Privacy Notice

IronWorks Fitness Solutions operates the Phasework app ("the Service"). For the personal data described in this notice, IronWorks Fitness Solutions is the data controller — meaning we decide how and why your data is processed.

• Account data — name, email address and login credentials. Used to create and secure your account (legal basis: performance of our contract with you).
• Profile and health data you enter — sex, height, birth year, activity level, goal, weight, food/macro logs, water, steps, sleep and wellbeing ratings. Used to calculate your plan and provide the Service (legal basis: performance of our contract; you provide this data voluntarily).
• Usage and device data — app interactions, device identifiers and IP address. Used for security, fraud prevention and product improvement (legal basis: our legitimate interests).
• Support messages — when you contact us, we keep the conversation to help you (legal basis: legitimate interests / contract).

Payment data (card details, billing address, tax information) is collected and processed directly by Paddle, our Merchant of Record — we never see or store your full card details.

• Service providers / subprocessors — hosting, database and analytics providers that help us run the Service, bound by data processing agreements.
• Paddle (Merchant of Record) — for the sale of subscriptions, payment processing, subscription management, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to do so by law.

We do not sell your personal data.

Some of our service providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses to protect your data.

We keep your personal data for as long as your account is active and as needed to provide the Service. When data is no longer needed — for example after you delete your account — we delete or anonymise it, unless we must keep it longer to meet legal obligations (such as tax records held by Paddle).

Depending on where you live, you have rights over your personal data, including:

• Access — get a copy of the data we hold about you;
• Rectification — correct inaccurate data;
• Erasure — ask us to delete your data;
• Restriction and objection — limit or object to certain processing;
• Portability — receive your data in a portable format;
• Withdraw consent — where processing is based on consent;
• Complain — to your local data protection supervisory authority.

To exercise any of these rights, contact us through the support option in the app. We respond within one month.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, row-level access controls so only you can read your own records, and restricted access to production systems.

Phasework uses only essential cookies and local storage required to keep you signed in and run the app. We do not use advertising or third-party marketing cookies. You can clear these in your browser settings, but the app may not function without the essential ones.

We may update this notice from time to time and will post the new version here. Questions about your privacy? Contact IronWorks Fitness Solutions through the support option in the app.