Privacy Policy

Effective 22 October 2026 (updated for the Ironpanda name) · Applies to the Ironpanda app on iOS

1. Who we are

Ironpanda is published by Hemalayas, an independent developer (“we”, “us”). For any privacy question or request, email hemalkanjee03@gmail.com.

2. Data stored on your device

To work, the app stores the following in your phone's local storage. It is not uploaded to us.

• The foods and iron top-ups you log, with their times, and any custom foods and favourites you create.
• Your iron supplement (name, dose, schedule) and the days you took it.
• Blood results you choose to enter, such as ferritin and haemoglobin.
• Your onboarding answers (name, sex, age range, cycle, diet, symptoms, drinks and goal), which set your daily iron target.
• Your buddies, streaks, challenges, reminders and app settings.

Deleting the app, or using Me → Erase all data, permanently erases this data. Because we never receive it, we cannot recover it for you.

3. Widgets

Ironpanda's home-screen and Lock Screen widgets read today's totals, your buddy and your supplement status from a shared container on your device (an iOS App Group). Nothing is sent off the device.

4. Notifications

Meal, supplement and check-in reminders are scheduled locally on your phone. We do not use push notifications or a notification server.

5. Sharing

If you tap Share, the app makes an image of your day on your device and hands it to the iOS share sheet. Where it goes is up to you.

6. Purchases and subscriptions

Payments are processed by Apple through the App Store; we never see your card details. We use RevenueCat to check whether your subscription is active. RevenueCat receives an anonymous app user ID, your purchase and subscription history, and basic device information such as the app version, operating system and country, under its own privacy policy. We do not link this to your name or email.

7. What we do not do

• No advertising, ad networks or ad identifiers.
• No third-party analytics, session recording or tracking across apps or websites.
• No selling or renting of personal data.
• No reading of Apple Health data.

8. Legal bases (EEA, UK and similar laws)

Where data protection laws such as the GDPR apply, we rely on: performance of a contract to provide the app and your subscription; your consent for notifications, which you can withdraw at any time in iOS Settings; and our legitimate interest in preventing fraud with purchases. Health-related answers and blood results are kept on your device and processed there only, with your explicit consent when you enter them.

9. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, California CCPA/CPRA, Brazil's LGPD, South Africa's POPIA or Canada's PIPEDA), you may have the right to access, correct, delete or port your personal data, object to or restrict processing, and complain to your local data protection authority. Because your app data lives only on your device, you can view, edit and delete it yourself in the app. For subscription records held by RevenueCat, email us and we will help you exercise your rights.

10. Children

Ironpanda is not directed to children under 13 (or under 16 where local law requires) and we do not knowingly collect their data. If you believe a child has used the app, contact us.

11. Health disclaimer

Ironpanda is a wellness tool for tracking the iron you eat. Its targets and scores are general guidance from public nutrition sources, not medical tests or advice. See the Terms of Use.

12. International users

Your app data stays on your device. Subscription data processed by RevenueCat may be stored in the United States or other countries, with safeguards described in RevenueCat's policy.

13. Changes

If we change how data is handled, we will update this page and its effective date, and point out material changes in the app.