Ægir Labs, LLC · Ægir Iron · Last updated: October 31, 2026
This notice applies to consumer health data as defined by the Washington My Health My Data Act and Nevada SB 370. It supplements our general Privacy Policy. Where this notice and the general Privacy Policy differ on consumer health data, this notice controls.
In short: Ægir Labs, LLC ("Ægir Labs") does not sell your health data to anyone, and does not use it for advertising. Ægir Iron contains no advertising SDKs, no data-broker integrations, and no cross-site tracking.
Our marketing website (aegirlab.com) runs a Google Ads tag so Ægir Labs can tell which of our own ads brought someone to the site. It is not in the app, it never sees consumer health data, and it is not used to build advertising audiences. Our public calculators can put the numbers you type into the page address so a result can be shared by link; those numbers are stripped before anything is reported to Google, so a bodyweight or lift you enter is never sent to an ad network.
Ægir Iron is a strength training log. Some of what it records could reasonably be read as information about your physical condition, so Ægir Labs treats the following as consumer health data and applies this notice to all of it, whether or not a given item would strictly qualify.
| Category | Purpose |
|---|---|
| Body measurements. Bodyweight entries you record, with the date. | Shown on your dashboard and progress charts, used for bodyweight-relative strength figures, and used to score bodyweight exercises correctly. |
| Readiness and recovery. Your self-reported sleep, muscle soreness and fatigue, desire to train, and stress, plus a recovery estimate derived from them. | Shown alongside the session you logged them with, and used to produce your recovery and training-health views. Entering them is optional. |
| Pain as a swap reason. When you swap an exercise while logging, you can give pain as the reason. It is stored on the swapped sets. | Shown with that session in your history, and to your coach if you are on a coach's roster, so the swap can be followed up. Giving a reason is optional. |
| Injury notes from your coach. If you are on a coach's roster, your coach can keep private notes about you in the app, including injuries and limitations (the body area, its status, and the exercises to avoid). | Lets your coach program around an injury. Visible only to your coach, never to you or anyone else, and deleted when you leave their roster, when they remove you, or when either of you deletes your account. |
| Training activity. Exercises performed, sets, reps, load, RPE, missed attempts, session dates and duration, personal records, and competition results. | The core function of the app: recording your training and showing it back to you. |
| Derived training analytics. Estimated one-rep maxes, training load, muscle-group volume and recovery estimates, and strength-level comparisons, all computed from the above. | The analytics, body map, and progress features you use the app for. |
| Apple Health values (iOS, optional). Your most recent bodyweight sample, and a sleep score computed on your device. | Pre-fills the bodyweight and sleep fields so you do not type them twice. Off unless you turn it on. Your Health records stay on your device. What is stored is what those fields hold when you save a log, the same as if you had typed it, plus your latest body weight reading and the date you connected, which Settings shows. |
Ægir Iron asks for your consent before collecting body measurements, readiness and recovery, pain as a swap reason, and Apple Health values, and collects none of them if you decline. Everything else in the app works the same either way. Injury notes are written by your coach rather than collected from you, so that consent does not cover them; they exist only while you are on that coach's roster. Your training activity and the analytics derived from it are what the app is for, and are collected because you use it to record your training.
Ægir Labs shares consumer health data only with the service providers that operate the app, with the optional services you connect yourself, and with a coach whose roster you have joined. Ægir Labs does not share it with advertisers, ad networks, or data brokers.
| Recipient | What it receives | When |
|---|---|---|
| Google Firebase (Google Cloud) | Stores your account and all training records. This is where your data lives. | Always, as the app database |
| Vercel | Hosts the application. Processes requests in transit; it is not a separate copy of your records. | Always, as the host |
| Sentry | Crash and error diagnostics. Receives an account identifier and technical error context, not your training records. | Only when an error occurs |
| Upstash | Rate limiting. Processes your IP address transiently. No health data. | On certain requests |
| Google reCAPTCHA Enterprise (Google Cloud) | Abuse prevention. Confirms that requests to our servers come from the genuine app by checking technical signals from your browser or device. No health data. | While the app is open |
| Resend | Transactional and account email, and the occasional training nudge, which can mention recent training such as a personal record or how often you have trained. Nothing else from your training history is included. | When email is sent |
| Anthropic, PBC | The AI provider behind Ægir Assistant Coach, Captain Ægir and Convert with AI. Receives what you send through one of them: a Coach message plus the training context needed to answer it, a Captain question with the earlier messages and help articles, or a training log you paste to convert. | Only when you use one of those features. The Coach also has to be turned on first |
| Strava | Receives a single workout you choose to share: its exercises, sets, weights, volume, and any records. | Only if you connect Strava and tap Share on that workout |
| Your coach | If you join a coach roster via their invite link, that coach sees your training data, bodyweight, and readiness entries. | Only while you are on their roster |
Payment processors (Stripe on the web, Apple and RevenueCat on iOS) handle subscription billing and do not receive consumer health data.
The community forum. The app includes an optional discussion forum whose posts are visible to every signed-in user. The app never publishes your consumer health data there. A forum post carries only the text you write and a forum name you choose, and nothing in it links back to your logs, your bodyweight, your readiness entries, or any other health data in your account. Other users cannot reach that data from a post. If you type health information into a post yourself, you are choosing to disclose it publicly, and that disclosure is yours rather than a sharing practice of ours. Posting is entirely optional and is not required to use any other part of the app.
Ægir Labs does not sell consumer health data, and has never sold it. Washington law requires separate, signed written authorization before any such sale. Ægir Labs does not seek that authorization, because it does not sell this data.
Ægir Labs does not operate a geofence around any health care facility, and the app does not collect precise location at all.
If you are a Washington or Nevada consumer, you have the right to:
Ægir Labs responds within 45 days, and may extend once by a further 45 days where the request is complex, telling you why. If Ægir Labs denies a request you may appeal by replying to our response. If Ægir Labs denies the appeal, you may complain to the Washington Attorney General at atg.wa.gov/file-complaint or the Nevada Attorney General at ag.nv.gov.
Deleting your account removes your profile, training logs, sets, personal records, programs, competition history, readiness entries, bodyweight history, coach connections, any notes a coach kept about you, and any stored third-party authorizations such as Strava. Stripe, our card processor, deletes your customer record at the same time and keeps only the payment records the law requires. Error reports in Sentry and email delivery logs at Resend are not deleted one by one; they expire under those services' retention settings. Deleted accounts cannot be restored. Individual sessions you delete can be recovered on request for 30 days, after which they are permanently removed. Deletion from our active systems completes within 30 days. Encrypted backups are rotated out within 98 days; they are never used to restore deleted data, and nothing is repopulated from them.
For as long as your account is active, because the app's purpose is to show you your training history over time. Once you delete your account, the timelines in the previous section apply.
Ægir Labs also deletes accounts that have never been used to train. If an account has never had a workout logged to it and has not been used for 45 days, Ægir Labs may delete it and everything associated with it, because Ægir Labs does not keep health data it has no reason to hold. If you have ever logged a workout, Ægir Labs does not delete your account for inactivity, however long you are away. You are welcome to create a new account whenever you like.
If Ægir Labs changes what it collects, why, or who it shares it with, Ægir Labs will update this notice before the change takes effect, and will not collect or share consumer health data for purposes beyond those described here.
Ægir Labs, LLC
4207 SE Woodstock Blvd, PMB #225
Portland, OR 97206
angela@aegirlab.com