Privacy Policy

Last updated · 2026-05-19

Who we are

IRONOATH is published by Hidkron ("we", "us", "our"). This policy explains what data the IRONOATH iOS application collects, how we use it, where it lives, and how you can take it back. By installing or signing into the app you accept this policy.

What we collect

When you swear the oath, IRONOATH receives the email address tied to your Apple ID (or the private relay address Apple substitutes on your behalf) so that we may bind your forge to an account. While you train, the app stores the work you do: rites sealed, sets recorded, weights lifted, reps completed, personal records earned, custom movements forged, quests claimed, the character you have built, and the streak you maintain. This is fitness and workout data. It lives both on your device and, while you are signed in, in our account database so it can follow you between devices. We also generate a stable account identifier so we know which rows belong to you.

Diagnostics

If diagnostic reporting is enabled in this build, the app sends anonymous crash reports, sampled performance traces, and a stream of non-personal breadcrumbs (for example "rite sealed", "quest claimed") to a crash-reporting service so we can fix what is broken. These reports are not used to identify you and are not joined with the account database.

How we use what we collect

Your data is used only to operate the forge: to sign you in, to keep your training history intact, to sync it between devices you own, to deliver the in-app progression, and to debug crashes when they occur.

Sharing

We do not sell your data. We do not share it with advertisers, data brokers, or analytics networks. We do not run advertising or marketing trackers. We do not profile you against external data sets. The only parties who ever touch your data are the service providers described in "Where it lives", and they are contractually limited to operating IRONOATH on our behalf.

Where it lives

Account, training, and progression data are stored with trusted infrastructure providers operating on our behalf, hosted in the United States. Crash and diagnostic data are processed by a separate error-reporting provider. All providers act as data processors under written agreements that prohibit using your information for any purpose other than running IRONOATH.

Sign in with Apple

If you choose Sign in with Apple, Apple sends us your name (the first time only, if you allowed it) and either your real Apple ID email or a private relay address that forwards to it. We do not see your Apple ID password. You can stop the relay or revoke IRONOATH at any time from your Apple ID settings.

Your rights and the unmaking

You may unmake the oath at any time. From the Anvil tab choose "Forsake the oath"; this immediately and permanently deletes your account record, all training history, all custom movements, and every other piece of data the server holds about you. Local data on your device is wiped at the same time. The deletion is irreversible.

If you would prefer to walk away with your forge intact, sign out instead. The server-side data remains and returns when you sign in again. You can also request a copy of your data, or correction of anything inaccurate, by writing to the contact address below. We will respond within 30 days.

Children

IRONOATH is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with data, write to us and it will be erased.

Security

We use industry-standard practices to protect your data: encryption in transit (HTTPS/TLS), encryption at rest, role-based access controls on the back end, and an authentication system that holds your password only as a salted hash. No system is invulnerable; if a breach ever occurred that materially affected you, we would notify you without undue delay.

Changes

If this policy changes in a way that affects you, we will update the "last updated" date above and surface the change in the app on next launch.

Contact

Questions, requests, or grievances: [email protected]