Data controller

The controller of your personal data is Iron Doctrine, s.r.o., company ID 29839173, registered office Mělnická 209, Přívory, 277 16 Všetaty, entered in the Commercial Register kept by Městský soud v Praze, sp. zn. C 453224.

For any data-protection matter, contact us at info@irondoctrine.cz.

What data we process

Identification and contact data: name, email, and optionally phone and Instagram.

Training data: bodyweight, measurements, ratings (energy, strength, sleep, motivation, digestion) and check-in notes.

Progress photos, which constitute a special category of personal data — health data.

Purposes and legal basis

Providing personal coaching and training guidance — based on performance of a contract (Art. 6(1)(b) GDPR).

Processing progress photos and health data — solely on the basis of your explicit consent (Art. 9(2)(a) GDPR).

Recipients and processors

Supabase — database hosting and private photo storage (EU).

Vercel — application hosting and operational logs. Brevo — email delivery (EU).

Sentry — application error reporting (EU, Frankfurt). Receives technical error data only; we do not send it your training data, measurements or photos.

Microsoft 365 — our company mailboxes, so anything you send us by email.

Expo — push notification delivery (processes your device identifier, USA).

Storage and retention

Progress photos are kept in private storage and are not publicly accessible.

We retain your data for as long as your account exists. Delete the account and it goes with it — except accounting records, which we are required by law to keep for 10 years. Those contain only what tax law requires, not your training data, measurements or photos.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw your consent at any time.

On request we will give you a copy of everything we hold about you in a machine-readable format — write to info@irondoctrine.cz and we will respond within one month.

You can delete your account yourself, in the app's settings.

You also have the right to lodge a complaint with the supervisory authority — in the Czech Republic, the Office for Personal Data Protection (www.uoou.gov.cz).

Cookies

We use no analytics and no advertising tools, and we do not track you across sites. We store only what the app cannot work without: your sign-in and your language choice. That is why there is no consent banner — strictly necessary cookies do not require consent.

Waitlist (before launch)

Before we launch you can leave your email on the pricing page so we can tell you when we open. We store only your email, your language and which plan you looked at.

The purpose is a single message — the launch announcement. We send nothing else to that address and we share it with nobody. The legal basis is your consent, given by submitting the form.

We delete you on request at any time, and in any case once the announcement has gone out and the list has served its purpose. Write to info@irondoctrine.cz.

Withdrawing consent

You can withdraw your consent to processing progress photos and health data at any time — write to us at info@irondoctrine.cz. Withdrawal does not affect the lawfulness of processing carried out before it.