Iron Log – Privacy Policy Effective April 26, 2026 This Privacy Policy describes how Carrie Stevick (dba Operaite Enterprise) (“we,” “us,” or “our”) collects, uses, and protects your information when you use the Iron Log mobile application (the “App”). By using the App you agree to the practices described below. 1. Information We Collect We collect only the information needed to operate the App: • Account information: your email address and authentication credentials (your password is stored as a secure hash; we never see your plaintext password). • Workout data: the workout days, exercises, sets, reps, weights, completion status, weight history, and workout sessions you create or log inside the App. • Technical data: minimal technical information (such as authentication tokens and timestamps) required to keep you signed in and to sync your data. We do not collect your name, address, phone number, location, contacts, photos, advertising identifiers, or any health data from Apple HealthKit. 2. Why We Collect It Your information is used solely to provide App functionality: • To create and authenticate your account. • To save your workout plan and history so it persists across sessions and devices. • To display your progress, streaks, and weekly status (Done / In Progress) inside the App. • To respond to support requests you send to us directly. We do not use your data for advertising, profiling, or any automated decision-making. 3. How and Where Your Data Is Stored Your account and workout data are stored securely in our managed backend, which is hosted on Supabase. Data is transmitted over encrypted HTTPS connections and protected at rest by Supabase’s infrastructure. Access to the database is restricted by row-level security policies so that you can only read and modify your own records. 4. Sharing of Data We do not sell, rent, trade, or share your personal information or workout data with any third party for marketing or any other purpose. The only third party that processes your data is our hosting provider (Supabase), acting strictly as a data processor on our behalf to store and serve your data. 5. Data Retention and Deletion Your data is retained for as long as your account exists. You can permanently delete your account and all associated data at any time from within the App by tapping the trash icon on the home screen and confirming deletion. This action is immediate and cannot be undone. 6. Children’s Privacy The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. 7. Your Rights You may request access to, correction of, or deletion of your personal data at any time by contacting us, or by using the in-app account deletion feature described above. 8. Changes to This Policy We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Effective” date at the top of this document. 9. Contact If you have any questions about this Privacy Policy or your data, contact us at: info@operaiteenterprise.com Carrie Stevick (dba Operaite Enterprise)