Iron Fit You by Iron Fit Effective date: 1 August 2025 Last updated: 1 October 2026
1. About this policy
Iron Fit You (IFY) is a fitness and wellness application that works with the Iron Fit Band and supported connected services. This policy explains what personal information we collect, why we use it, how it is disclosed and protected, and the choices and rights available to you.
IFY is operated by Iron Fit You, with its registered address at 506-507, Fortune Business Hub, Science City Road, Ahmedabad, Gujarat - 380060, India, referred to in this policy as “we,” “our,” or “us.” We are the controller responsible for the personal data covered by this policy.
For privacy questions and requests, contact info@ironfityou.com.
2. Information we collect
The information we process depends on the features you use, the information you provide, the records available from your device, and the permissions you grant.
- Account and profile information: email address, account identifier, authentication information, and profile details such as date of birth or age, height, weight, gender, language, and time zone. When you use a supported third-party sign-in method, we receive the information that the provider makes available for authentication.
- Health and fitness information: supported heart rate, heart rate variability, resting heart rate, sleep duration and stages, steps, workouts, activity duration, calorie estimates, temperature, and blood oxygen records. We also process the wellness scores, trends, and estimates generated from these records. Availability varies by device and feature.
- Location information: GPS coordinates, workout routes, timestamps, and distance information when you enable a supported location-based feature and grant the required permissions.
- Device and technical information: device model, operating system and app versions, band identifiers and firmware information, synchronization status, installation and notification identifiers, usage events, and crash diagnostics. Network requests also involve technical information that our infrastructure or providers may process, including IP addresses.
- Communications: messages and attachments you send when contacting support or using a supported communication feature.
Information may come directly from you, from your band, from your use of the app, or from a service you authorize us to connect to. Sensors and calculations provide estimates; not all metrics use the same sensor or originate from the band.
3. How we use information
We process information to create and authenticate your account, maintain your profile, synchronize device records, display your history, calculate personalized wellness insights, provide workout features, and respond to support requests. Technical information supports account security, synchronization, troubleshooting, and app reliability.
Contact and notification information supports verification messages, service communications, and reminders. Any promotional communications are subject to the applicable consent or other legal requirements and an available opt-out.
Information necessary for an account function or feature is identified when collected. If you do not provide it, the associated function may be unavailable. Declining optional permissions limits the features that depend on them.
4. Legal grounds and consent
Our legal grounds depend on the purpose and the law applicable to you. For ordinary account and service information, grounds may include performing a contract, consent, legal obligations, or appropriately assessed legitimate interests, such as protecting accounts and maintaining service security.
Health data receives additional protection. Where required, we obtain explicit consent for health-data processing or rely on another specifically applicable legal ground for sensitive data. Legitimate interests alone do not authorize processing special-category health data under the GDPR or sensitive health data under the LGPD.
You may withdraw consent by contacting info@ironfityou.com or using the available feature controls. Withdrawal does not affect the lawfulness of processing before withdrawal, but it may prevent the affected feature from working. Accepting this privacy policy does not replace any separate consent required by law.
Indian privacy requirements apply as relevant, including provisions of the Digital Personal Data Protection framework as they enter into force.
5. Band synchronization and permissions
IFY uses Bluetooth Low Energy to discover, pair with, and synchronize the Iron Fit Band. Health and workout records may be stored on the band, your phone, and our backend to provide synchronization, history, and insights.
Bluetooth or nearby-device permissions support pairing. Some operating systems also require a location permission for Bluetooth discovery; this is distinct from recording a GPS workout route. Camera or selected-photo access supports QR-code features where offered. Notification permission enables push messages.
Location permission is used for the location-based features you enable. Any background-location access is subject to the relevant device permission and the explanation provided for that feature. You can change permissions in your device settings. Revoking a permission does not automatically delete previously collected records.
6. Apple Health and connected services
If you connect Apple Health through HealthKit, we access the supported data types you authorize for the corresponding health and fitness features. The authorization screen identifies the requested types. Imported records may be synchronized to your IFY account to support your history and wellness insights. Any supported writing to Apple Health requires the corresponding authorization.
You can manage access in Apple Health or your device settings. Revoking access stops future authorized access but does not automatically erase records already imported into IFY. HealthKit data is not used for advertising or marketing.
If you authorize an external app or assistant to connect to IFY, information is made available within the authorized scope. Revoking the connection stops further access through that authorization. The receiving service handles any copy already transferred under its own privacy terms; revocation does not automatically delete that copy.
7. Automated insights and AI features
IFY uses measurements and profile information to calculate scores, trends, and personalized wellness insights. These outputs can be incomplete or inaccurate and should be understood as estimates.
