Privacy Policy

YOUR DATA,
YOUR CONTROL

How Ironmind protects and handles your physiological data.

Last Updated: January 7, 2026

At Ironmind, we understand that physiological data is deeply personal. This Privacy Policy explains how we collect, use, protect, and share your information when you use our mental readiness infrastructure platform.

1. Information We Collect

Physiological Data

We collect physiological signals from your connected wearable devices, including:

  • Heart rate variability (HRV)
  • Resting heart rate
  • Sleep duration and quality metrics
  • Activity and recovery data
  • Respiratory rate
  • Body temperature variations

Account Information

When you create an account, we collect your email address, name, and basic profile information.

Usage Data

We collect information about how you interact with our platform, including features used, session duration, and device information.

2. How We Use Your Information

We use your data to:

  • Generate your personalized GritScore™ and readiness insights
  • Provide daily stress, recovery, and sleep analysis
  • Deliver AI-assisted readiness recommendations
  • Improve our algorithms and platform performance
  • Communicate important updates and insights
  • Ensure platform security and prevent fraud

3. Data Security & Protection

Your physiological data is protected using industry-standard security measures:

  • End-to-end encryption for data transmission
  • Encrypted storage of all physiological signals
  • Regular security audits and penetration testing
  • Access controls and authentication protocols
  • Compliance with HIPAA and GDPR standards

4. Data Sharing & Disclosure

We do not sell your physiological data. Period.

We may share your information only in the following circumstances:

  • With your explicit consent: When you authorize sharing with third-party applications or organizations
  • Service providers: Trusted partners who help operate our platform (under strict confidentiality agreements)
  • Aggregated data: De-identified, anonymized data for research purposes (no individual identification possible)
  • Legal requirements: When required by law or to protect rights and safety

5. Your Rights & Control

You have complete control over your data:

  • Access: Request a copy of all your data at any time
  • Correction: Update or correct inaccurate information
  • Deletion: Request complete deletion of your account and data
  • Portability: Export your data in a machine-readable format
  • Opt-out: Withdraw consent for specific data processing activities

To exercise these rights, contact us at [email protected]

6. Data Retention

We retain your physiological data for as long as your account is active or as needed to provide services. Upon account deletion, your data is permanently removed within 30 days, except where retention is required by law.

7. Third-Party Integrations

Ironmind integrates with wearable devices (Apple Watch, Oura Ring, Whoop, Garmin). When you connect these devices, you authorize us to access specific physiological data. Each integration is governed by the respective device manufacturer's privacy policy in addition to ours.

8. Children's Privacy

Ironmind is not intended for individuals under 18 years of age. We do not knowingly collect data from children. If you believe we have inadvertently collected such information, please contact us immediately.

9. International Data Transfers

Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the platform. Your continued use of Ironmind after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: [email protected]

General Inquiries: [email protected]