Consumer health data notice
Last updated: June 22, 2026
Consumer health data and privacy requests: privacy@asperia.app
This notice describes how IronCoach handles consumer health data in the private beta where a state consumer health privacy law applies. It supplements the Privacy Notice and does not limit additional rights available under applicable law.
Categories collected
Training plans, workouts, goals, event details, readiness, sleep or recovery metrics, nutrition preferences, injury or condition notes, medications or allergies you choose to provide, uploaded document content, imported provider records, and generated coaching context.
Purposes
Account operation, coaching drafts, safety guardrails, document processing, provider import, user export and deletion, security monitoring, support, abuse prevention, and legal obligations.
Sources
You, uploaded files, manual imports, connected providers you authorize, generated plan workflows, and service logs needed to operate and secure IronCoach.
Sharing
Service providers needed for hosting, database, storage, security scanning, worker processing, alerting, email or SMS, connected providers you choose, and server-side OpenAI plan generation when enabled. We do not sell consumer health data.
Consent
Mexico users must give express consent before IronCoach processes sensitive personal data in health-related beta onboarding and coaching contexts. Consent can be withdrawn, subject to legal or security retention limits.
Rights
You can request access, correction, deletion, consent withdrawal, opposition, and information about sharing. For Mexico users, this includes ARCO requests for access, rectification, cancellation, and opposition. Use in-product account controls where available or privacy@asperia.app.
Retention
Active account data is kept while your account is active unless deleted sooner. Account exports expire after seven days. Account deletion removes user-prefixed objects and account rows, with restricted tombstones retained to prevent deleted data from reappearing after backup restore.
IronCoach does not use geofences around in-person health care facilities to identify or track consumers, collect consumer health data, or send health-related messages.