Disclaimer and privacy

Last updated 8 October 2026

IronScript is something I built for my own training and share for free. This page explains what it is not meant to be, and what it does with your data.

Not medical or health advice

IronScript is a tool for planning and keeping track of your training and food. It is not medical, health or nutrition advice, and it does not know anything about your body or your health.

The numbers it shows, such as an estimated one rep max, are rough figures worked out from what you log. They are estimates, not measurements.

Training and diet carry risk. Talk to a doctor, trainer or dietician before you start something new, and stop if something hurts. You use the app and follow your own plan at your own risk.

Your data stays on your device

When you use IronScript without signing in, everything you create stays only on the device you are using. That includes your workouts, timers, routines, workout history, food schedules and logs, body weight and settings. It never leaves your device and I cannot see it.

Clearing your browser data or removing the app deletes that local data.

When you sign in

Signing in is optional. It backs up your data to the cloud so you do not lose it, and lets you pick it up when you sign in on another device. Backup runs on Google Firebase, using Firebase Authentication and Cloud Firestore. Your backed up data is stored in Firestore under your own account id.

• You can sign in anonymously, which is a private id with no personal details attached.
• You can sign in with a Google account. If you do, Firebase receives your Google account details, such as your email address and name, to identify you and keep your data linked to you.
• What is backed up: your workouts, timers, routines, workout history, food schedules and logs, body weight and app settings.

Tracking other people

Nutrition lets you add extra people, for example a child or a family member, so you can keep track of their food, body weight and calories alongside your own. Everyone you add lives inside your own account. There is no separate login for them, and their entries are stored, backed up and deleted together with the rest of your data. Please only add people whose information you are allowed to keep, and remember that you are responsible for what you record about them.

You can share a person you added with a friend so you both co-own that person and can add or edit their nutrition. When you do, that friend gets read and write access to that one person's nutrition data in your account, and the person shows up in their app too. You can stop sharing at any time, which removes their access. Sharing needs both of you to be friends in the app first.

Health Connect

On Android, Health Connect is optional and off by default. When you turn it on, IronScript can write selected workouts, food logs, water totals and weigh-ins to Health Connect on your device. It can also read selected steps, resting heart rate, sleep and weigh-ins from other apps. You choose which data types to allow, and Android asks for permission before access.

Data read from Health Connect is stored in IronScript on your device. Imported weigh-ins are excluded from IronScript's Firestore backup. Health Connect data is not sent to Gemini or used by the AI coach. Your original IronScript logs still follow the backup settings described above. Turning off the connection stops future syncing but does not remove records already written to Health Connect. You can review or delete those records in Health Connect.

Public profile and social

A public profile and Friends are optional and off by default. If you turn on a public profile, your handle, display name, avatar, bio and level become visible to anyone who has your link or finds you in search, and other signed in people can follow you. Your workouts, nutrition, mood and body weight are never part of it and stay private.

If you use Friends or follow public accounts, only the workouts you choose to share are readable by the friends and followers you allow. You can turn a public profile off, remove a follower or block someone at any time, and deleting your account removes your profile, your handle and your follow connections.

You can publish a standalone timeline post or attach up to three photos to a post, workout or routine. IronScript resizes each photo on your device and removes its embedded photo metadata before storing it in Firebase Storage. Approved photos are available to people allowed to view that shared post. Authorised administrators may also review photos for moderation as described below. Photos are not sent to Gemini by this feature. Removing a post or deleting your account also removes its stored photos. A photo already loaded into an open app or saved by someone may remain visible after access changes.

On Android, viewed timeline photos may be cached in private temporary app storage, with a limit of 100 photos and 100 MiB. Cached photos expire after seven days. Expired entries are removed when the cache is next used. This storage is not included in app backups and the operating system may remove it sooner. The web app keeps these photos in memory only. After an app restart, viewing a cached photo still requires an online access check. Short access approvals last less than two minutes and are never saved to disk. Signing out, changing accounts or turning Friends off clears the photo cache. Admin review photos do not use this cache.

Timeline photo moderation

Photos submitted for timeline sharing are checked using Google Cloud Vision SafeSearch before they can be viewed on the timeline. This sends the photo to Google to help identify explicit content and violence. Automated checks can make mistakes and do not identify every kind of harmful content. This safety check is separate from the optional Gemini features and cannot be turned off for timeline photo sharing.

Authorised administrators may review photos, scan results, reports and relevant shared post details when a check is uncertain or a post is reported. They do not need to be your friend or follower to carry out this review. This access is restricted to moderation and does not grant access to your private workout, nutrition or mood history.

Abandoned uploads are scheduled for removal after 24 hours. Rejected photos are scheduled for removal after seven days, and photos awaiting review or a completed check are kept for at most 30 days. Approved photos remain while their post exists. Moderation decisions and reports are scheduled for removal after 90 days without retaining a separate copy of the photo. Cleanup runs periodically, so processing backlogs can delay removal. Minimal hashed deletion markers may remain to prevent deleted accounts or removed posts from being restored by unfinished requests.

Deleting your account removes its moderation photos and associated records. Storage recovery settings may retain deleted files temporarily. A temporary image link can continue working until it expires, and copies already loaded or saved by someone cannot be recalled.

Google Firebase

Because backup relies on Google Firebase, the data you back up is handled on Google servers. How Google handles it is covered by their own privacy policy, which you can read at firebase.google.com/support/privacy and policies.google.com/privacy.

AI features

The optional AI coach and the AI calorie estimates run on Google Gemini. When you use them, a summary of your data, or the photo or barcode you scan, is sent to Google to produce a result. AI is off unless you ask for it, and you can turn it off completely in Settings.

Analytics

This site and the app use Google Analytics, part of Firebase Analytics, to count visits and see which features get used, so I know what to improve. It records usage events and a rough location from your IP address. It never sees your workouts, food, mood or body weight.

Payments

IronScript Pro is an optional paid subscription. On the web, payments are handled by Polar, which acts as the merchant of record and receives the information needed to process your payment. In the Android app, payments are handled by Google Play under your Google Play account. IronScript never sees or stores your card details.

How Polar handles your data is covered by their own privacy policy, which you can read at polar.sh/legal/privacy.

Manage or cancel your subscription through the provider you paid. Polar subscriptions are managed in the Polar billing portal. Google Play subscriptions are managed in Google Play. Deleting your IronScript account stops renewals before the account is removed. Google Play access lasts until the end of the period already paid for. Polar subscriptions are canceled immediately.

After account deletion, IronScript keeps a hashed Google Play purchase reference and a random billing identifier for up to 60 days to prevent a deleted purchase from being linked to another account. These identifiers are then removed.

Other services

• Barcode lookups use OpenFoodFacts to find product details.
• Sign in and abuse protection use Google reCAPTCHA and Firebase App Check.

Removing your data

• Local data: clear your browser data or remove the app from your device.
• Export: open Settings, then Data and privacy, to download everything you have as a file before you delete it.
• Backed up data: open Settings, then Data and privacy, then delete your account and all data. That removes everything from Firebase. You can also sign out to stop backing up on this device.
• No app at hand? The delete your account page explains how to do it on the web or by email, and what is kept.

Changes to this page

If I change how any of this works, I will update this page and the date at the top.

Contact

IronScript is a personal project. Email me at support@ironscript.dev, or reach me on LinkedIn at linkedin.com/in/baswijdenes.