your coordinates are never saved, never sent to our servers and never shared.
- Only while you use the app. From Iron never requests background location and never tracks where you go.
- Nobody sees where you are. Local boards are visible only to signed-in players, and each player can only ever see the board for their own town, region or country. Other players can tell that you are on the same local board as them — they cannot look up where you live, and your town is never shown on the public global board.
- You can turn it off at any time in the iOS Settings app, under Privacy & Security → Location Services → From Iron. To remove your saved town, region and country, email support@fromiron.com or delete your account.
What we do not collect
- No precise location and no location history. We store only the town, region and country described above, and only if you use local leaderboards. Gym positions stay on your device.
- No contacts, photos, microphone or camera.
- No advertising identifiers and no third-party analytics or tracking SDKs. We do not track you across other apps or websites, and the app does not ask for tracking permission because it has nothing to ask for.
- No payment information. This version of the app is free and contains no purchases.
Gym leaderboards are planned for a future release. They are not in this version. If we add them they will be opt-in, this policy will be updated first, and the app will ask your permission before collecting anything new.
Who can see your information
The global leaderboard is public. If you play in the ranked queue, your display name, your rank points and your position on the global board can be seen by anyone — including on fromiron.com, without signing in. Choose a display name you are comfortable having public. Casual-queue players do not appear on leaderboards.
Local leaderboards are not public. They are visible only to signed-in players in the same town, region or country, and show the same display name and rank points.
Profiles are visible to signed-in players. Tapping a player opens their profile: display name, profile picture, rank, rank points, peak rank, streak, global position, challenge record, number of friends, join month and any linked accounts they've added. Players you block can't see yours. Who your friends are is not shown to anyone else.
Workout history is shared the way you choose, in your profile under Workout history. Friends (the default): friends see your list of workouts and can open each one to see every set, weight and RPE. Everyone: any signed-in player also sees the list — name, day, length, number of sets, total volume, muscles worked and soundtrack — but only friends can open a workout. Only me: nobody else sees them. Other players never see the exact time you started or finished, only how long a workout took, and players you block see nothing.
Your email address, your individual habits, your completions, your bonus settings and your town, region and country are private to your account and are never shown to other players. A challenge shows its two players the daily score it's built from — the share of scheduled habits done and bonuses earned — never which habits.
Achievements. Other signed-in players see how many achievements you hold and any helm you've chosen to wear, not which achievements they are.
Profile pictures. A picture you add can be seen by any signed-in player who opens your profile, and its file is readable by anyone with its address, so treat it as public. Only put up a picture you are comfortable being public. You can remove it at any time in Profile, which deletes the file. Other players can report a picture, and we remove any picture we find offensive, misleading or not the player's to use.
Recruiting. If you use someone's invite code, they are shown that you joined through it, and you are shown who recruited you. People you recruit see your display name. Your code itself is yours to give out to whoever you like.
Reports. If you report a player, they are not told who reported them.
Where your data is stored
Your data is stored with Supabase, our database and authentication provider, who process it on our behalf. Your login session is stored in the iOS keychain on your own device. Sign in with Apple is handled by Apple under Apple's own privacy policy — we receive only the identity token and, if you allow it, your name and email.
We do not sell your personal information, and we do not share it with advertisers or data brokers.
Deleting your account
You can delete your account at any time from inside the app: open the Profile tab and choose Delete account. This immediately and permanently removes your profile, display name, rank, rank point history, habits, completions, lifting sets, saved workouts, linked accounts, friends, challenges, blocks and bonus records. Reports you made about other players are kept, with your identity removed, so they can still be reviewed. It cannot be undone, and it is not recoverable by us. You may also email support@fromiron.com and we will delete your account on request.
How long we keep it
We keep your data for as long as your account exists. When you delete your account the records are removed from our live database immediately; residual copies in encrypted backups are overwritten on our provider's normal backup rotation.
Children
From Iron is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will remove it.
Your rights
You can access, correct, export or delete your personal information. Display name changes and account deletion are available in the app; for anything else, email us and we will action it. Depending on where you live — including under the Australian Privacy Act 1988, the GDPR and the CCPA — you may have additional rights, including the right to complain to your local data protection authority.
Changes to this policy
If this policy changes materially we will update the date above and notify you in the app before the change takes effect.
Contact
Questions about privacy, or a deletion request: support@fromiron.com