Iron Stats Preview privacy notice
Effective date: 2026-10-25
This notice applies to Iron Stats Preview used by invited private TestFlight testers and its separate Preview account and backup services. In the sections below, “Iron Stats” means that Preview test version. It is intended for people aged 16 and older.
Preview features and device protections are undergoing testing. Report unexpected behavior to admin@nounoulabs.com. This page does not announce a public release or state that worldwide public-launch requirements have been cleared.
Iron Stats Preview is a workout tracker operated by Nounou Labs LLC, 30 N Gould St Ste N, Sheridan, Wyoming 82801, USA. For privacy questions or requests, contact admin@nounoulabs.com.
You can log and keep workouts locally without an account or subscription. Iron Stats stores workout history, sets, custom exercises and tags, notes, templates/programs, preferences and any optional profile/measurement information you enter in a database on your device. App removal or device loss may remove local-only information. Your device’s backup settings and files you share through other apps are separate.
If you choose an account, Firebase Authentication processes the account identity and sign-in information needed for that account. Eligible Premium cloud backup synchronizes supported workout/plan/template records, custom exercises/tags/notes, profile/measurement inputs and preferences under that account. It may retry pending changes when connectivity returns. Personal custom content is private account content; current versions do not automatically submit it to catalog-review queues. Historical copies created by older versions are handled separately and included in the account-deletion inventory.
Profile age, height, weight/history, sex, goals, experience, body-part status and notes are optional training inputs. They help provide the features you request; displayed training analysis is not medical diagnosis. Optional private cloud backup starts only after you separately consent in Settings for that account on that device. The choice covers the disclosed workout and optional profile records, which can reveal health information. You can withdraw in Settings, including after Premium expires. Withdrawal stops future sync from that device, preserves local logging/history/analytics, and does not recall requests already sent, change another device or erase existing cloud copies. You can separately request deletion. This choice does not grant Premium or replace OS Health permissions.
Iron Stats is intended for people aged 16 and older. Its local age declaration stores only a 16+ confirmation, without a date of birth or identity-document upload. Applicable platform age/parental controls are separate from that declaration. On supported iOS versions, the native integration checks applicable Apple age-range requirements and interprets only the minimum useful range for eligibility; a range spanning the minimum is not treated as proof of eligibility or adulthood. The app does not store or include raw Apple age ranges, declaration methods or account identifiers in workout history, cloud backup or analytics. Apple controls its own account/framework behavior and caching. Age information is used for eligibility and required protections, not advertising or public profiles. We use protective private defaults and clear optional-input controls for all users. We do not provide a public social feed or an app advertising profile.
Platform consent protection verifies current Apple app-account and installation integrity information, including signed transaction/device and App Attest/App Check evidence. It can operate without a human Firebase account. The backend's application records retain pseudonymous verification keys/hashes, counters, timestamps and restriction state, rather than raw age, date of birth, identity documents, signed transaction payloads or device-verification UUIDs. Optional account backup separately uses owner-scoped access leases and an installation-only authentication identity. This security processing is distinct from optional fitness-backup consent and does not send workout history with a status check. Some native security services initialize at launch; the local age gate and optional backup choice do not mean that all supplier processing waits for those choices. After a recorded withdrawal, access stays restricted and saved data is preserved. This version does not automatically unlock through a later age declaration, purchase restore, reinstall or Firebase account change. Support, verified data requests and store subscription management remain available.
Apple handles iOS store payments. RevenueCat processes purchase/entitlement state and identifiers to enable Premium, restore store purchases and support subscription management. Purchase/restore does not require a Firebase account. Iron Stats does not collect card details through an in-app card form. App-account deletion does not cancel the store subscription or delete Apple’s transaction records; manage subscriptions through Apple. Restoring store purchases is separate from restoring remote workout data, which currently requires Premium. You do not need a renewed subscription to make a privacy request.
With your OS authorization, the optional Apple Health integration writes eligible completed strength workouts and checks Iron Stats correlation identifiers to avoid duplicates. It does not request unrelated heart-rate, steps, sleep or nutrition streams or invent calories. The phone/Watch companion exchanges workout snapshots and set confirmations. Proposed reps are advisory until you confirm them. Manage Health and device permissions in OS settings.
