IronStride is an AI-powered endurance coaching app for athletes in South Asia. This Privacy Policy explains what data we collect, why, where it lives, and what you control. Read it once — it stays short on purpose.
IronStride is operated by an individual developer (Shahin Al Kabir Mitul) based in Bangladesh. Contact: mitul.cse@gmail.com.
Account data (required): email, display name, and authentication identifiers from Firebase Authentication. Optionally: age, weight, sex, max heart rate, home country, and language preference — all entered by you.
Training data (when you connect a source): activities from Strava, and health metrics from Apple Health or Android Health Connect — heart-rate variability, resting heart rate, sleep, active energy, and similar. Raw health data lives on your device only; we never copy it to our servers.
Coaching data we generate: AI-generated daily briefs and per-workout analyses, cached in Firestore so we don't re-pay the cost for the same brief. Coach decisions (the verdict the rules engine picked for the day) and a short event log of verdict changes — stored locally and mirrored to Firestore in summary form.
Operator metrics: anonymized counters for daily AI calls and cost, with no identifying information.
As long as your account exists. When you delete your account, we erase your profile, AI cache, coach decision, and all subcollections within minutes via an automated process, and your Firebase Authentication identity is removed in the same operation.
Strava data specifically: imported activities, streams, laps, zones and routes are cached on your device only, for as long as Strava stays connected. When you disconnect Strava, we revoke our access on Strava's servers (calling Strava's own deauthorization endpoint) and delete all locally cached Strava data in the same action — not just future imports, the existing cache too.
IronStride is operated from Bangladesh and primarily serves users in Bangladesh, India, Pakistan, Sri Lanka, and Nepal. We apply the deletion, access, and data-minimization principles described above (right to erasure, right to access, no sale of data, no ad trackers) consistent with the intent of regional data-protection frameworks including Bangladesh's ICT Act data-protection provisions and India's Digital Personal Data Protection Act, 2023, regardless of which country a user connects from.
IronStride is intended for adults. We don't knowingly collect data from anyone under 13. If you believe a child has registered, email us and we'll remove the account.
If material things change, we'll update this page and bump the "Last updated" date at the top. Continued use of IronStride after a change means you accept it. If you don't, delete your account.
Questions, data requests, complaints: mitul.cse@gmail.com.