About this policy
This policy explains what personal information IronScribe collects, why, where it is kept and who can see it. IronScribe is run by [Operator: full legal name of the person or company] ([ABN, if any]) of [Postal address] ("we", "us"). We aim to handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Questions or requests: email support@officialironscribe.com.
Using IronScribe without an account
Without an account, everything you log is kept on your phone only. We don't receive it.
Meal photos always stay on your phone. With an account, progress photos are backed up to your account so they appear on your other devices. Only you and a coach you link with can open them; friends cannot.
If you export a backup, the file goes wherever you choose to save or share it.
What we collect when you have an account
- Account details: your email address, your password (kept by our database provider in a scrambled form that can't be turned back into the password; we never see it), first and last name, username, and whether you use IronScribe as an athlete or a coach.
- What you log, so it is backed up and stays in step across your devices: workouts and workout plans, food diary, custom foods and saved meals, barcodes you link to foods, water, steps, sleep, cardio, body weight and measurements, progress photos, weekly check-ins, and your settings (such as goals, theme, units, height, sex, date of birth and any phone number you add to your account).
- If you are a coach: your coach code, your client list, the plans and weekly check-in questions you write for clients (your linked clients can read them) and any coach advert you create.
- Messages you send and receive in the app, including photos, voice messages and form-check videos (only between you and a coach you're linked with), and the push token described under Notifications.
- Whether you have the app open right now, so friends and your coach or clients can see that you're online. We don't share when you were last online.
Some of this, such as body weight and measurements, sleep, food and date of birth, is health information. We only collect it because you choose to log it, and we only use it to run the app for you and for the people you choose to share it with.
We don't show advertising, we don't sell your information, and the app contains no third-party analytics or tracking.
Signing in with Apple or Google
You can create an account or sign in with Sign in with Apple or with your Google account instead of an email and password.
- From Apple we receive your name (only the first time, and only if you share it), your email address, or an Apple relay address if you choose Hide My Email, and a user ID that Apple gives IronScribe.
- From Google we receive your name, your email address and a user ID that Google gives IronScribe.
We never receive your Apple or Google password. We use these details only to create your account and sign you in, and we keep no Apple or Google sign-in tokens on our servers.
Who else can see your information
- Other members can find you by username and see your name and username.
- Friends you accept can see your workouts, cardio, workout plans and body weight if you allow it ("Mates can see my lifts"), and your food diary if you allow that too. You can change these at any time.
- A coach you link with (by entering their code) can see your workouts, food diary, cardio, steps, sleep, body weight and measurements, progress photos, weekly check-ins and settings, including your email address and phone number. Unlinking stops this straight away.
- Friends, a coach you link with, and a coach's clients can see a green dot while you have the app open.
- Coach adverts that a coach chooses to show can be seen by every signed-in member.
- Messages can be read by you and the person you're writing to. We don't read them, except where we need to look into a problem you report to us or the law requires it.
Apple Health
If you turn on Apple Health, IronScribe reads:
- your steps, sleep and weight;
- cardio workouts that other apps save to Apple Health: the type, start and end time, duration, distance, active energy, average heart rate and the name of the app that saved it.
These are stored in your account like entries you log yourself. A coach you link with can see them, and so can friends you let see your lifts.
Workouts you log on IronScribe's Apple Watch app are saved to Apple Health.
Apple Health data is never used for advertising or sold.
Notifications
When you allow notifications, your phone gives the app a push token. We save it with your account so we can tell you about new messages.
Notifications are sent through Expo's push service (run by 650 Industries, Inc. in the United States), which passes them to Apple or Google to deliver. Expo receives the push token, the sender's name and the words "Sent you a message" (or "Sent you a photo", "Sent you a voice message" or "Sent you a form check"). It never receives the message itself.
You can turn notifications off in your phone's settings. Signing out removes this phone's push token from your account.
Food lookups
When you scan a barcode IronScribe doesn't know, the app asks Open Food Facts (an open food database run from France) about that barcode. Only the barcode number is sent, although, like any website, Open Food Facts can see your phone's internet (IP) address.
IronScribe's built-in food list includes data from Open Food Facts, available under the Open Database License (ODbL). More → About the food database gives the full credit.
Where your information is kept
Account information is stored with Supabase, our database provider (Supabase, Inc., based in the United States), on servers in its Sydney, Australia region.
Our service providers are based overseas and may access or handle information from outside Australia: Supabase and Expo in the United States, Apple and Google for signing in and for delivering notifications, and Open Food Facts in France for barcode lookups. [Lawyer: confirm the overseas disclosure wording (APP 8)]
How we protect it
Information travels to and from our servers encrypted. Database rules mean only you, and the people you choose to share with as described above, can read your records. No system is perfectly secure, so please use a password you don't use anywhere else.
How long we keep it
We keep your information while you have an account. Entries you delete are removed from your phone and marked as deleted on our servers, and may be kept that way until your account is deleted.
When you ask us to delete your account, we delete it and everything stored with it within [number] days. [Copies in our providers' backups are removed within [number] days.]
Your choices
- See and download your information: More → Export backup.
- Correct it: edit it in the app, or contact us.
- Delete your account: More → My account → Delete account, or email support@officialironscribe.com from your account's email address.
- If you signed in with Apple, deleting your account also asks Apple to stop IronScribe using your Apple ID. If that fails, the app tells you, and you can remove IronScribe yourself in Settings → your name → Sign in with Apple. If you signed in with Google, we also ask Google to remove IronScribe's access.
- Complaints: contact us first. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Children
IronScribe is not meant for children under 16. If you are under 18, please check with a parent or guardian before creating an account or linking with a coach. If we learn that a child under 16 has an account, we will delete it.
Changes to this policy
If we change this policy we'll update the date at the top, and tell you in the app about important changes.