Feedback you choose to send contains your message/category, optional contact address, account/subscription state when supplied and technical version/build/platform/device/OS/environment/route metadata. Pending messages may retry. It does not automatically attach a full workout history, passwords or measurements. Your own text can contain information you choose to include; avoid unnecessary sensitive details. Separate export/diagnostic sharing is your choice. Recipients of shared files can keep their own copies.
We use information to provide the service and optional backup you request, protect users and the service, handle support/privacy requests, and comply with applicable legal duties. Where applicable, legal bases are performance of the requested service for account and service administration, explicit consent for optional health-information backup, legitimate interests in proportionate security/support, and legal obligations for required records and requests. We do not sell workout information or use it to create an app advertising profile. Acknowledging this notice does not itself give optional-backup consent.
Local information stays until you delete it, delete the relevant local account/partition or remove the app, subject to device/backup behavior. Account backup is retained while the account remains and until explicit account deletion completes; subscription expiry does not automatically delete training history. Sync deletion markers may remain until account deletion to prevent older clients restoring deleted records. Feedback, support and minimal rights-case records are kept while needed to handle the matter and for applicable legal/security purposes, then reviewed for removal. We do not keep exported health payloads as a routine rights-case log. Account-linked Firebase feedback is included in account deletion; mailbox and anonymous feedback copies require separate handling.
Expiry of an access token or verification challenge ends its validity; it does not itself erase the stored metadata. Deletion jobs include a planned expiry timestamp 30 days after a terminal state, but automatic cleanup is not currently enabled. We retain minimal consent restriction, key/counter and notification-deduplication state as needed to prevent bypass or replay, including after deletion or recreation of a separate Firebase account. Account deletion does not silently erase this protection. At the last backend configuration review, ordinary operational logs were configured for 30 days and platform-required audit logs for 400 days. Separate provider, payment, legally required and previously shared records can follow different periods. We do not promise every copy everywhere is erased within 90 days.
Account deletion requires ownership verification/recent authentication and backend completion before the app reports that account’s deletion complete. It targets that account’s Firebase records and identity, including matching historical account-linked feedback/review records. Other local accounts and third-party shared copies are separate. If deletion is pending or fails, contact admin@nounoulabs.com rather than assuming the account has been deleted. Email support requests do not require sharing a password or identity document.
You may contact admin@nounoulabs.com to request access/export, correction, deletion, restriction/objection or withdrawal of consent, as applicable to your location. Requests are free of subscription requirements. We verify identity/authority using only what is needed to protect the account and other people’s information. We respond within the deadlines applicable to the request and explain any lawful extension and available complaint route. No subscription or password is required to make a request. You may also complain to your applicable data-protection authority. Withdrawal does not change processing that was lawful before withdrawal.
Firebase/Google, RevenueCat, Apple and the sign-in/device/share services you choose process information for their relevant functions. Our current Firestore database is in the US multi-region nam5; that does not mean every supplier operation or copy is restricted to that location. Provider account, security and payment operations and separately retained copies are distinct from the selected app account's training records. Account deletion does not itself erase every provider-held record. Our Firebase/Google, RevenueCat and Cloudflare services use standard service/data-processing terms, including applicable transfer provisions. The Google Cloud addendum, RevenueCat DPA and Cloudflare customer DPA describe their relevant arrangements; contact admin@nounoulabs.com for information about safeguards applying to Iron Stats. This does not mean that every supplier copy is restricted to the selected Firestore region or erased by app-account deletion.
Cloudflare hosts the Nounou Labs webpages, including this notice and the account-deletion information page. When you open those pages, Cloudflare processes network/browser request information to deliver and protect the website. Website visits are separate from Iron Stats local workout analysis and optional account backup.
The public support/privacy address, admin@nounoulabs.com, uses iCloud inbound mail and forwards messages to a Gmail inbox used by the operator. If you email us, those services handle your message, contact details and any account reference or other information you choose to include. Do not send passwords, identity documents, payment details or full workout/health histories. The operator's personal forwarding address is not a public support contact. Mail handling and provider copies are separate from app-account deletion; deleting an app account does not automatically erase an email conversation or every provider-held copy.
We explain material changes to this notice. Where a change requires additional consent, notice or parental permission, we will follow that required process rather than treating an old local age declaration as consent to new processing.