Consumer Health Data Privacy Policy
Effective date: October 27, 2026
This policy covers consumer health data in the Ironcraft app for iPhone and Apple Watch, published by Mister Business Enterprises LLC ("we", "us", "our"). It is written for the Washington My Health My Data Act (RCW 19.373), Nevada's consumer health data law (NRS 603A.400 to 603A.550) and Connecticut's consumer health data rules in the Connecticut Data Privacy Act. We apply it to everyone in the United States. It adds to our Privacy Policy.
How Ironcraft handles health data
Ironcraft keeps and processes your health data on your own iPhone and Apple Watch, using software we provide. We do not receive it: Ironcraft has no account, no server of ours, no analytics SDK and no advertising. Some of these laws count processing on your device as "collection" by the company that makes the app, so this policy describes that processing as if we collected the data.
Categories of consumer health data and how each is used
| Category | What it includes | How Ironcraft uses it |
|---|---|---|
| Training | Workouts, exercises, sets (weight, reps, time, distance, effort rating), notes, routines | Your training log, history, personal records, charts, achievements, rest timer and widgets |
| Apple Watch workout readings | Heart rate and active energy during a workout you log on the watch | Showing them during the workout and saving the workout to Apple Health, if you allow it |
| Body measurements and photos | Body weight, body-fat percentage, body measurements, progress photos | Trends, charts, photo comparisons and suggested nutrition targets |
| Food and water | Food log entries with nutrition values, your own foods, saved meals, meal plans, grocery lists, water, nutrition targets | Your food log, daily totals, targets and meal plans |
| Food lookups | A barcode you scan, or search words you submit | Getting nutrition facts from Open Food Facts |
| Profile for estimates | Age, sex, height, activity level and goal, if you enter them | Suggesting calorie and macro targets that you can edit |
| Medication log (optional, 18+) | Names you type, units, schedules, entries marked taken or skipped with time and amount, the body site you pick, supply amounts, symptoms with severity and notes | Your own record, reminders, supply counts, and exports you can share with your doctor |
| Data read from Apple Health | On Apple Watch only: heart rate and active energy during a workout you log there. On iPhone, Ironcraft reads nothing from Apple Health | Live workout readings, and saving them with the workout to Apple Health |
| Health-related settings and derived data | Modules you turn on (such as the medication log), countdown events (such as a bodybuilding show), phases (cut, maintain or build), totals, estimates and records worked out from your logs | Running the features you choose |
Ironcraft does not use precise location or geofences. When you use Face ID or Touch ID for app lock, iOS does the check, and Ironcraft never receives biometric data.
How the data is processed
Ironcraft processes your stored logs on your device. It encrypts its main data store on your iPhone; the Privacy Policy explains the exceptions for widgets, quick actions and exports. Optional food lookups send the barcode or search words and the request's IP address to Open Food Facts, whose visitor-log retention and purposes are described in the Privacy Policy. Ironcraft works out totals, estimates and charts, schedules reminders, and creates exports and backup files only when you ask for them. We do not build advertising profiles, make automated decisions about you, or sell consumer health data.
Sources
- You: what you enter, the photos you take in Ironcraft, and files you import (backup files and CSV files).
- Your Apple Watch: workouts you log on it, and heart rate and active energy during those workouts.
- Apple Health: only the data types you allow (see Categories).
- Open Food Facts: nutrition facts for foods you look up. This is product data, not data about you, but it becomes part of your food log.
Sharing
| Recipient | Categories shared | When | Why |
|---|---|---|---|
| Open Food Facts, an independent open food database run by a non-profit association in France | A barcode or search words (food lookups). The request also carries your IP address, the app version and standard technical details | Only when you scan a barcode or submit a food search | To return the nutrition facts you asked for; the provider also uses visitor logs for security, technical analysis and popularity measurement (details) |
| Apple Health, on your own devices and under your control | Workouts (with Apple Watch heart rate and active energy), body weight, dietary energy, protein, carbohydrates, fat and water | Only if you turn Apple Health on and allow each type | To save your data to Health, as you ask |
| People or services you choose | Whatever you include in a CSV or PDF export, a backup file or a share card | Only when you export or share | Because you ask |
- Affiliates: we share consumer health data with no affiliates.
