Your data, your control

Privacy Policy

Last updated: 15 October 2026

This Privacy Policy explains how Iron Karnet ("we", "us", "the app") collects, uses, stores, and protects your information. Iron Karnet is a strength, HIIT, and core training app for iPhone and Apple Watch, with per-set heart-rate tracking via Apple Health. We've designed it to keep your fitness and health data private and under your control.

1. Information you provide

When you create an account and use the app, we collect and store:

• Account information — your name and email address and authentication identifiers, managed through Firebase Authentication. You can sign in with Apple, with Google, or with an email address and password; see Section 2 for details on Sign in with Google.
• Profile details — date of birth, sex, weight and height, used to set up your profile and heart-rate zones.
• Fitness data you enter — workouts (sets, reps, weights), body measurements, supplement logs, and hydration entries. This is stored in our cloud database (Google Firebase / Firestore) and associated with your account.

2. Sign in with Google

If you choose to sign in with your Google Account, Iron Karnet uses Google Sign-In and requests only Google's basic sign-in permissions (your name, email address and Google account identifier). We do not request access to your Gmail, Google Drive, contacts, calendar, or any other Google data.

• What we access: your first name, last name and email address, and a sign-in token that Google issues to confirm your identity.
• How we use it: solely to create and sign in to your Iron Karnet account and to show your name in the app. Your email address may also be used to reply to support requests you send us.
• How we store it: your name and email address are saved in your account profile in Google Firebase (Firestore and Firebase Authentication). Sign-in tokens are passed to Firebase Authentication to verify your identity and are not stored in our database.
• Sharing: we do not sell, rent, or share your Google user data with anyone, and we do not use it for advertising. It is processed only by Google Firebase, our cloud provider, to operate the app.
• Removing access: when you delete your Iron Karnet account, we delete your account data and revoke the app's access to your Google Account. You can also remove Iron Karnet's access at any time in your Google Account settings at myaccount.google.com/connections.

Iron Karnet's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Apple Health (HealthKit)

With your explicit permission, Iron Karnet integrates with Apple Health (HealthKit):

• Reads heart-rate data to show per-set heart rate and heart-rate zones, and your date of birth, sex, weight and height to set up your profile.
• Reads and writes other health and fitness data you choose to sync, which may include workouts, weight, water intake, supplement data, and body measurements.

What we store from Apple Health: workout heart rate (per set and per workout), active calories, workout start and end times, and the profile details above are backed up to your Iron Karnet account so your history syncs across your devices. This data is stored with our cloud provider, Google Firebase, solely to operate the app.

In accordance with Apple's requirements:

• We never use HealthKit data for advertising or marketing.
• We never sell HealthKit data or share it with third parties, other than storing it with our cloud provider to run the app.
• HealthKit data is used solely to provide the app's fitness-tracking features to you.

Where Apple Health data lives: Data that Iron Karnet writes into Apple Health is stored by Apple in the Health app on your device (and in your iCloud, if you have Health sync enabled) — not only in our systems. You can review, manage, or delete it at any time, and control our access, in iOS Settings → Health → Data Access & Devices → Iron Karnet.

4. Camera & supplement label scanning

The Supplement Manager can use your camera to scan supplement labels. Text recognition (OCR) is performed on your device, and captured images are used only to read the label details you choose to save.

5. Notifications

If you enable reminders for hydration, supplements, or workouts, the app schedules local notifications on your device. These do not transmit your data anywhere.

6. Infrastructure & security

Iron Karnet uses Google Firebase (Firestore database and Firebase Authentication) to store and sync your account data. We use Firebase App Check with Apple's App Attest to help ensure that requests come from genuine, untampered copies of the app. Firebase Remote Config receives basic device information (country, language, time zone, OS version) to deliver app configuration. Data is transmitted over encrypted connections (HTTPS/TLS) and encrypted at rest by Google.

7. Subscriptions & purchases

If you purchase a subscription, the transaction is processed by Apple through the App Store. We do not receive or store your payment card details. Apple may share limited transaction information with us as described in Apple's own privacy policy, which we use to manage your subscription entitlement.

8. Analytics

We use Firebase Analytics to understand how the app is used, for example completing setup, viewing the subscription screen, or finishing a program. These events are not linked to your account, contain no health data, and are not used for advertising or tracking. Firebase Analytics also records subscription purchases (product and price) and an approximate location derived from your IP address.

9. How we use your information

We use your information to provide and operate the app's features, sync your data across your devices, maintain account security, respond to support requests, and improve the app. We do not sell your personal data, and we do not use your health data for advertising.

10. Data sharing

We do not sell your personal data. We share data only with the service providers that power the app (such as Google Firebase and Apple) strictly to operate the service, and only as required to provide functionality or comply with the law. We never share HealthKit data or Google user data with third parties, other than storing it with our cloud provider to run the app.

11. Your rights & choices

• Delete data within the app, and revoke Apple Health access at any time in iOS Settings → Health.
• Manage Health data Iron Karnet has written directly in the Apple Health app.
• Delete your account and all synced data in the app under Profile > Delete Account, or by emailing us (see Section 14).
• If you signed in with Google, remove Iron Karnet's access to your Google Account at any time in your Google Account settings.

12. Data retention

We retain your account data for as long as your account is active. When you delete your account, we remove your account data from our systems; data already written to Apple Health is managed by you in the Apple Health app.

To prevent repeat free trials, a small marker is stored in your iCloud Keychain. It contains no health data and is not stored on our servers. Anonymous analytics data is retained according to Firebase Analytics retention settings.

13. Children

Iron Karnet is not directed at children under 13, and we do not knowingly collect personal information from them.

14. Contact

Questions about this policy or your data? Email support@ironkarnet.app.

15. Changes to this policy

We may update this policy from time to time. Material changes will be reflected on this page with a revised "last updated" date.