Iron & Oven

Privacy

Effective 21 October 2026. Rude Company LLC ("we").

Iron & Oven is a personal training, nutrition and cooking app. This page says what the app and this website do with your data, in plain terms.

What stays on your phone

Everything you log — workouts, meals, weight, check-ins, progress photos, body scans, recipes, shopping lists, chat history and your plan — is stored on your device in the app's own database. We do not run accounts or servers that hold your logs. Deleting the app deletes them. You can export everything from Settings → Export my data at any time.

Apple Health

With your permission the app reads weight, height, body fat, steps, walking distance, active and resting energy, exercise minutes, sleep, resting heart rate, heart rate variability, VO2 max, workouts, birthday and sex from Apple Health to set your targets and show your progress. It writes the meals (calories, protein, carbs, fat and fiber), water, workouts and weigh-ins you log back to Apple Health.

Health data is never sent to us and never included in usage statistics. It is sent to the AI service you chose only after you allow it, only as part of a request, and only the figures that request needs. You can keep Health data out of AI requests altogether with Settings → AI service → Include Apple Health data, and revoke the app's access in the Health app.

AI providers

The coaches are powered by third-party language models. Nothing goes to an AI service until you allow it: the app asks first, names the service, and asks again if you switch services. After that, when you send a message or scan a meal, the message, any photo you attach or scan, and the context the coach needs (relevant parts of your plan, recent logs, and the Apple Health figures above, unless you've turned those off) are sent to the service you picked in Settings → AI service:

We only send data to services whose privacy terms give it the same or equal protection as this policy, and each service's own policy also applies. We use API routes that don't train on your data where the service offers that. Services keep requests under their own retention rules (OpenAI and Anthropic APIs keep them up to 30 days for abuse monitoring). To stop, tap Stop sharing or disconnect the service in Settings → AI service; nothing more is sent after that.

Usage statistics

To find bugs and see which features get used, this website, and the app if you turn it on, send anonymous usage events to PostHog, our analytics provider: things like "opened the app", "logged a meal", "finished a session", the app version, device model and iOS version, and a random install ID generated on your phone. The website records page views and button clicks.

These events never contain your name, email, health data, food or workout entries, messages, photos, or anything you typed. We don't use the advertising identifier, don't track you across other apps or sites, don't sell this data, and don't link it to you. The website sets no cookies for this and honours Do Not Track and Global Privacy Control.

In the app, usage statistics are off until you turn on Settings → App → Share usage statistics; turn it off again and nothing more is sent. Reinstalling the app makes a new install ID, so old events can't be tied to you again; email hello@ironandoven.com to have them deleted.

Other connections you can turn on

Each of these is off until you connect it, and each can be disconnected in Settings:

Always on, without an account:

Sign-ins use OAuth. Tokens are kept in the iOS keychain on your device and are only ever sent to the service that issued them.

Camera and photos

Meal photos, progress photos and body-scan captures are taken only when you tap the camera and are stored on your device. A meal photo is sent to your AI provider when you ask for an estimate. Progress photos can be locked behind Face ID.

Beta signups

If you join the TestFlight waitlist on this website, we store the email address you give us, and the optional note about your iPhone or what you want help with, in a database on Cloudflare, which hosts the site. We use the email to send your TestFlight invite and the occasional note about the beta, and for nothing else: no newsletter, no selling it, no sharing it except with Apple when we invite you to TestFlight. To stop the form being flooded, we also keep a salted one-way hash of your IP address for up to a day. Email hello@ironandoven.com and we will delete your signup.

Deleting your data

Delete the app to delete everything it stored. Export it first from Settings → Export my data if you want a copy. For usage statistics or a beta signup, email hello@ironandoven.com and we'll delete them.

What we keep

The anonymous usage events above, if you turned them on, kept by PostHog for up to 12 months. Beta signup emails, until the beta ends or you ask us to delete them. If you email us for support we keep the email. Nothing else.

Your rights and where your data goes

This section is for people in the EU, the UK and anywhere with similar privacy laws.

Who is responsible. Rude Company LLC is the controller for the data this website and our analytics collect. Contact us at hello@ironandoven.com.

What we hold about you, and why. Almost nothing: your logs stay on your device, where we can't see them. What we do hold, and the legal basis for each:

Sending data to an AI service. When you ask the crew something, the app sends your message, and the figures it needs, to the AI service you chose. That can include health data such as weight or sleep, but only after you allow it on the sheet that names the service. That is your explicit consent, and you can withdraw it in Settings → AI service. The AI service you connect handles that data under its own terms.

Where data goes outside your country. These companies process data for us, and some of it is handled in the United States:

Transfers to the US rely on the EU–US Data Privacy Framework where the company is certified, and on the European Commission's standard contractual clauses.

Your rights. You can ask us for a copy of the data we hold about you, or ask us to correct it, delete it, restrict it or move it. You can object to our using it, and you can withdraw consent at any time; that doesn't affect anything done before. Email hello@ironandoven.com and we'll reply within one month. For data in the app, you're in control directly: Settings → Export my data, or delete the app. You also have the right to complain to your local data protection authority.

Children

Iron & Oven is not directed at children under 13 and we do not knowingly collect their data.

Changes

We will post changes here and note the date at the top.

Contact

hello@ironandoven.com