We use OpenAI's API, with different AI models, to support IFY's AI features. When you use these features, your messages and information supplied to the feature are sent to OpenAI to generate responses and personalized insights. Depending on the feature, this information may include conversation context, profile information, health and fitness records, and reports you provide.
Under OpenAI's default API terms, data is not used to train its models unless the API customer opts in. Retention and authorized access, including safety review, depend on the API features and configured controls. Further information is available in OpenAI's API data controls documentation. International processing is addressed in Section 9.
Any additional consent required for a particular use is obtained separately. Applicable rights relating to automated processing remain available to you.
8. Service providers and disclosures
We do not sell personal data or display advertisements in IFY. We disclose information to providers as needed to operate the service, which is different from selling information.
Our infrastructure uses AWS hosting and MongoDB database technology. Firebase services support app analytics and diagnostics. OpenAI provides API-based AI processing as described in Section 7. Depending on the features used, other providers may support authentication, notifications, email delivery, mapping, or customer support. Providers receive the information relevant to their function, subject to applicable safeguards and their role in the processing.
We may also disclose information when required by law or when you authorize a specific disclosure. Where you choose a partner service, the relevant information and privacy terms explain that service's data handling. Health data is not used to target promotional communications.
9. Security and international processing
We use technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and loss. No system can guarantee absolute security. Where legally required, we notify affected users and authorities of personal-data breaches.
Personal data is processed in India, Brazil, and Italy, with hosting provided by Amazon Web Services (AWS), which may be outside your country of residence. For international transfers requiring safeguards, we rely on [Applicable transfer mechanisms and safeguards for the actual destinations]. Contact info@ironfityou.com for information about these safeguards and how to obtain a copy where applicable.
10. Retention and account deletion
We retain account, health, and workout information while it is needed to provide your account history and the features you request. We keep support communications and technical records for the periods necessary to resolve requests, maintain security, and troubleshoot faults. We do not retain identifiable data indefinitely merely because an account has not been deleted.
Retention is assessed according to the record's purpose, account activity, outstanding requests, applicable legal obligations, and any need to establish, exercise, or defend legal claims. Provider records and backups have their own applicable retention and deletion cycles.
You can request account and personal-data deletion through the account-deletion option in the app’s Settings, or contact info@ironfityou.com. We handle requests within applicable legal deadlines. If particular records must be retained lawfully, we explain the reason and applicable retention criteria. Deletion also addresses relevant copies held by providers acting on our behalf, subject to applicable legal exceptions and backup cycles.
Uninstalling IFY, disconnecting the band, or withdrawing a phone permission does not automatically delete your account. IFY account deletion does not automatically delete independently held records in Apple Health, your band, or external services.
11. Your rights
Depending on applicable law, you may request confirmation of processing, access, correction, deletion, portability, restriction, objection, information about disclosures, or withdrawal of consent. Brazilian law also provides rights to anonymization or blocking in applicable circumstances. These rights are subject to the conditions and exceptions in the relevant law.
Send requests to info@ironfityou.com. We may ask for proportionate information to verify your identity and respond within applicable legal deadlines. The absence of an in-app export button does not remove any applicable access or portability right.
You may lodge a complaint with the relevant supervisory authority, including the ANPD in Brazil or the Garante in Italy. For Indian privacy grievances, contact João Lucas Figueiredo, at dpo@iron.fit. DPDP rights and escalation procedures apply as the relevant provisions commence.
12. Communications and choices
You can manage push notifications in device settings and supported reminders through the app. You may opt out of promotional communications through the method provided in the communication or by contacting us. Essential account-verification and security messages may still be necessary.
Where consent is required for optional analytics or diagnostics, the corresponding processing is subject to that consent. You can contact info@ironfityou.com about available privacy controls or to withdraw consent.
13. Age requirements
Use of IFY is subject to a minimum age of 13 years. Parent or guardian authorization is required where applicable law requires it. We apply the safeguards required for children and adolescents under applicable law. Contact info@ironfityou.com if you believe an account does not meet these requirements.
14. Policy changes
We update the effective date when this policy changes. Material changes are communicated through appropriate service channels. We seek additional consent where a new use requires it; an update to this policy alone does not authorize that use.
15. Wellness information
The Iron Fit Band and IFY wellness insights provide estimates for fitness and general well-being. They are not intended to diagnose or treat disease or replace professional medical advice. This limitation does not reduce the privacy protections applicable to health information.
16. Contact
Iron Fit You Privacy contact: info@ironfityou.com