Ferrous Fitness
Privacy Policy
This policy explains how Herrera Software Studios ("we", "us") handles information in the Ferrous Fitness mobile app ("the app"). Ferrous Fitness is built on the U.S. Army's Holistic Health & Fitness (H2F) framework, but it is an independent app and is not affiliated with the U.S. Army or the Department of Defense.
Contents
- Information we collect
- How we use it
- Storage and security
- Service providers
- Sharing with other users
- Your choices and rights
- Children
- Retention
- Changes
- Contact
1. Information we collect
| Category | What | Why |
|---|---|---|
| Account | Email address and password. Passwords are handled by our authentication provider and are never stored in plain text. | To create and secure your account |
| Profile | Name, username, gender, age group, height, weight, military rank, training goal | To calculate AFT scores and readiness accurately and to show your name to friends |
| Fitness data | Workouts, routines, exercises, personal records, AFT scores, body weight, waist-to-height measurements | Core app functionality |
| Wellness data | Nutrition logs, sleep, mental and spiritual check-ins | To compute your daily readiness score |
| Location | GPS coordinates while you are actively tracking a run, ruck or ride, including while the screen is off. The route, distance, pace and splits are saved with that activity. | To record and display your activity. We do not track your location at any other time. |
| Camera | Barcode data read live. No photo or video is captured or stored. | To look up nutrition facts for food you scan |
| Social | Friend connections, group membership, posts, likes, comments, and the blocks and reports you make | To run the feed, leaderboards and groups, and to keep the community safe |
| Bug reports | The description and screen you enter, plus your platform and OS version | To diagnose problems |
| Purchases | Subscription status and product identifier. Apple processes payment and we never see your card or billing details. | To unlock Premium features you buy |
| Usage analytics | A small set of events (for example: app opened, training program started, purchase completed) linked to your account ID, plus basic device and app version information. Events do not include your workouts, health data, location or message content. | To understand which features are used and to fix problems |
Reminders and notifications you enable are scheduled on your device. We do not collect push-notification tokens.
2. How we use your information
- Provide the app: workout tracking, AFT scoring, readiness, run tracking and nutrition logging
- Back up and sync your data across your devices
- Power the social features you choose to use
- Send reminders you turned on
- Process and restore Premium purchases
- Keep the app reliable, secure and free of abuse, including reviewing reports
We do not sell your personal information, we do not share it for advertising, and we do not use your health or fitness data for advertising. We do not track you across other companies' apps or websites.
3. Storage and security
On your device. Most of your data is stored locally so the app works offline.
In the cloud. Your account and data are backed up to a cloud database so you can restore them on a new device. Data is encrypted in transit, and database rules restrict each account to its own data. Our servers and providers may be located in the United States, so your information may be transferred to and processed in the U.S. No method of storage is perfectly secure, but we work to protect your data.
4. Service providers
We share only the data each provider needs to do its job:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication and cloud database | Account, profile, fitness, wellness and social data |
| RevenueCat | Subscription and in-app purchase management | Account ID, subscription status. Payment details stay with Apple. |
| PostHog | Product analytics | Usage events and basic device information, linked to your account ID |
| Apple | App distribution and payments | Handled under Apple's own terms and privacy policy |
Providers may use your data only to provide their services to us. We may also disclose information if required by law or to protect the rights and safety of users.
5. Sharing with other users
Information is visible to others only when you use these features:
- Friends can see activity you post to your feed, such as completed workouts, runs and AFT scores. When you post a GPS run, the route you ran is shown with it. Do not post runs that start or end at your home or other sensitive places if you do not want friends to see them.
- Groups you join share a feed and leaderboard among members.
- Comments and likes are visible to people who can see the post.
- Your name and rank are visible to friends and group members. Your email address is never shown to other users.
If you never add a friend or join a group, your activity is not shared with anyone. You can block or report other users from within the app.
6. Your choices and rights
- Delete your account. Profile → Settings → Delete account permanently deletes your account and all cloud data, including backups, friend connections, posts, comments and bug reports. Data that lives only on your device is removed when you delete the app or use Profile → Reset Profile. Deleting your account does not cancel an Apple subscription; cancel that in your Apple ID settings.
- Edit or delete individual workouts, logs and profile details in the app.
- Access or export your data by emailing us (see Contact).
- Turn off location, camera or notifications at any time in your device settings. Manual logging and the AFT calculator still work without them.
- Analytics data. Deleting your account removes your cloud data. To also have analytics events removed from our analytics provider, email us and we will delete them.
If you live in California, the EU, the UK or another region with privacy laws (such as the CCPA or GDPR), you may have additional rights, including to know what we hold, to correct or delete it, and to object to or restrict processing. Email us to exercise them. We will not discriminate against you for doing so. Our legal bases for processing are performing our contract with you (providing the app), our legitimate interests in running and securing it, and your consent where location or camera access is requested.
7. Children
Ferrous Fitness is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.
8. Retention
We keep your account and data while your account is active. When you delete your account, cloud data is deleted right away and is removed from backups on the provider's normal cycle, typically within 30 days. We may keep limited records where required by law, such as purchase records held by Apple and RevenueCat for accounting.
9. Changes to this policy
If we make material changes, we will update the date above and notify you in the app before they take effect.
10. Contact
Questions, or a request to access or delete your data:
[email protected]
Subject: "Privacy Request". Please write from the email address on your account so we can verify it is you.