This translation is provided for convenience; in case of discrepancy, the French version prevails.
IRONIQ is an AI-assisted bodybuilding and nutrition coaching app. We take the protection of your personal data seriously and comply with the General Data Protection Regulation (GDPR).
1. Data controller
The controller of your data is Mabrouk Ghorab, a sole proprietor registered in France and publisher of the IRONIQ app (“IRONIQ”, “we”).
Contact: support@ironiq.fr
2. Data collected
- Account: email address, password (stored encrypted), first name.
- Physical profile: age, sex, height, weight, goal, level and questionnaire answers.
- Photos: photos taken for Body Scan and Plate Scan.
- Messages: messages sent to the AI Coach.
- Progress: sessions, logged weights, performance and statistics.
- Website contact form: first name, last name (optional), email and message content, used only to reply to your request.
- Technical data: device identifier for notifications and basic usage data.
3. How data is collected
All of this data is collected directly from you when you create your account, answer the questionnaire, take a photo, write to the AI Coach or use the app. We do not collect any data from third parties.
4. Sharing with a third-party AI service (OpenAI)
To generate your analyses, programs and advice, IRONIQ sends certain data to OpenAI, L.L.C. (United States), its artificial intelligence provider. Depending on the feature used:
- Body Scan and Plate Scan: the photo in question.
- Workout program and nutrition plan: your profile information (age, sex, height, weight, goal, level).
- AI Coach: your messages and the profile details needed to answer.
No data is sent to OpenAI before your explicit consent in the app (Article 6(1)(a) GDPR). You can withdraw it at any time from Profile › Privacy.
Photos are processed to produce the analysis, then deleted: only the text result is kept in your profile. OpenAI processes this data solely to provide the service to IRONIQ and does not use it to train its models in this context. The transfer outside the European Union is governed by the European Commission's Standard Contractual Clauses.
5. Other service providers
- Supabase: hosting, database and authentication.
- RevenueCat, Apple and Google: subscription and payment management via the App Store and Google Play.
- Expo: push notification delivery.
These providers use your data only to provide their service and offer data protection safeguards in line with the GDPR.
6. Purposes and legal bases
- Providing the service (programs, analyses, AI Coach): performance of a contract.
- Processing by the third-party AI service (OpenAI): explicit consent.
- Reminder notifications: consent, which you can turn off at any time.
- Security and proper operation of the service: legitimate interest.
7. Retention period
Your data is kept for as long as your account exists. Photos are not kept after analysis. After your account is deleted, your data is erased within a maximum of 30 days, unless a legal obligation requires otherwise. Learn more about account deletion.
8. Your rights
You have the right to access, rectify, erase and port your data and to object to its processing, as well as the right to withdraw your consent at any time.
- Delete your account: Profile › Settings › Delete my account.
- Withdraw your consent to AI processing: Profile › Privacy.
- Exercise your other rights: write to support@ironiq.fr.
You can also lodge a complaint with the CNIL (the French data protection authority).
9. Security
Your data is protected by encryption in transit and at rest, secure authentication and strict database-level access rules. We never sell your data.
10. Contact
For any question about your data, write to support@ironiq.fr or use the contact form. We reply within 72 business hours.