1. Who is responsible Iron Sharpens Iron (ISI) is the service name for the fitness, nutrition, habit and faith app at isi.fitness. Its legal operator is ISI Alberta Inc, based in Alberta, Canada. References to ISI, we and us mean that operator. Privacy Officer: Jade Chiles, legal@isi.fitness. Use this contact for requests, complaints and questions about providers outside Canada. This policy explains our handling of personal information. Alberta PIPA applies where its scope is met; PIPEDA applies to activities within its scope, including relevant interprovincial or international commercial handling. Other privacy laws may apply depending on the person and activity. A reference to a law does not mean that every provision applies to every member.
2. Information we collect and why - Account: email, name, optional photo, authentication records, date of birth or age, sex, height, units, time zone and preferences. We use these to run your account, confirm eligibility and calculate your program. Authentication is managed by Base44; ISI does not receive your readable password through the app. - Intake: goals, weight, measurements, body-fat estimate, experience, equipment, schedule, activity, benchmarks, motivations, eating preferences, allergies, budget and lifestyle habits. We use these to assemble and adjust your program. - Health: pre-exercise screening answers, medications, injuries, conditions, pregnancy/postpartum information where supplied, eating-related screening answers, flags and accommodations. We use these to identify when professional advice is needed and to adapt general fitness guidance. These screens are not diagnoses or medical clearances. - Training and nutrition: workouts, loads, effort, personal records, weight, readiness, sleep, meals, meal photos, meal plans, supplements and daily tasks. We use these for logging, estimates, plans, progress and relevant coaching. - Faith and reflection: prayer and journal entries, mood, motivations and faith/family/fitness/finance ratings. These may reveal religious beliefs or health status. Optional reflection tools are your choice; do not put another person's private information in them. - Community: team membership, email, display name, photo, targets, activity, category scores, rank, partner connections, stories, cheers and spurs. These support the community features and the sharing described in section 4. - Technical and legal records: IP address, device/browser information, requests, errors, login events and acceptance/consent records. These support authentication, security, troubleshooting, accountability and legal obligations. The app also saves working state and onboarding drafts, which can include sensitive answers, in browser storage on your device. We do not intentionally collect precise location or contacts. This version does not accept payments or collect payment card numbers. We do not operate a personal-information sale or targeted-advertising program. Changes to collection or monetization require a fresh review and appropriate notice and consent.
3. Consent and choice Before collecting health information, we provide a clear notice covering the categories, purposes, recipients and cross-border processing, and request affirmative consent separately from acceptance of the Terms and injury release. Faith/reflection information has a separate optional consent and explanation. Declining optional reflection or marketing does not prevent access to the core fitness program. Some health information is reasonably needed for personalized programming. If you decline or withdraw consent for that necessary processing, we explain which personalized features cannot continue. Withdrawal of optional faith, community or marketing consent does not automatically close your account. Where closing the account is necessary or you request it, section 7 applies. Withdrawal operates prospectively and does not reverse lawful prior processing. You can decline meal-photo analysis, refrain from posting, avoid teams and partners, and change optional weight-sharing choices. Consent to community disclosure must identify the information actually returned to recipients, including health-related scores. Use You > Privacy & data for optional consent settings, records export and deletion requests, or email legal@isi.fitness. We do not treat mere acceptance of this policy as blanket consent to every optional purpose.
4. Who can see your information You: your own records in the relevant app screens and through an access request. Authorized staff and coach: administrators can technically access member records, including sensitive records. Access is authorized only as reasonably needed for support, privacy requests, safety-related program review, coaching or security. We aim to limit privileges to each person's role and require confidentiality. We do not promise that records are technically inaccessible to administrators. Teams: joining makes your display name, photo, account email, rank, workout target, daily completion, category scores and activity available to team members. Activity may reveal prayer/journal task completion, custom-task names, personal-record loads and stories. Weight-goal category progress is shared only when weight sharing is enabled and community sharing is permitted. Completion of a prayer or a revealing custom task may itself disclose sensitive information. Optional weight display: Progress shares pounds lost and percentage to goal; Everything shares starting, current and goal weights. Off suppresses weight display and weight-goal category progress in the team response. Do not join a team unless you are comfortable with the disclosed information. Community sharing requires a separate opt-in. A separate opt-in is required to create community records and disclose your current member profile and scoreboard summary. Previously shared posts and copies are not automatically recalled by switching sharing off; contact us to request removal. Partners: the partner feature shares account email, display name, photo, task counts, workout completion, streak, weekly workouts and recent activity indicators. Partners and teams do not receive prayer/journal text, medications or screening answers through the team and partner snapshot functions. User posts and custom-task titles may disclose more than these structured fields. Stories display for a limited period, normally 24 hours. Expiry from a feed does not necessarily erase the stored file. Other members can take screenshots or retain what you share; removing it cannot recall their copies. Providers: Base44 hosts the app and relays storage, email and AI services. Its published subprocessor list includes MongoDB, Supabase, Render, SendGrid, DataDog, Google Cloud, OpenAI, Anthropic and Wix. The exact provider used can depend on the request and configuration. External exercise-image hosts such as jsDelivr receive ordinary connection data such as IP address. The list and actual flows must be kept current. Other disclosures: where legally authorized or required, to protect rights and safety, or for a business transaction subject to applicable privacy restrictions. We do not use an operational content licence as permission to publish a member's story or photo in marketing; that needs a separate release.
