Iron U is a training app for a first IRONMAN 70.3. This page says what it collects, where it is kept, who else sees it, and how to delete all of it.
Who runs Iron U
Iron U is made by Fabrique Futur LLC, a Wyoming (USA) limited liability company. Write to dev@fafutur.com with any question about your data.
What Iron U collects
Your account. Your email address, and a password if you set one. Supabase Auth stores the password as a hash. We never see it. You can sign in with a one-time email link instead and never set a password at all.
Your profile. Name, date of birth, sex, height, weight, time zone, your race and its date, and your maximum and resting heart rate. You type these when you sign up. They are what the plan is built from.
Your training. Workouts (time, duration, distance, sport, heart rate), sleep, resting heart rate, heart-rate variability, VO2 max, step count and body mass. This comes from whichever source you connect:
- Apple Health, read from your iPhone: workouts with their heart-rate and distance samples, heart rate, heart-rate variability, resting heart rate, VO2 max, steps, body mass and sleep — the same list the permission prompt shows. Iron U asks for read permission only, so it cannot change your health record.
- Strava, once that connection is offered — it is not in the current beta — and only if you connect it. Iron U will read your activities and their heart-rate streams.
- Garmin, through a program you run on your own computer, using your own Garmin login. Your Garmin password is never typed into Iron U and never reaches our servers.
Photos of food and drink. If you photograph a meal or a drink, the photo is stored and an estimate of what was in it is stored beside it.
What you tell it. Your daily check-in (ache, illness, effort), a weight typed into a notification, questions you ask the coach, and how a session went.
AI usage. For every request to the AI model: which function called it, the model name, the number of tokens and the cost in US dollars. Not the content.
Settings. The times you want the morning and evening notifications.
Iron U has no advertising identifier and no analytics tool. There is no analytics or tracking library in the app or on the website. It does not read your location in the background; a coordinate is used for weather only if you give one.
Crash reports
If the app crashes, hangs, or is stopped by iOS for using too much disk or processor, iOS writes a report and hands it to the app on the next launch. Iron U sends that report to your own account. It contains the app's own call stack — binary names, addresses and offsets, not readable code — with the device model, the iOS version and the app version. It contains no training data, no photograph, no location and nothing you typed. It is kept in your own rows under the same row-level security as everything else, it is deleted with your account, and nothing is collected or kept at all if you switch off Settings → Support → Share diagnostics.
Where it is stored
In a Postgres database hosted by Supabase in the EU (region eu-west-1, Ireland).
Every table has row-level security switched on, and every policy is written against your own user id. One account cannot read another account's rows — that is enforced by the database, not by the app.
Photos go into private storage buckets, in a folder named with your user id, under the same rule. No photo has a public address; when the app shows you one, the link expires.
Who else sees it
Supabase hosts the database, the sign-in system, the photo storage and the server functions, and keeps normal server logs. Supabase keeps those logs, and a daily backup of the database, for up to seven days. A row you delete can therefore survive in a backup for at most seven days; photos are not part of database backups.
OpenAI receives, for a single request and only when you use that feature: the bytes of a meal or drink photo with a short instruction; or the already-calculated numbers of one session, so it can write one sentence about them; or your question to the coach together with your own recent training numbers. Data sent to the OpenAI API is not used to train OpenAI's models, and OpenAI keeps API inputs and outputs for up to 30 days to detect abuse. Photos are sent as data inside the request — OpenAI never receives a link that could read your storage. You can enter your own OpenAI key in Settings, and then our key is not used at all.
Open-Meteo receives a latitude and longitude to return the weather and sea temperature. It gets no name, no account and no identifier.
Strava sees only the connection itself, if you make one.
Apple distributes the beta build through TestFlight and reports installs and crashes to us. Notifications are built and scheduled on your device by iOS. They are not sent from a server, and Iron U uses no push notification service.
Nobody else. Iron U does not sell your data, does not share it with advertisers and does not use it to advertise anything. Health and fitness data is never used for advertising, marketing or data mining, as Apple's HealthKit rules require, and health data is not stored in iCloud.
How long it is kept
Until you delete it. There is no automatic expiry: a training history is the point of the app.
Deleting your data
Delete a single meal or drink and its photo is deleted with it.
Delete your account in Settings, behind one confirmation. That removes every photo, every row we hold about you, any key you stored with us, and the account itself. It cannot be undone, and we keep no copy for ourselves beyond the seven-day backup window above.
Your rights
You can see your data in the app, correct it in Settings, ask us for a copy of it, and delete it. Write to dev@fafutur.com. If you are in the EU or the UK you can also complain to your national data protection authority.
Children
Iron U is not for anyone under 16, and we do not knowingly collect data from anyone under 16.
Changes to this policy
The version and date at the top of this page change when the policy changes. If a change matters to you, the app will say so before it takes effect.