Privacy Policy

1. What we collect

When you create a FORGE account, we collect:

• Account info: name, email address, and (if you sign up with Google) your Google account's name, email, and profile photo.
• Fitness and health data you choose to log: workouts, sets and reps, bodyweight and body-fat entries, goals, meals, and water intake.
• Usage data: pages visited and features used, to keep the app working and improve it.

We don't collect payment information — FORGE doesn't process payments today.

2. How we use it

We use your data to:

• Operate the app: store your workouts, show your progress, compute streaks/XP/estimated 1RMs.
• Power the AI coach's suggestions, generated from your own logged training history.
• Send account-related emails (email confirmation, password reset) and, if you've opted in, workout reminders and coach/achievement notifications.
• Diagnose and fix bugs.

We do not sell your data, and we do not use your health data for advertising.

3. Who we share it with

We use a small number of service providers to run FORGE:

• Supabase— hosts our database and handles authentication (including Google sign-in). Your account and fitness data are stored on Supabase's infrastructure.
• Google— if you choose to sign in with Google, Google processes that authentication; see Google's own privacy policy for how they handle it.
• Vercel — hosts the application itself.

We don't share your data with anyone else, except where required by law.

4. Your rights

You can, at any time:

• Reset your data from Settings — wipes your workouts, records, programs, and XP, keeping your account.
• Delete your accountfrom Settings — permanently removes your profile and all associated data (workouts, programs, body metrics). This can't be undone.
• Request a copyof your data, or ask us a question about how it's handled, by contacting us.

If you're in the EU/UK, these correspond to your rights of access, rectification, erasure, and portability under GDPR. If you're a California resident, similar rights apply under the CCPA.

5. Data retention

We keep your data for as long as your account is active. If you delete your account, your data is permanently removed from our database (not just hidden), typically within a few minutes.

6. Security

Your data is stored in a Postgres database with row-level access controls, and all traffic to FORGE is encrypted in transit. No method of storage or transmission is 100% secure, but we take reasonable steps to protect your information.

7. Changes to this policy

We may update this policy as FORGE changes. We'll update the “last updated” date above when we do.

8. Contact

Questions about your data or this policy? Reach out via the contact details on our website.