Privacy Policy

1. Data we handle

Data you enter directly: routine and exercise names, sets, weight, reps, rest times, and notes.

Maestro usage data (AI assistant): if you activate Maestro through prior explicit consent, we process conversation messages and the app context strictly needed to answer your request (routines, exercises, logged sets, session history, calendar, and app state such as language, timezone, or timers). We never collect or send health data (HealthKit). We do not send your real name, email, Apple ID, or advertising identifiers. Please avoid entering sensitive personal data of third parties in your messages. You must be at least 13 years of age with parental or legal guardian consent (and 18 years independently) to use Maestro.

Health data via HealthKit, only if you grant permission: the duration and intensity of your workout sessions, which TraceIron records in Apple's Health app.

Technical and transactional identifiers: technical identifiers generated on your device (UUIDs) to link your data; and cryptographically signed Apple transaction data (JWS) to verify your subscription and manage your credit balance on our proxy, without linking it to your personal identity.

We do not collect third-party analytics, do not show ads, and do not sell or trade your data.

2. Where it is stored

Locally, on your iPhone, iPad, and Apple Watch, via SwiftData.

In your own private iCloud, through automatic sync with CloudKit tied to your own Apple ID. Apple encrypts that data in transit and at rest; TraceIron has no access to it and keeps no copy of your workouts on servers of our own.

In device memory: conversations with Maestro reside temporarily in memory during the active session. They are cleared when starting a new session or withdrawing consent, and never sync to iCloud. Operational actions Maestro executes in the app directly modify your local data.

On our proxy (maestro.traceiron.com, running on Cloudflare Workers and Durable Objects): our only server of our own. It stores per subscriber only Apple's transaction identifier, subscription validity and status, available credits (monthly and top-ups), and a recent technical request log (random request ID, credit cost, and timestamp) for 90 calendar days following subscription expiration. It does not store message content or workout data: it acts as a relay intermediary. Technical logs record events without user identifiers or message content.

At OpenAI (United States): queries to Maestro are processed via its API with the store: false parameter. OpenAI acts as a data processor, does not train its models on this data, and retains requests for up to 30 days solely for security monitoring and abuse prevention, unless legally mandated. This international transfer to the US operates under OpenAI's business API contractual safeguards.

3. HealthKit

If you grant permission, TraceIron records your workout sessions in the Health app so they show up alongside the rest of your physical activity.

We never sell or share health data with advertisers, data brokers, or any third party, in line with Apple's HealthKit policies. HealthKit data is never sent to OpenAI or to our proxy.

You can revoke this permission at any time from Settings → Privacy & Security → Health → TraceIron. The app keeps working without it; it simply stops recording your sessions in Health.

4. Shared content

When you use the share feature (swipe-to-share, or batch export), TraceIron uploads a copy of that routine or exercise to Apple's public CloudKit database, generating a short link (e.g. traceiron.com/r/abc123).

That content is accessible to anyone who receives the link, not only to the person importing it; it is not indexed by search engines, but it is not private either. Avoid putting personal or sensitive information in a routine's or exercise's name or notes before sharing it.

Sharing is always an explicit action on your part (never automatic), and anyone importing a link sees nothing about your identity beyond the content you chose to share.

You can ask us to remove already-shared content by writing to the contact address in section 7.

5. Purchases

TraceIron is free to download, and all core training logging features are available at no cost and without a subscription. The app offers optional in-app purchases: one-time non-consumable visual themes (such as Toxic), the monthly auto-renewing TraceIron+ subscription to access Maestro and all paid themes, and consumable credit top-ups for Maestro.

Purchases are processed through Apple and the App Store. TraceIron never sees, receives, or stores your card or payment method details. The app checks purchase entitlements via signed StoreKit transactions to enable purchased themes or credit balances on our proxy; you can restore purchases from Profile using your Apple Account.

6. Your rights

In line with Law No. 29733 (Peru's Personal Data Protection Law), its regulations (Supreme Decree 016-2024-JUS), and equivalent principles in other jurisdictions, you have the right to access, rectify, cancel, and object to the processing of your data (ARCO rights).

Since your workouts live on your device and in your own iCloud, you have direct control over them: deleting the app removes local data, and the in-app "Delete all my data" option clears your workout history. You can manage or delete your iCloud data from your Apple account settings.

For Maestro, processing is based on your explicit consent, which you can withdraw at any time in Profile → TraceIron+ → Maestro Privacy. Withdrawing consent immediately ends the active conversation and purges it from memory. To request deletion of your credit balance or technical records on our proxy, or of publicly shared content (section 4), contact us at the address in section 7.

7. Contact

For any question about this Privacy Policy or about your data, write to support@traceiron.com . We reply personally, since TraceIron is built by a single developer in Peru.