Effective date: September 10, 2026
Ironside is built and operated by Nexo Development LLC ("we," "us"). This policy explains what information the Ironside iOS app handles and what never leaves your phone. We designed Ironside so that the sensitive part — everything about your body and your training — stays on your device.
Everything you enter or generate while training: your onboarding and safety-screening answers, baseline and retest results, your score and its components, session history, streaks, difficulty settings, and monthly check-in answers. This data is stored locally in the app's private storage and is deleted when you delete the app. We have no copy and no way to read it.
Anonymous product analytics (PostHog, hosted in the United States). A random identifier is generated when you install the app; it is not linked to your identity. We record coarse, pre-defined events — for example that onboarding started, that a training session was completed in a given week of the program, or that a subscription began. These events are category labels only. They never contain your quiz or safety answers, your test results, your score, or any free text.
Install attribution (AppsFlyer). We use Apple's SKAdNetwork framework to learn, in aggregate, which advertising campaigns lead to installs. Ironside does not request App Tracking Transparency permission and does not access your device's advertising identifier. Attribution events are limited to install, trial start, and purchase (with price and currency).
Purchases (Apple and RevenueCat). Subscriptions are billed by Apple through your Apple ID; we never see your payment details. RevenueCat, our subscription infrastructure provider, processes purchase receipts tied to the same random install identifier so the app can verify your subscription.
Your name, email, contacts, location, photos, microphone, health records, or anything from HealthKit. Your answers and results. Your score. We have deliberately built the app so these cannot reach our analytics or attribution providers.
Optional and off until you allow them. Notification titles and bodies are neutral by design ("Today's session is ready") and never reference the app's subject matter.