This policy covers the health data IronOracle handles and your rights over it. IronOracleis operated by Core Capital Investments LLC ("we"). It applies to everyone who uses IronOracle, wherever you live, and is written to meet Washington's My Health My Data Act, Nevada's consumer health data law and Connecticut's data privacy act.
The short version
- Your health data is stored on your phone. We keep no server copy of your profile or logs.
- We ask two separate questions before collecting anything: may we keep it on your phone, and may we send what a question needs to the AI service that writes your answers. You can say no to sharing and still use the app.
- We never sell health data, never use it for advertising, and never use it to train AI models.
- You can change either answer, or delete everything, any time in Settings → Privacy.
1. Health data we collect, and what we use it for
- Body and profile details: age, sex, height, weight, body-fat estimate and body measurements — to set your calories and macros, pick your program and fit every answer to your body.
- Your goal and training history: goal, experience, schedule, equipment, workouts, sets, reps and loads — to build your program and progress it week to week.
- Food and nutrition: meals, macros, calorie targets, and meal photos you choose to scan — to track your intake against your targets and read a meal photo into macros.
- Weight log and weekly check-ins (how training, sleep, energy and mood are going) — to see your trend and adjust your plan.
- Progress photos you choose to take — to estimate physique changes over time (only small thumbnails are kept on your phone).
- Lab results you type in or scan from a report — to flag values outside common reference ranges and put them in context for you.
- Recovery data, if you connect Apple Health: resting heart rate, heart-rate variability, sleep, active calories and steps — to judge how recovered you are before a session.
- Your training approach and any protocol or plan you choose to track, including compounds and doses you enter — to coach you on the plan you are actually running and remind you of it.
- Things we work out from the above: calorie and macro targets, readiness, plan adjustments, physique and lab notes — these inferences are the coaching itself.
We use it only to provide the coaching you asked for. We do not use it for advertising, marketing profiles, or any purpose not listed here, and we do not collect your location.
2. Where it comes from
- You — what you type, choose or photograph in the app.
- Apple Health, only if you connect it and only the items you allow in iOS. Values read from Apple Health stay on your phone and are never sent to us or to the AI service.
- The app itself, which works out targets, readiness, plan changes and notes from the above.
3. What we share, and with whom
Only if you said yes to sharing (Settings → Privacy), and only when you use an AI feature, we send the following through our server to the AI service, which uses it to write the answer and nothing else:
- Coach chat: your message, plus a summary of what you've logged — profile, goal, lifts, meals, weight trend, check-ins, labs and physique notes, and your training approach and tracked plan.
- Meal, physique and lab scans: the photo or report you choose, plus (for physique scans) your sex and weight if you typed them in, and your training approach.
- Plan note and "save as plan": your goal, program, phase and targets, or the coach answer you chose to save.
With sharing off, none of this is sent. Anything you type into a chat message is sent so the coach can answer that message.
Categories of recipients. We have no affiliates and share health data only with service providers that process it for us:
- AI service providers — Anthropic, PBC (primary) and OpenAI (backup): write coach answers and read scans. Under their commercial API terms they do not train models on it; they may keep it for a limited time for safety and abuse monitoring.
- Hosting — Vercel Inc.: runs our server, which passes AI requests through without storing them.
- Email delivery — Resend, and our database provider: only if you ask us to email your plan. We then keep your email address with your goal, program name, sex (if you typed it) and your marketing choice, and email you your plan, including its calorie and macro targets.
Payment and subscription services (Apple, Google, RevenueCat) receive purchase records only, never health data. No third party collects your health data over time or across other websites or apps through IronOracle: there are no ads, analytics or tracking tools in it.
4. Your consent, and taking it back
We ask before collecting (question 1) and, separately, before sharing (question 2). Neither is part of our terms or medical disclaimer, and nothing is pre-ticked. To withdraw either one, open Settings → Privacyand switch it off; it takes effect immediately. Switching off question 1 deletes your data from the phone, because the app can't coach without it.
5. Your rights
- Know and access: confirm whether we collect, share or sell your health data, get a copy of it, and get a list of every third party we shared it with, with a way to contact each.
- Delete: data on your phone — tap Settings → Privacy → Delete all my data; it is gone at once, including the copy the app keeps in your phone's own storage. Data held off the phone (an emailed plan's record) — ask us, and we delete it and tell our service providers to delete it too.
- Withdraw consent at any time, as above.
- Correct anything you entered, in the app at any time.
- No discrimination for using any of these rights.
How to ask: email corecapitalinvestmentsinc@gmail.com with "Health data request" in the subject. You don't need an account. Because we have no accounts and keep no server copy of your logs, we may ask for the email address you used or a detail only you would know, so we act on the right person's data.
We answer within 45 daysof receiving your request. If we need more time, we'll tell you why within those 45 days and take up to 45 more. Requests are free, up to twice a year.
Appeals:if we turn down any part of a request, reply to our answer with "Appeal" in the subject. We'll give you a written decision, with reasons, within 45 days. If we deny your appeal, you can complain to your state attorney general — for example Washington, Nevada or Connecticut.
6. How long we keep it
On your phone: until you delete it, delete the app, or switch off question 1. AI requests: we don't store them. Emailed-plan records: until you unsubscribe or ask us to delete them.
7. Selling, location and security
We do not sell health data, and we never will without the separate, signed authorization the law requires. We don't collect your location and don't use geofencing. Data in transit is encrypted (HTTPS), only the people who run IronOracle can reach the systems involved, and our service providers are bound by contract to use the data only to provide their service to us.
8. Changes
If we change this policy we update the date above. Before collecting a new kind of health data, sharing it with a new kind of recipient, or using it for a new purpose, we'll ask you again in the app.
9. Contact
Core Capital Investments LLC · corecapitalinvestmentsinc@gmail.com