Privacy policy

01

Data we collect

By default, none. The app has no analytics, no advertising, and no crash-reporting services. You can install it, log every workout you ever do, and never send us anything. We do not collect, transmit, store, sell, or share any personal information or usage data unless you opt in to one of the features described below.

Signing in is optional and is never required to use the app. There are four optional features that involve the network, and they are independent of one another:

02

Optional global leaderboard (opt-in only)

The app includes an optional leaderboard that ranks participating lifters worldwide. It is off by default and only activates if you explicitly join and pick a handle.

If you join, the following is uploaded and publicly visible to other users of the app:

• ·The handle you choose (a made-up name, never your real name, which the app doesn't ask for anyway)
• ·The division you pick (men's or women's). The lift and volume boards are ranked separately so lifters aren't compared across divisions. You are only asked for this if you join the leaderboard, and you can change it at any time from Profile → Leaderboard.
• ·Your best estimated one-rep max for the bench press, squat, deadlift, and overhead press
• ·Your weekly and all-time training volume, current week streak, and total workout count

To make this work, the app creates an anonymous account identifier (via Firebase Anonymous Authentication) with no name, email, phone number, or other personal detail attached. Leaderboard data is stored on Google Firebase servers; Google's handling of that infrastructure is governed by the Google Privacy Policy.

The leaderboard never uploads your name, email, body measurements, individual workout logs, routines, or notes. (Cloud backup, a separate opt-in feature described below, is the only thing that uploads those, and it is private to you.)

Leaving and deleting: Profile → Leaderboard → "Leave leaderboard & delete my data" deletes your handle, your scores, and the anonymous account from the server immediately. The achievement badges feature is evaluated entirely on-device and involves no data collection (badges are included only in your private cloud backup, if you enable that).

03

Optional community sharing (opt-in only)

You can publish a routine or program to a shared gallery for other users to browse and import. Only what you explicitly choose to publish is uploaded: the routine or program itself, plus your leaderboard handle or the word "anonymous" as the author. Your workout history, body measurements and personal notes are never part of a shared routine.

You can remove anything you have published at any time from Routines → Community → "Shared by you", which deletes it from the server.

Anyone browsing the gallery can report a post or hide a lifter. A report stores the reporting account's anonymous ID, the post's ID and the reason you picked, so a person can review the post and remove it. Hiding a lifter is stored on your device (and in your backup, if you use one), never on the server.

04

Optional sign-in (opt-in only)

You can sign in with Google, or on iOS with Sign in with Apple. It is never required to log workouts or read your history, and your own data is never restricted for declining. Signing in is what starts and keeps the free Pro trial, and it is required for cloud backup.

Signing in gives us your email address: your Google address, or for Sign in with Apple the address you choose to share, which can be Apple's private relay address if you pick Hide My Email (we never see your real address in that case). It is used to identify your free-trial period (stored as a one-way cryptographic hash, so the address itself is not kept for this purpose), to own your cloud backup if you enable it, and to own your leaderboard handle if you joined. It is not used for marketing, and we never email you. Sign in with Apple may also share your name once, which the app uses only to pre-fill your profile name on the device.

You can sign out at any time, and Profile → Account → delete removes the account and its server-side data, including your cloud backup if one exists; for Sign in with Apple it also revokes the app's access to your Apple Account. One exception: the record that a free trial was used (the one-way hash and a start date, nothing else) is kept so a trial can't be restarted by deleting and re-creating the account.

05

Optional Iron Clad Pro cloud backup (opt-in only)

Iron Clad Pro includes an optional cloud backup so your training survives a lost or replaced phone. It is off by default and requires both a Pro subscription or lifetime purchase and an explicit tap to turn on. Free users are never backed up.

When you turn it on, the app uploads your training data to private storage that only your account can read: your workout history, routines, programs, personal records, achievements, body measurements, profile name, and app settings. It is stored on Google Firebase servers under security rules that permit access only to the signed-in account that owns it. It is not public, it is not shared with other users, it is not sold, and it is not used for any purpose other than backing up and restoring your own data.

Your in-progress workout is never uploaded. It stays on the device you are training on.

