Ægir Labs, LLC · Last updated: September 6, 2026
Ægir Labs, LLC ("we," "our," or "us") operates Ægir Iron (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App.
Information you provide directly:
Information collected automatically:
Vercel Analytics is cookieless and does not track you across other websites.
About the Google Ads tag: it runs only on our marketing website. It does not run inside the App, and it never has access to your training data, your health data, or anything you enter while signed in. It records that a visit to our site came from one of our ads, and may set a first-party cookie on aegirlab.com for that purpose. We have turned off ads personalization, so the tag is not used to build remarketing or interest-based advertising audiences from your visit. If you are in the EEA, the UK, or Switzerland, the tag runs with all storage denied by default: no cookies or advertising identifiers are stored, and Google receives only an anonymous, cookieless signal. We do not use Google Analytics, session replay tools, or cross-site tracking cookies on our website or in the App.
Payment information: We do not store payment information directly. On the web, payment processing is handled by Stripe, Inc.; please review Stripe's Privacy Policy at stripe.com/privacy. On iOS, subscriptions are processed by Apple via the App Store, with subscription state tracked through RevenueCat; please review Apple's Privacy Policy at apple.com/legal/privacy and RevenueCat's at revenuecat.com/privacy.
We do not sell or rent your personal information, and we do not give third parties your training data, your health data, or your account details for their own marketing. The one exception to the word “share” is narrow and described in Section 2: our marketing website tells Google Ads that a visit followed one of our ads, so we can see which ads work.
Your data is stored securely on Google Firebase (Google Cloud Platform). We implement industry-standard security measures including encrypted connections and Firebase security rules to protect your data from unauthorized access.
The app includes an optional community forum. Posting is not required to use the app, and nothing you write anywhere else in the app is ever published to it.
Forum posts are public to other users. Any thread or reply you post can be read by every signed-in user of Ægir Iron. A post shows the forum display name you choose. It does not show your legal name, your email address, or any of your training, health, or account data, and other users cannot reach that data from your post. If you choose to type training or health information into a post, you are making that information public yourself.
Moderation. Posts are screened automatically before publication and some are held for human review. You can report a post or block another user from the menu on any post; a block hides that person's content from you and is undone in Settings. Reports are reviewed by a person, ordinarily within one business day, and include the reporting user's identity so we can act on abuse of the reporting system itself. We do not tell the reported user who reported them. Removed posts remain stored, not visible, so that repeat problems can be handled.
Deleting your account. Deleting your account removes your forum replies outright. A thread you started is removed too if nobody replied to it; if other people did reply, the thread is stripped of your text, your display name and every link to your account, and their replies remain, because those are their words and not ours or yours to withdraw. Reports you filed, and reports filed about your content, are deleted with your account.
Full rules are in the Community Guidelines, reachable from the forum itself.
The app offers an optional in-app AI assistant, Ægir Assistant Coach, that is off until you enable it. When it is enabled and you send a message, the text you type plus the training context needed to answer it (such as your recent logs, training maxes, your programmed sessions, analytics summaries, and the exercise catalog) is sent to Anthropic, PBC to generate the response.
This only happens while the feature is enabled and you are actively using it; nothing is sent automatically. Your inputs are not used to train Anthropic's models. Once your message is processed, Anthropic's handling of it is governed by Anthropic's Privacy Policy. You can stop all of this at any time by disabling the feature in the app's Settings, which is also its default state. Disabling it does not cancel the paid add-on; you can manage or cancel that separately.
We do not store your conversations with the assistant. The chat is held in your device's memory only while the app is open, and is cleared when you reload or close the app, start a new chat, or sign out. It is never written to your device's storage or to our database.
The app offers an optional, one-way integration with Strava that is off until you connect it. If you connect your Strava account and then choose to share a specific workout, we send that workout's training data (its exercises, sets, weights, total volume, and any personal records) to Strava to create an activity on your Strava feed.
This sharing is manual and one-way: it happens only when you tap Share for a given workout, nothing is shared automatically, and we never read your activities or any other data from Strava. To keep the connection active without asking you to sign in each time, we store your Strava authorization tokens in encrypted form on our servers. Once data is on Strava, it is governed by Strava's Privacy Policy. You can disconnect Strava at any time in the app's Settings, which deletes the stored tokens; deleting your account also removes them.
The iOS app offers an optional, read-only integration with Apple Health, off by default. When you turn it on in Settings → Apple Health, the app:
The app does not write workouts, calories, or any other data back to Apple Health. Apple Health data is read only on your device. We do not transmit any Health data to our servers, third parties, or any other destination. The only Health-derived value we ever store off-device is the body weight number itself (in your training log entries), which is no different from a value you would have typed manually into the app's bodyweight field. Sleep scores are not stored off-device. You can revoke our access at any time via the iOS Health app → Sharing → Apps → Ægir Iron, and you can disable the integration entirely from Settings → Apple Health within the app.
We retain your personal data and training data for as long as your account is active, except as described under Inactive accounts with no training history below. If you delete your account, we permanently remove all of your personal data, training logs, personal records, programs, and competition history from our active databases within 30 days. Encrypted backups containing the data are rotated out within 98 days.
Inactive accounts with no training history. Ægir Iron is free for individual lifters, and we do not keep personal information we have no reason to hold. If an account has never had a workout logged to it and has not been used for 45 days, we may delete that account and the data associated with it, including any programs created on it. If you have ever logged a workout, we do not delete your account for inactivity, however long you are away. We also never remove an account this way if it is linked to a coach's roster or has held a paid subscription. Deletion is permanent and follows the same process and timelines described above, and you are welcome to create a new account at any time.
The only exceptions are: (a) legally required records (for example, tax records of completed payments, retained by our payment processors for the period required by law); and (b) anonymous, aggregated usage statistics that contain no personally identifying information.
You can permanently delete your account and all associated data at any time, directly from within the App:
This deletes your account, training data, personal records, programs, coach-athlete relationships, and any connected third-party authorizations (such as Strava) from our active systems within 30 days. As an alternative, you may email angela@aegirlab.com to request deletion; we will process the request within 10 business days.
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:
We are based in the United States, and the service providers listed in Section 5 (including Google Firebase, Vercel, Stripe, Resend, Sentry, Upstash, and Anthropic) may process your data in the United States and other countries. Where personal data is transferred out of the EEA or the UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) offered by those providers.
If you are in the EEA or the UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. You can exercise these rights using the in-app tools described in Sections 9 and 10 above, or by emailing angela@aegirlab.com. You also have the right to lodge a complaint with your local data protection supervisory authority.
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access to or deletion of that information, and to request correction of inaccurate information. We do not sell your personal information as that term is defined under the California Consumer Privacy Act (as amended by the CPRA), and we do not use it for cross-context behavioral advertising: the Google Ads tag on our marketing website measures whether our own ads led to a visit, and we have turned off ads personalization so it is not used to target you elsewhere. We will not discriminate against you for exercising these rights. To make a request, email angela@aegirlab.com or use the in-app account controls described in Section 9.
The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Where a higher minimum age applies under local law (for example, the digital-consent age in parts of the EEA, which can be up to 16), the App is not directed at users below that age, and they may use it only with the consent of a parent or guardian. If you believe a child below the applicable age has provided us with personal information, please contact us and we will delete it.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the App after changes constitutes acceptance of the updated policy.
Ægir Labs, LLC
4207 SE Woodstock Blvd, PMB #225
Portland, OR 97206
angela@aegirlab.com