Privacy Policy

Effective July 10, 2026

1. Information We Collect

Account information: email address, password (handled by our authentication provider, Supabase; we never see or store your raw password), display name, username, and profile photo. Fitness data you enter: workouts, exercises, sets, reps, weights, personal records, routines, programs, body measurements, weigh-ins, supplements, and progress photos. Nutrition data you enter: food logs, recipes, and searches against our nutrition databases (USDA FoodData Central, Open Food Facts, and FatSecret). Apple Health data (only if you connect Apple Health): with your permission we read workout energy (calorie) totals and body measurements from Health, and we write nutrition entries you log in Forge back to Health. You control this access at any time in iOS Settings › Privacy & Security › Health. Social content: posts, comments, likes, follows/connections, tags, and direct messages you send to other users. Device and diagnostic information: push notification token, general crash and error diagnostics used to keep the app stable.

2. How We Use Information

To provide the core features of Forge: tracking your workouts and nutrition, syncing with Apple Health, and powering the social feed, messaging, and notifications. If you subscribe to AI Coach, to generate your weekly digest, workout programs, and — if you request one — feedback on your progress photos. See "Third-Party Services" below for how this data is shared with our AI provider. To keep the app secure and reliable, including diagnosing crashes and abuse (e.g. blocked/reported accounts). We do not sell your personal information, and we do not use your fitness or health data for advertising.

3. Who Can See Your Content

Your profile, workouts, and posts are visible to other users according to the privacy settings you choose in the app (e.g. followers vs. public). Direct messages are only visible to participants in the conversation. Body measurements, weigh-ins, supplements, and raw nutrition logs are private to your account unless you explicitly share them.

4. Third-Party Services

Supabase: our backend provider for authentication, database, and file storage. Anthropic (Claude AI): only if you subscribe to AI Coach, we send your workout/nutrition summaries, program requests, and — if you request a progress-photo check-in — the relevant progress photo(s), to Anthropic to generate that feedback. This data is used to respond to your request and is handled under Anthropic's own data-use terms; it is not used to advertise to you. Apple HealthKit: only if you opt in, to read/write the health data described above. Nutrition databases: when you search for foods, we query USDA FoodData Central (a public U.S. government nutrition database), Open Food Facts (a public, crowd-sourced food database), and FatSecret (a commercial nutrition database, accessed through our backend) on your behalf; your search terms are sent to these APIs. Expo: provides push notification delivery and over-the-air app updates. Crash/error reporting: we use an error-monitoring service to capture crash diagnostics (device type, OS version, and the error itself) so we can fix bugs. This data is not used for advertising or tracking across other apps.

5. Data Retention & Deletion

You can permanently delete your account at any time from Settings › Danger Zone. This immediately and permanently erases your workouts, personal records, history, and profile from our systems. This action cannot be undone. If you'd rather just remove a single message, conversation, or post, you can do so individually without deleting your whole account.

6. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. You can do most of this yourself in the app (Profile › Edit, Settings). For anything else, contact us at support@forge.nivis.ca.

7. Children's Privacy

Forge is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

8. Security

We use industry-standard measures (encryption in transit, access controls, row-level security on our database) to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this policy as Forge evolves. Material changes will be reflected by updating the effective date above, and significant changes will be highlighted in the app.

10. Contact Us

Questions about this policy? Email support@forge.nivis.ca.