Privacy Policy

Last updated · 2026-05-19

What we collect

When you swear the oath, IRONOATH receives the email address tied to your Apple ID (or the private relay address Apple substitutes on your behalf) so that we may bind your forge to an account. While you train, the app stores the work you do — rites sealed, sets recorded, personal records earned, custom movements forged, quests claimed, the character you have built, and the streak you maintain — both on your device and, while you are signed in, in our database so it can follow you between devices. We also collect a stable account identifier issued by our backend so that we know which rows belong to you.

Diagnostics

If diagnostic reporting is enabled in this build, the app sends crash reports, sampled performance traces, and a stream of non-personal breadcrumbs (e.g. "rite sealed", "quest claimed") to our error-tracking provider so we can fix what is broken. These reports are not used to identify you and are not joined with the account database.

How we use what we collect

Your data is used only to operate the forge: to sign you in, to keep your training history intact, to sync it between devices you own, to deliver the in-app progression, and to debug crashes when they occur. We do not sell your data. We do not share it with advertisers. We do not run trackers or load third-party advertising SDKs. We do not profile you against external data sets.

Where it lives

Account, training, and progression data are stored with our backend provider, Supabase, in their managed Postgres infrastructure. Crash and diagnostic data are stored with Sentry. Both providers process the data on our behalf under their standard terms and standard security practices.

Your rights and the unmaking

You may unmake the oath at any time. From the Anvil tab choose "Forsake the oath"; this permanently deletes your account row and every piece of training data the server holds about you. Local data on your device is wiped at the same time. If you would prefer to walk away with your forge intact, sign out instead — the server-side data remains and will return when you sign in again. Apple Sign in with Apple users may also revoke the app from their Apple ID settings.

Children

IRONOATH is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us with data, write to us and it will be erased.

Changes

If this policy changes in a way that affects you, we will update the "last updated" date above and surface the change in the app on next launch.

Contact

Questions, requests, or grievances: privacy@ironoath.app