Turning it off deletes it. Profile → Cloud backup → "Turn off and delete backup" erases the stored copy from the server, not just the switch. You can also take a full copy of everything at any time with Profile → Export data, which is free and always available, with or without Pro.

06

Data stored on your device

Everything you enter in the app (workouts, routines, programs, body measurements, and settings) is stored locally on your device. Unless you turn on cloud backup, or publish a routine to the community gallery, or join the leaderboard, it is never uploaded to us or to any third party.

If you have Android Auto Backup enabled, Android may back up the app's data to your personal Google account (Google Drive) so it can be restored when you reinstall or switch devices. On iOS, iCloud Backup may do the same into your personal iCloud account. Those backups are managed by your operating system and your Google or Apple account settings, not by us, and we have no access to them. Deleting the app's data or uninstalling the app removes the locally stored data from your device.

07

Purchases

Subscriptions and one-time purchases are processed entirely by Google Play Billing on Android and by the App Store (Apple) on iOS. We never see or store your payment details. The app only receives confirmation from the store of what you own, which it caches on your device to unlock features; a purchase made on one store unlocks the app on that store's devices. Google's handling of your payment information is governed by the Google Play Terms of Service and Google Privacy Policy; Apple's by the Apple Media Services Terms and Conditions and Apple Privacy Policy.

08

Permissions the app uses

• ·Notifications: to show the rest timer countdown (Android) and to chime when the rest timer ends while the app is in the background (Android foreground service, iOS local notification).
• ·Vibration / haptics: feedback for timers and taps.
• ·Wake lock (Android): to keep the rest timer accurate while the screen is off.
• ·Internet: used by the store to verify purchases, and by the optional leaderboard, community sharing, sign-in and Pro cloud backup (only the ones you turn on).

None of these permissions are used to collect or transmit personal data beyond what the optional-feature sections above describe.

09

Retention and your rights

Because the app collects nothing by default, in most cases there is nothing held about you at all. Where you have turned on an optional feature, the data is kept only for as long as that feature is switched on, and each one has an in-app control that deletes it from the server:

• ·Leaderboard: Profile → Leaderboard → "Leave leaderboard & delete my data"
• ·Published routines: Routines → Community → "Shared by you"
• ·Cloud backup: Profile → Cloud backup → "Turn off and delete backup"
• ·Your account: Profile → Account → delete, which removes the account and its server-side data (for Sign in with Apple, it also revokes the app's access to your Apple Account)

The single exception, described in section 04, is the one-way hash and start date recording that a free trial was used. That is retained so a trial cannot be restarted by deleting and re-creating an account, and it cannot be reversed back into your email address.

Step-by-step instructions, including how to request deletion by email if you have already uninstalled, are on the delete your account page.

You can take a full copy of everything the app holds at any time with Profile → Export data, free and with or without Pro. If you are in a jurisdiction with statutory rights of access, correction, deletion or portability, such as the UK, EU or California, you can exercise them with the in-app controls above or by emailing support@craftylambstudios.com, and we will respond within the period the applicable law requires. We do not sell or share personal information, and we do not use it for targeted advertising.

10

This website

This site is a set of static pages. It sets no cookies, and our pages include no analytics, advertising, tracking pixels, embedded videos, social widgets or third-party fonts. One exception we do not control: our web host, GoDaddy, adds a small performance-monitoring script to every page it serves. It loads from a GoDaddy domain and reports page-load measurements to GoDaddy under GoDaddy's own privacy policy. There are no forms on this site and no way to submit information through it.

Our web host records standard server logs, which typically include your IP address, the page requested, the time, and your browser's user-agent string. These are generated by the hosting infrastructure for security and reliability, are not used to build any profile of you, and are not combined with anything from the app.

If you email support@craftylambstudios.com, we receive your email address and whatever you write, and use it only to answer you. We do not add you to a mailing list.

11

Children

The app is a general-audience fitness utility and is not directed at children under 13.

12

Changes to this policy

If the app's data practices ever change, this policy will be updated and the effective date revised before the change takes effect.

13

Contact

Questions about this policy: support@craftylambstudios.com