Ægir Labs, LLC · Ægir Iron · Last updated: September 6, 2026
This notice applies to consumer health data as defined by the Washington My Health My Data Act and Nevada SB 370. It supplements our general Privacy Policy. Where this notice and the general Privacy Policy differ on consumer health data, this notice controls.
Two things worth stating plainly at the top: we do not sell your health data to anyone, and we do not use it for advertising. Ægir Iron contains no advertising SDKs, no data-broker integrations, and no cross-site tracking.
Our marketing website (aegirlab.com) runs a Google Ads tag so we can tell which of our own ads brought someone to the site. It is not in the app, it never sees consumer health data, and it is not used to build advertising audiences. Our public calculators can put the numbers you type into the page address so a result can be shared by link; those numbers are stripped before anything is reported to Google, so a bodyweight or lift you enter is never sent to an ad network.
Ægir Iron is a strength training log. Some of what it records could reasonably be read as information about your physical condition, so we treat the following as consumer health data and apply this notice to all of it, whether or not a given item would strictly qualify.
| Category | Purpose |
|---|---|
| Body measurements. Bodyweight entries you record, with the date. | Shown on your dashboard and progress charts, used for bodyweight-relative strength figures, and used to score bodyweight exercises correctly. |
| Readiness and recovery. Your self-reported sleep, muscle soreness and fatigue, desire to train, and stress, plus a recovery estimate derived from them. | Shown alongside the session you logged them with, and used to produce your recovery and training-health views. Entering them is optional. |
| Training activity. Exercises performed, sets, reps, load, RPE, missed attempts, session dates and duration, personal records, and competition results. | The core function of the app: recording your training and showing it back to you. |
| Derived training analytics. Estimated one-rep maxes, training load, muscle-group volume and recovery estimates, and strength-level comparisons, all computed from the above. | The analytics, body map, and progress features you use the app for. |
| Apple Health values (iOS, optional). Your most recent bodyweight sample, and a sleep score computed on your device. | Pre-fills the bodyweight and sleep fields so you do not type them twice. Off unless you turn it on. The sleep score is never transmitted to us; only a bodyweight number you could have typed yourself is stored. |
We share consumer health data only with the service providers that operate the app, with the optional services you connect yourself, and with a coach whose roster you have joined. We do not share it with advertisers, ad networks, or data brokers.
| Recipient | What it receives | When |
|---|---|---|
| Google Firebase (Google Cloud) | Stores your account and all training records. This is where your data lives. | Always, as the app database |
| Vercel | Hosts the application. Processes requests in transit; it is not a separate copy of your records. | Always, as the host |
| Sentry | Crash and error diagnostics. Receives an account identifier and technical error context, not your training records. | Only when an error occurs |
| Upstash | Rate limiting. Processes your IP address transiently. No health data. | On certain requests |
| Resend | Transactional and account email. No health data in message bodies beyond what a notification names. | When email is sent |
| Anthropic, PBC | The AI provider behind Ægir Assistant Coach. Receives your typed message plus the training context needed to answer it. | Only if you enable the assistant and send a message |
| Strava | Receives a single workout you choose to share: its exercises, sets, weights, volume, and any records. | Only if you connect Strava and tap Share on that workout |
| Your coach | If you join a coach roster via their invite link, that coach sees your training data, bodyweight, and readiness entries. | Only while you are on their roster |
Payment processors (Stripe on the web, Apple and RevenueCat on iOS) handle subscription billing and do not receive consumer health data.
The community forum. The app includes an optional discussion forum whose posts are visible to every signed-in user. The app never publishes your consumer health data there. A forum post carries only the text you write and a forum name you choose, and nothing in it links back to your logs, your bodyweight, your readiness entries, or any other health data in your account. Other users cannot reach that data from a post. If you type health information into a post yourself, you are choosing to disclose it publicly, and that disclosure is yours rather than a sharing practice of ours. Posting is entirely optional and is not required to use any other part of the app.
We do not sell consumer health data, and we have never sold it. Washington law requires separate, signed written authorization before any such sale. We do not seek that authorization, because we do not sell this data.
We do not operate a geofence around any health care facility, and the app does not collect precise location at all.
If you are a Washington or Nevada consumer, you have the right to:
We respond within 45 days, and may extend once by a further 45 days where the request is complex, telling you why. If we deny a request you may appeal by replying to our response. If we deny the appeal, you may complain to the Washington Attorney General at atg.wa.gov/file-complaint or the Nevada Attorney General at ag.nv.gov.
Deleting your account removes your profile, training logs, sets, personal records, programs, competition history, readiness entries, bodyweight history, coach connections, and any stored third-party authorizations such as Strava. We instruct our service providers to do the same. Deletion from our active systems completes within 30 days. Encrypted backups are rotated out within 98 days; they are never used to restore deleted data, and nothing is repopulated from them.
For as long as your account is active, because the app's purpose is to show you your training history over time. Once you delete your account, the timelines in the previous section apply.
We also delete accounts that have never been used to train. If an account has never had a workout logged to it and has not been used for 45 days, we may delete it and everything associated with it, because we do not keep health data we have no reason to hold. If you have ever logged a workout, we do not delete your account for inactivity, however long you are away. You are welcome to create a new account whenever you like.
If we change what we collect, why, or who we share it with, we will update this notice before the change takes effect, and we will not collect or share consumer health data for purposes beyond those described here.
Ægir Labs, LLC
4207 SE Woodstock Blvd, PMB #225
Portland, OR 97206
angela@aegirlab.com