Privacy Policy

Overview

FlexIron ("the app") is a workout, nutrition, and recovery-tracking app. This page describes what data the app collects, why, where it's stored, who it's shared with, and how to delete it. It covers both the web app and the Android mobile app.

Account data

Signing in uses Google Sign-In. FlexIron receives your name and email address from Google to create and identify your account — it never sees or stores your Google password.

Fitness & health data you enter

Data you log yourself, stored against your account so it syncs across your devices:

• Profile details: age, gender, height, weight, fitness goal, and experience level.
• Workout sessions: exercises, sets, reps, and weights you log.
• Food entries: what you log, including any food photos you choose to scan.
• Body-weight and measurement logs, and progress photos you choose to add.
• Menstrual cycle logs (flow, symptoms, mood) — entirely optional, and only stored if you use that feature.
• Habit logs (caffeine intake, stress level) and water intake.
• Your conversations with the AI coach.

Wearable & Health Connect data (Android)

If you connect a wearable via Android's Health Connect, and only after you grant each permission individually, the app can read: steps, active and basal calories burned, resting and active heart rate, sleep sessions, VO2 max, respiratory rate, and skin temperature. This is used to compute your daily Recovery, Sleep, and Strain scores and to personalize notifications and coaching. You can revoke any of these permissions at any time in Android's Health Connect settings, and the app continues to work without them — features that depend on wearable data simply show no data instead of a guess.

A background task may periodically re-read this data (when the device allows it) so your morning notification can reflect real numbers even if the app hasn't been opened yet that day. This runs locally on your device; FlexIron does not track your location or activity beyond what Health Connect reports.

Where data is stored

Data you log — profile, workouts, food, photos, wearable readings, coach conversations — is stored in FlexIron's own database, hosted on Cloudflare. Some preferences that are specific to one device (like notification timing) are kept only on that device and are not synced.

Third parties

• Google — for sign-in, and to power the AI coach and briefings (Gemini). Messages you send the coach, along with a summary of your recent activity, are sent to Google's Gemini API to generate a response. Google does not receive your raw account credentials.
• Cloudflare — hosts the app and its database. Cloudflare does not receive your data for any purpose beyond serving it back to you.

FlexIron does not sell your data, and does not share it with advertisers.

Your controls

• Edit or remove any logged entry at any time from within the app.
• Revoke Health Connect permissions individually from Android system settings.
• Delete your account from Profile → Account. This permanently deletes your account on our server and clears every local copy of your data from that device — this cannot be undone.

Children

FlexIron is not directed at children under 13, and knowingly does not collect data from them.

Changes to this policy

If this policy changes in a way that affects what's collected or how it's used, the effective date above will be updated.

Contact

Questions about this policy or your data: abhikhan1010@gmail.com.