Iron Log privacy notice

Last updated 11 October 2026 (contact details added)

Iron Log (myworkout.uk) is a small, invite-only workout and food log run by Roger Kendall in South Wales. This notice explains what it stores about you and why. Questions: info@myworkout.uk.

What Iron Log stores

• Your account: your forename, surname, email address and mobile number, and your PIN. The PIN is stored scrambled, never as you typed it. Your email and mobile are only used to contact you about your account, for example if you can't sign in. They're never used for marketing or shared.
• Your training: the exercises, weights, reps and sessions you log, and your routine settings.
• If you have the Full version: your food diary and plan, shopping list, body measurements and weight, and any progress photos you add.
• Face ID / fingerprint sign-in: if you set it up, a public key from your phone. Your face or fingerprint never leaves your phone and Iron Log never sees it.
• If you choose to connect them: calories and steps from Apple Health (sent by a Shortcut you set up), and calories from Strava activities.
• Security: a short-lived, scrambled record of wrong PIN attempts, to block guessing.

Body, weight and food information is health data, so Iron Log only stores it because you choose to enter it, and you can delete it at any time.

Why

Only to run the app for you: to show your history and progress, suggest weights, and keep your phones in sync. There are no adverts, no tracking and no analytics, and your data is never sold or shared for marketing.

Who can see it

• Your data is private to your own login. Other people using Iron Log can't see it, unless you train together on a joint login you've agreed to.
• Roger, as the person running Iron Log, and any admins he appoints can see the list of accounts (names, email and mobile, level, when you joined, your last workout date) so he can manage access. He doesn't browse people's diaries or photos.

Where it's kept

On Iron Log's web hosting with Heart Internet, a UK hosting company. A copy is also kept on your phone so the app works without signal.

Some features fetch information from other services: food searches and barcode look-ups go to Open Food Facts (only the search words or barcode are sent, not who you are), and Strava is only contacted if you connect it.

How long

Until you delete your account, or Roger deletes it. Deleting removes everything listed above from the server straight away. Backups made by the hosting company are overwritten within their normal backup cycle.

Your rights

Under UK data protection law you can ask for a copy of your data, ask for it to be corrected, or have it deleted. You can delete your own account in the app at any time: see how to delete your account. For anything else, email info@myworkout.uk.

If you're unhappy with how your data is handled you can complain to the Information Commissioner's Office at ico.org.uk.