Privacy
Last updated 15 November 2026
IRONLOG is a training log. This page says exactly what it stores, where it goes, and who can see it. It is written to be read, not to be skimmed past.
The short version
- There are no adverts, no analytics, no tracking pixels, and no third-party scripts of any kind.
- Nothing is sold or shared with anyone for marketing.
- Your training is visible to your crew. That is the point of the app, and it is the main thing to understand before you log anything.
- You can delete your account, and everything in it, from inside the app.
What is stored
To have an account: your email address, a display name, a hashed password, and the phone number whoever invited you put on the invite. The phone number exists so you can get back in if you forget your password.
Because you answered the survey: your goal, biological sex, age, height, weight, how active you are, your training experience, how many days and how long you train, what equipment you have, how you eat, how aggressive a pace you chose, and any joints you flagged as giving you trouble.
As you train: every workout — the exercises, sets, weights, reps, how long the session took, and any notes or captions you write — plus your bodyweight entries and any reactions you leave on other people's sessions.
Proof photos, if you take them.
Some of this is health information: your bodyweight over time, and the joints you told us bother you. It is treated as the most sensitive thing here. It is never used for anything other than building your plan and showing you your own history.
Who can see it
Everyone in your crew sees your workouts, your display name, your proof photos, and the reactions you leave. Your crew is set by your invite; you cannot change it from inside the app, and neither can anyone else in it.
Nobody outside your crew can see any of it. Proof photos are stored in a private bucket and served only to signed-in members of your crew — a photo link on its own gives a stranger nothing.
Your email address, phone number, survey answers and bodyweight log are never shown to your crew. Only you see those.
Where it is kept
- Neon — a Postgres database in AWS
us-east-2(Ohio, USA). Accounts, workouts, survey answers, bodyweight. - Cloudflare R2 — Eastern North America. Proof photos only, in a private bucket.
- Cloudflare Pages — serves the app itself.
- Telnyx — receives your phone number only at the moment a password-reset text is sent, so that it can deliver it.
Those four are the only companies involved. None of them is given your data for their own purposes.
Cookies
One cookie, called better-auth.session_token. It is what keeps
you signed in. It is marked HttpOnly, Secure and
SameSite=Lax, and it lasts 60 days or until you sign out.
There are no advertising or analytics cookies, so there is no consent banner to click through. A cookie that exists purely to keep you signed in does not require one.
The app also stores your workouts on your own phone, so it keeps working in a basement gym with no signal. "Erase everything on this phone" in the Me tab clears that; signing out clears it too.
How long it is kept
Until you delete it. There is no automatic expiry and no archive you cannot reach. Delete your account and the rows are removed immediately, including the proof photos.
What you can do
- See it — all of it is already in the app: your plan, your history, your bodyweight trend.
- Correct it — redo the survey, edit or delete any session.
- Delete it — Me → Delete my account. This removes your account, every workout, your bodyweight history, your plan and every proof photo, from the server as well as your phone. Your posts disappear from your crew's feed. It cannot be undone.
If you are in the UK or EU, those are your rights under GDPR; in California, under the CCPA. The app implements them directly rather than making you ask.
Age
IRONLOG is not for under-13s, and the survey will not accept an age below 13. Nobody can sign up without an invite, so please do not invite a child.
Security
Passwords are hashed, never stored as text. Sign-up requires an invite token; there is no open registration. Passkeys are supported if you prefer not to use a password at all. Resetting a password signs out every other device.
Getting in touch
Questions, or you want your data removed and cannot get into your account: [email protected].
This policy describes what the software actually does, verified against the code. It has not been reviewed by a lawyer. If IRONLOG ever takes payment, adds analytics, or opens to the public, it needs revisiting before that happens.