- Processors and service providers: none receive consumer health data from Ironcraft.
- Device backups: if you back up your iPhone, the backup holds Ironcraft's stored data encrypted with a key kept in your iCloud Keychain, which Apple cannot read. Ironcraft leaves its unencrypted widget summary and quick-action files out of device backups (see Device backups). We do not count this as sharing, but we want you to know about it.
- Tracking across sites and apps: Ironcraft does not include tracking SDKs or send advertising identifiers. Open Food Facts keeps visitor logs with IP addresses for 3 years for security, technical analysis and popularity measurement. Its policy does not say whether those logs keep the barcode or search words from a request URL. See the Open Food Facts disclosure.
Ironcraft asks for your consent before your first food lookup. You can withdraw that consent at any time by turning off online food lookups in Ironcraft's Settings.
We do not sell consumer health data
We do not sell consumer health data, and we do not share it for advertising. We would need your separate, signed authorization to sell it, and we will not ask for one.
Your rights
You have the right to:
- Confirm and access: find out whether we collect, share or sell your consumer health data, and see it. All of your Ironcraft data is visible in the app, and you can export it as CSV or as a backup file. If you ask, we confirm in writing what we hold. Usually that is nothing apart from any support emails you sent.
- See who received it: the only third party is Open Food Facts, which you can reach at privacy@openfoodfacts.org (see its privacy policy). Data you send to Apple Health stays on your devices under your control. For Apple's privacy contact, see apple.com/legal/privacy/contact.
- Withdraw consent and stop future collection or sharing: turn off online food lookups, Apple Health permissions or the medication log, or stop using Ironcraft and delete it. Turning off online lookups stops future requests; it cannot recall a request already sent to Open Food Facts.
- Delete: delete entries in the app, or use Delete All Data in Ironcraft's Settings (see Deleting your data). You can also ask us to delete any support emails; we delete them anyway 12 months after the conversation ends, unless the law requires us to keep one longer. When you send us a deletion request, we also notify Open Food Facts, the only third party that receives consumer health data from Ironcraft, of your request (see How to make a request).
- Correct or review: edit any entry in the app at any time.
- Fair treatment: we will never treat you differently, or change what Ironcraft does for you, because you used these rights.
How to make a request
- In the app: view, edit, export or delete your data at any time.
- By email: write to mister-business-enterprises@agentmail.to with "Consumer health data request" in the subject and tell us what you want. You do not need an account. You may use an authorized agent, who must show us your written permission.
We may confirm that a request comes from you by replying to the address it came from. We respond without undue delay, and within 45 days of receiving the request. If we need more time, we tell you why within those 45 days, and we take at most 45 more days. Requests are free.
For a deletion request, within 30 days of confirming that it comes from you, we:
- delete the support emails you asked us to delete;
- notify Open Food Facts of your deletion request at privacy@openfoodfacts.org, with any details you gave us to help it find your lookups, and with no health details unless you ask us to include them;
- tell you that we have done both.
Open Food Facts receives lookups directly from your device, and we never receive them or your IP address. Our notice to Open Food Facts can therefore include only the details you choose to give us for it, such as your IP address and the dates of your lookups. Without such details, Open Food Facts may not be able to find which lookups are yours. You can also write to Open Food Facts directly at privacy@openfoodfacts.org.
How to appeal
If we decline your request, you can appeal by replying to our decision with "Appeal" in the subject. We answer in writing within 45 days of receiving your appeal and explain what we did and why. If we deny your appeal, you can contact your Attorney General:
- Washington: Attorney General of Washington, file a complaint
- Nevada: Nevada Attorney General, complaint form
- Connecticut: Connecticut Attorney General, complaint form
Security
Ironcraft encrypts its data on your iPhone with a key kept in your iCloud Keychain. Support emails are read only by people who need them to help you, and those people are bound by a duty of confidentiality.
Changes to this policy
If we change this policy, we will update the effective date above and tell you in the app before a material change takes effect. Before Ironcraft collects a new category of consumer health data, uses it for a new purpose or shares it with a new kind of recipient, we will describe the change here and ask for your consent in the app.
Contact
Mister Business Enterprises LLC
Email: mister-business-enterprises@agentmail.to