Privacy policy

This policy explains how Alexander Thomas Rippon, trading as Iron Focus("Iron Focus", "we", "us") collects, uses, stores, and shares personal information in the Iron Focus training app (this website and related services).

It is written for the app. Gym membership, in-person enquiries, and the gym website are also described in the gym privacy policy. If you are both a gym member and an app user, both notices can apply. Where they differ on app features (for example how account deletion works), this policy is the one that applies to the app.

We follow the New Zealand Privacy Act 2020.

1. Who we are

Iron Focus is operated by Alexander Thomas Rippon, trading as Iron Focus.
119 Apollo Drive, Rosedale, Auckland 0632, New Zealand
Email: alex.rippon@ironfocus.co.nz

2. What we collect

Depending on how you use the app, we may collect:

Account and profile

• Name, nickname, email, password (stored as a hash — we never store your password in plain text)
• Date of birth, gender, height, unit preference, timezone, phone number, profile photo
• Role and affiliation (for example free logger, self-coach, independent coach, or Iron Focus gym member)

Training and health-related information

• Workouts, exercises, metrics, facilities, and personal equipment
• Program templates you create or copy, and programs allocated to a calendar
• Optimizations (for example targets, preferences, movement and strength settings)
• Timeline events you add (for example injuries, supplements, or diet changes)
• Movement feedback, including photos or videos you upload
• Bodyweight or other metrics you log

Messages, rivals, and notifications

• In-app messages and attachments between you and a coach (or other permitted contacts)
• Rivalry invites and comparison data you choose to share
• In-app notifications, and a push-subscription endpoint if you enable web push

Billing

• Subscription status, billing tier, and your Stripe customer identifier
• Card details are handled by Stripe. We do not store full card numbers

Technical and support

• Session cookies needed to keep you signed in
• Contact-form messages you send us
• Limited diagnostic events that help us fix sign-in and reliability issues

If you do not provide information we need to run an account (such as email and a password), you will not be able to use the app. Other fields are optional but some features will not work without them (for example a facility is needed to filter equipment).

3. Why we collect it

We use this information to:

• Create and manage your account, including email verification and password resets
• Provide the calendar, logging, programming, analytics, and coaching tools
• Let a coach you are connected to see and update your training, where that relationship exists
• Process app subscriptions and failed-payment notices
• Send service emails (account, security, billing)
• Respond to support requests
• Keep the service secure and working

We do not sell your personal information.

4. Who can see your information

• You can see and update most of your own data in the app.
• Your coach (if you have an active coaching relationship) can see and manage training information needed to coach you — for example your calendar, programs, optimizations, messages, and related analytics.
• A rival only sees comparison information if both of you take part in a rivalry. You can decline or end that sharing.
• Iron Focus staff with a legitimate need (for example support or administration) may access accounts to operate the service.

5. Processors and overseas disclosure

We use trusted providers to run the app. Some process information outside New Zealand. We only use them to provide this service.

• Google Cloud Platform — hosting, database (Cloud SQL in Australia), file and video storage, and BigQuery analytics used for movement trends and related training analysis
• Stripe — payment processing and subscriptions (typically outside New Zealand)
• SendGrid — transactional email (typically outside New Zealand)
• Web push services — if you enable push notifications, a device subscription endpoint is stored so we can send those notifications

We may also disclose information if the law requires it. Stripe keeps payment records under its own policy and legal duties.

6. How long we keep it

We keep your information while your account is active, and as follows if you leave:

• Archive ends coaching relationships and rivalries and cancels app billing, but keeps your workout history and optimizations so you can return later.
• Delete locks the account immediately. We then wait 30 days. If you sign in during that period, you can restore the account. After 30 days we permanently delete the account and associated app data (workouts, optimizations, uploads, messages we hold).
• Gym members billed on the gym website must cancel that membership there before we can archive or delete the app account.
• We may retain billing records where tax or accounting law requires it. Stripe retains payment records independently.

7. Security

Information is stored on Google Cloud infrastructure. We use HTTPS in transit and hashed passwords. Access is limited to authorised Iron Focus personnel and the processors above. No system is completely secure. If you think your account is compromised, contact us immediately.

8. Emails and marketing

We send transactional emails needed to run the account (verification, password reset, billing failures). We only send marketing emails if you have agreed to receive them. You can unsubscribe using the link in those emails or by contacting us.

9. Cookies

We use cookies (and similar storage) to keep you signed in, remember a few preferences, and operate the app. These are needed for the service to work. We do not use third-party advertising cookies.

10. Your rights

Under the Privacy Act 2020 you can:

• Ask for the personal information we hold about you
• Ask us to correct information that is wrong or out of date
• Ask us to delete information, subject to the retention notes above
• Complain to the Office of the Privacy Commissioner

Use Profile in the app to update many fields yourself, or email alex.rippon@ironfocus.co.nz.

11. Changes

We may update this policy. The "Last updated" date at the top will change. Please review it from time to time. Continued use of the app after an update means the new policy applies to that use.

12. Contact and complaints

Privacy questions: Alexander Thomas Rippon, trading as Iron Focus
alex.rippon@ironfocus.co.nz
119 Apollo Drive, Rosedale, Auckland 0632, New Zealand

If you are not satisfied, contact the Office of the Privacy Commissioner: privacy.org.nz, phone 0800 803 909.

Gym website: ironfocusgym.com

This notice is provided so you can use the app with a clear picture of our practices. It is not legal advice.