5. AI and estimates AI helps assemble program outlines and sessions, meal guidance, food search, meal-photo estimates and a monthly summary. Relevant inputs can include age, sex, body size, goals, preferences, motivations, activity, logged loads, nutrition targets, accommodations, eating-screen flags and self-ratings. Monthly summaries may include a faith rating. Photos selected for analysis and search/restaurant text are sent for the requested function. The plan-outline service sends derived medication/injury accommodations rather than raw medication names or free-text conditions. An accommodation can still reveal health information; these requests are not anonymous merely because an email is omitted. Other AI calls and configuration must be reviewed separately. ISI does not itself train AI models on identifiable member records. Provider handling is governed by the applicable contracts and settings. Base44's published DPA permits service processing and certain aggregated or anonymized use. We do not make a blanket promise of zero retention or no provider use beyond a single answer. Contact us for the applicable provider arrangements. AI is fallible and does not replace professional advice or individual review.
6. Processing outside Canada Base44's published provider list identifies processing in the United States and Israel. We use foreign providers for hosting, storage, communications, logging, analytics and AI capabilities. Personal information may be subject to foreign laws and lawful access by courts or authorities. We remain accountable for our own processing and provider selection. Contact the Privacy Officer to request information about our policies and practices for providers outside Canada. Provider-level analytics or security logging is different from advertising tracking. We do not claim the entire platform performs no analytics. Browser storage includes session and onboarding state; protect your device, use a private account and sign out on shared devices.
7. Retention, deletion and restart We retain information while reasonably needed for the disclosed service purposes. After closure or a valid deletion request, we delete or de-identify information no longer needed, subject to applicable law, documented legal holds and the particular deletion rights that apply. Any exception must identify its legal basis, necessary categories, restricted access and review/end date. We do not automatically retain every health screen for ten years after account closure. Consent evidence and records genuinely necessary for a specific legal obligation or claim may be kept for a justified period. Limitation periods do not by themselves require retaining all health information. Mandatory state health-data deletion rights take priority unless a valid statutory exception applies. We communicate any lawful refusal or partial retention and available appeal. We instruct relevant providers and recipients as required. Backups are restricted from ordinary use and deleted within the applicable legal period; an unspecified provider cycle cannot override a statutory deadline. Restoration must reapply deletion instructions. Restarting a training program is not account deletion. Restarting deletes selected logs and plans, preserves points/badges and some intake, and retains or supersedes screening/waiver records. Superseding a record does not delete or anonymize it. Use You > Privacy & data to export your application records or request account deletion. A deletion request is reviewed and tracked; submission is not confirmation that all provider copies have already been erased.
8. Safeguards and incidents We use access rules, authentication and platform safeguards designed to protect information, and review privileged access and service-role functions. These controls do not guarantee perfect security. Platform certifications are not certifications of ISI or proof that every app rule works. Any claims about encryption, MFA, audits or deletion require current evidence. We assess incidents promptly and make regulator and individual notifications when applicable law requires, using the relevant trigger and deadline. The Security Statement provides a contact for reports; it is not a guarantee against breach.
9. Requests and complaints Email legal@isi.fitness for access, correction, withdrawal, deletion or a complaint. Use the email on your account where possible; we verify identity proportionately without requesting unnecessary medical information. Do not send full medical records by ordinary email. We offer a secure channel if supporting material is needed. Requesting information about a partner does not authorize access to that person's records. We aim to respond within 30 calendar days and always apply the legally required deadline, trigger, permitted extensions and notice. Alberta PIPA generally provides 45 days for access responses; PIPEDA generally provides 30. State health-data rules differ. We explain any lawful refusal and complaint/appeal route. You may contact OIPC Alberta (oipc.ab.ca), OPC Canada (priv.gc.ca) or the regulator with jurisdiction. We do not retaliate for exercising rights.
10. Regions, age and changes The program is intended for adults aged 18 or older. If we learn we collected a child's information contrary to our eligibility rules, we restrict use and handle deletion and any necessary safeguarding under applicable law. The service is designed for Canada and the United States. Washington/Nevada health-data rules and Connecticut privacy rules can apply without the general large-business thresholds. Our separate Consumer Health Data Policy explains the relevant additional rights. We do not assert that every other U.S. state's comprehensive law automatically applies. We do not actively offer the service in other markets without reviewing their requirements; using the app elsewhere does not waive your legal rights. For Quebec operations, French-language, privacy-impact and cross-border requirements must be addressed where applicable. We do not characterize a required French contract as a convenience translation. Material changes receive appropriate advance notice; new consent is requested where required. Effective versions are archived. Contact: legal@isi.fitness; ISI Alberta Inc, Alberta, Canada.