Privacy Policy

Last updated: 9/25/2026

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the IronWill application (the "Service") and tells You about Your privacy rights and how the law protects You.

By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

1. Definitions and Interpretation

For the purposes of this Privacy Policy:

• Account: A unique account created for You to access our Service or parts of our Service.
• Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement): Refers to the operators and parent entity of IronWill.
• Personal Data: Any information that relates to an identified or identifiable individual.
• Usage Data: Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

2. Types of Data We Collect

A. Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Account passwords (stored in securely hashed, encrypted formats)

B. Usage and Application Data

Usage Data is collected automatically when using the Service. This may include:

• Your device's Internet Protocol address (e.g. IP address), browser type, and browser version.
• The pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, and other diagnostic data.
• When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
• Self-Improvement Logs: Data regarding your habits, goal settings, completed tasks, and relapse logs are stored to calculate your improvement statistics and display progress metrics in the app.
• AI Mentor Chat Logs: To provide a coherent coaching experience, all messages exchanged between You and the AI Mentor (Mentor) are securely stored in our database. Conversations are transmitted to artificial intelligence sub-processors to generate mentor responses. No personal identifying information (such as your email or username) is sent to these AI sub-processors.

3. Legal Basis for Processing Personal Data

We process Personal Data under the following conditions:

• Consent: You have given Your consent for processing Personal Data for one or more specific purposes.
• Performance of a Contract: Provision of Personal Data is necessary for the performance of an agreement with You and/or for any pre-contractual obligations thereof.
• Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by the Company (such as improving the AI models and application security).

4. Third-Party Services and Sub-processors

We do not sell, rent, or trade your Personal Data with third parties for marketing purposes. We share your information only with trusted third-party service providers that are contractually bound to protect your data:

• Cloud Hosting & Database Infrastructure: Used to run our servers, databases, and store application state securely.
• Artificial Intelligence Service Providers: Used to process chat prompts and generate responses for the AI Mentor (Mentor), as well as power premium Text-to-Speech (TTS) voices. No personal identifying details are shared with these systems.
• Email Delivery Service Providers: Used to securely dispatch verification codes, password resets, and support notifications.
• Mobile App Store Operators: Used to process and validate subscriptions and in-app purchases securely. We never store or handle your credit card details.
• Error Diagnostic & Performance Monitoring Services: Used to collect anonymized crash logs and system warnings for diagnostic and stability purposes.

5. Retention and Deletion of Your Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Account Deletion: You have the right to request the deletion of your account and all associated data at any time. You can do this directly from the Profile Settings section in the application or by contacting us via email. Once requested, your personal profile, chat history, goals, and habit statistics will be permanently and irreversibly purged from our active databases.

6. Security of Your Personal Data

The security of Your Personal Data is important to Us. All data transmitted between the mobile application and our servers is encrypted using Industry-standard Transport Layer Security (HTTPS/TLS). While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

7. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us.

8. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.