Privacy notice

Effective September 24, 2026

Operator and contact

FORGE is operated by FORGE Adaptive Training LLC. For support or privacy requests, contact support@forgeadaptive.com.

Please do not email passwords, payment-card details, identity documents, progress photos or health records. Contact us first so we can determine an appropriate way to handle a sensitive request. We may need to verify account ownership before releasing or deleting records.

Information you choose to provide

FORGE stores account and profile information, such as email, name or nickname, age, goals, equipment and training preferences. Depending on the features you use, it can also store bodyweight and measurements, workout and conditioning logs, food and water logs, sleep and recovery check-ins, pain or limitation notes, and optional health-related or pregnancy/postpartum/cycle inputs. An optional spiritual and purpose module can also store beliefs or faith-related preferences you choose to share, and it stays off until you opt in.

Optional features include private progress photos, health disclosures and documents, imported workout summaries, coach connections, messages, sharing permissions, and parent-managed youth activity records. You decide whether to use optional features. Avoid putting sensitive health disclosures in ordinary workout notes or coach messages when the private vault is the appropriate place.

Account, consent, subscription and security records are also used to operate the service. Hosting and service providers may process technical information, including IP addresses, request logs and device/browser information, while delivering and protecting the app.

Why information is used

We use information to authenticate accounts, save and display records, produce planning estimates and user-reviewed suggestions, manage authorized coach sharing, provide support, maintain account security and administer memberships. A generated workout or nutrition estimate is not a medical assessment.

The current photo journal does not perform facial recognition, body-fat analysis, AI rendering or identity matching. FORGE does not send journal photos to an image-generation model. We do not use your progress photos to train models, promote FORGE or publish them without separate permission.

Providers and payments

The service uses Supabase for authentication and cloud records, Render for website hosting, and the configured email-delivery service for account messages. Stripe processes membership checkout and subscription management. Card details are entered on Stripe-hosted pages, not stored in FORGE's application database.

FORGE sends billing identity and membership selections to Stripe, not workout logs, health records, progress photos or a child's personal information. Food searches and barcode lookups may send the search term or barcode to Open Food Facts. External resources and service providers may receive normal connection information when your browser or the app contacts them.

Privacy controls and their limits

Ordinary account and training records use authenticated access controls; they are not end-to-end encrypted. Private photo and health vault content is encrypted in your browser using a separate passphrase. That passphrase is not your account password, and losing it can prevent recovery of your vault.

Coach messages and explicitly shared photo copies are separate access-controlled records, not passphrase-encrypted vault content. Connected coaches can access the information you authorize through the available sharing controls. Revoke access in Coaches & clients. Revocation cannot recall copies, reports or screenshots another person has already downloaded.

Sign out on shared devices. Browser camera and Bluetooth permissions are managed through your device or browser settings. No service can guarantee security, and FORGE does not claim an independent security certification or HIPAA compliance.

Parent-managed youth records

Adult accounts are for people aged 18 or older. A parent or legal guardian may manage an assigned youth activity workspace for a teen aged 13–17. FORGE does not support enrollment under age 13 or separate minor logins. The parent supplies the enrollment consent and controls the youth workspace.

Coach messages concerning a youth workspace go to the parent account, not directly to the minor. Youth records are not automatically shared with a coach. Contact support if you believe a child has been enrolled outside these rules.

Retention, access and deletion

Account records remain available in active storage until you delete them or your account, subject to service operation and applicable legal requirements. Use the available record controls and Account & settings to export or delete data. A downloaded archive can contain readable profile/log records as well as encrypted vault records; protect that file.

Self-service account deletion requires reauthentication and is blocked while an active subscription or pending checkout would be left behind. Cancel billing and close any pending checkout first. Contact support for assistance with a privacy or deletion request, including when billing prevents self-service deletion.

Successful deletion removes the applicable records from active application storage. Provider backups and legally required financial records may have different retention periods. Exact provider backup expiry and financial-record retention schedules are not yet published; contact support about a particular request. Do not treat this notice as a promise of immediate deletion from every backup or from a coach's previously downloaded copy.

You may request access, correction, deletion or help with sharing controls using the contact above. Rights and response requirements depend on applicable law; this notice does not limit those rights.

Liability-release acceptance

For new accounts, FORGE records the account ID, the exact liability-release text and version agreed to, and the server-recorded acceptance time. This record documents the agreement; it is separate from billing and optional wellness consent. It is included in cloud account exports and removed from active application storage on account deletion. No waiver acceptance is inferred for existing accounts.

Changes

We will update the published notice when data handling materially changes. New uses requiring consent will not be authorized merely by a change in wording. Review the effective date and contact support with questions.