Privacy Policy
This policy explains how ForgeForm collects, uses, and protects your information across the app and this website.
Who we areWhat this policy coversInformation we collectApple Health (HealthKit)How we use itAI-generated plansThe website & waitlistLegal bases (GDPR)Storage & securitySharingInternational transfersRetentionYour rightsEU/UK (GDPR)California (CCPA/CPRA)Deleting your accountAgeHealth disclaimerChangesContact
Who we are
The data controller responsible for your personal information is Borges Realty LLC d/b/a ForgeForm.FIT, a Florida limited liability company and the operator of ForgeForm (the "App"). You can reach us at support@forgeform.fit.
What this policy covers
This policy applies to the ForgeForm mobile app and to this marketing website (forgeform.fit), including the beta waitlist. By creating an account or using the App, you agree to the practices described here.
Information we collect
- Account information — your email address and authentication credentials, used to create and secure your account.
- Profile information — display name, optional profile photo, and the fitness preferences you provide during onboarding (goals, experience level, available equipment, schedule).
- Training data — workouts, exercises, sets, reps, weights, bodyweight entries, personal records, nutrition preferences, and progress photos you choose to add.
- Health & fitness data — with your explicit permission, data read from Apple Health. See the dedicated section below.
- Social activity — friend connections, squads, workout posts shared to your activity feed, reactions, and comments.
- Device permissions — with your consent, camera and photo-library access so you can add progress photos and a profile picture.
- Purchase information — subscriptions, the Founders purchase, and Coach Credits are processed by Apple through the App Store. We use RevenueCat, Inc. as our purchase and subscription-management processor: it receives your purchase history and an app-user identifier linked to your account so your entitlements follow your account. Neither we nor RevenueCat ever receive your full card number or payment credentials.
- Technical & diagnostic data — limited information needed to operate the App reliably, such as authentication session tokens and error logs. When the App encounters an error or crash, a report is sent to Sentry, our crash-reporting processor, so we can diagnose and fix it. These reports contain the error itself and technical context such as the app version, device model, and operating-system version. We have configured Sentry not to attach your account identity, your device name, or the network requests the App made, and we do not send health, training, or nutrition data in crash reports. ForgeForm does not include third-party advertising or cross-app tracking SDKs.
- Product analytics — anonymous usage events (for example, that a workout was completed or a screen was opened) recorded in our own database to understand which features are used. These events describe usage, not content: they never contain your workout details, health data, or anything you have written.
Apple Health (HealthKit)
ForgeForm's recovery features rely on Apple Health. With your explicit, opt-in permission granted through Apple's own Health permission screen, the App reads: sleep analysis (duration and stages), heart rate variability (HRV), resting and overnight heart rate, respiratory rate, blood oxygen, and your workouts and active energy. It reads only what your Sleep and Recovery scores need.
This data is used on your device to calculate your daily readiness and to account for training you did outside the App. In line with Apple's requirements, health data obtained through HealthKit is never used for advertising or marketing, never sold, and never shared with data brokers, and is not used to train anyone else's models. One sharing case you should know about: when you generate or adapt a plan, your Sleep and Recovery scores — and the specific signals behind them, for example HRV or resting heart rate when they are flagged as low — are sent to our AI provider, Anthropic, solely to tailor that plan. You are asked for this permission separately, you can decline it, and the App still works without it. ForgeForm does not write to Apple Health. You can revoke any category at any time in the Health app under Sharing → Apps, and the App falls back gracefully.
How we use your information
- To provide core features: generating and adapting workout and nutrition plans, logging sessions, and showing progress.
- To calculate your Sleep and Recovery scores and adapt your plan to them.
- To operate social features such as friends, squads, and the activity feed.
- To authenticate you and keep your account secure.
- To process your subscription and Coach Credit entitlements.
- To diagnose problems and improve reliability, and to communicate with you about your account or important changes.
AI-generated workout & nutrition plans
ForgeForm uses AI to generate and adapt your plans. The preferences and training inputs you provide (and readiness signals derived on your device) are processed on our secure backend and sent to our AI provider, Anthropic (United States), solely to produce your plan. With your separate permission it also includes your health context: injuries, allergies, dietary pattern, foods you avoid, sleep and stress, and your Sleep and Recovery scores with the signals behind them. This data is used only to deliver the feature and is not used to train third-party models. AI-generated plans are automated suggestions, not medical or professional advice — see our Health & Fitness Disclaimer.
The marketing website & waitlist
If you join the waitlist on this website, we store the email address you submit, your language preference, the page that referred you, and any campaign parameters in the link you arrived from. We use it only to tell you when the beta opens and to send a single confirmation. We use privacy-friendly, cookie-less analytics (aggregate page views only) — no cross-site tracking, no advertising identifiers, and no cookie banner because there are no tracking cookies to consent to. This website never receives any Apple Health data.
Legal bases for processing (GDPR)
If you are in the EU or UK, we rely on the following legal bases:
- Performance of a contract — to provide the App's core features once you create an account.
- Consent — for Apple Health access, camera/photo access, and the waitlist; you may withdraw consent at any time.
- Legitimate interests — to keep the App secure, prevent abuse, and improve reliability, balanced against your rights.
- Legal obligation — where we must retain or disclose data to comply with the law.
How your data is stored & secured
Your account and training data are stored using Supabase, our backend and database provider, on secured cloud infrastructure. Access is protected by authentication and row-level security so you can only access your own data and content you are explicitly permitted to see. Data is encrypted in transit (HTTPS/TLS) and at rest by our infrastructure providers.
Sharing of information
We do not sell your personal information. We share data only:
- With service providers ("processors") that operate the App on our behalf — currently our hosting/database provider (Supabase), our AI processing provider, our purchase and subscription-management provider (RevenueCat), and our crash-reporting provider (Sentry) — under agreements that limit their use of the data to providing services to us.
- With Apple, for processing purchases through the App Store.
- With other users, but only the content you choose to share — for example, workouts you post to your activity feed or your position on a leaderboard among friends.
- When required by law, or to protect the rights, safety, and security of ForgeForm, our users, or the public.
- In connection with a business transfer (such as a merger or acquisition), in which case we will notify you and this policy will continue to apply.
International transfers
If you use the App from outside the region where our servers are hosted, your information may be transferred to and processed in other countries, including the United States, under appropriate safeguards.
Data retention
We keep your information for as long as your account is active. When you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain certain records to comply with the law or resolve disputes. Backups are purged on a rolling basis.
Your choices and rights
- You can view and edit your profile and training data within the App.
- You can revoke Apple Health, camera, and photo permissions at any time in your device settings.
- You can request access to, correction of, or deletion of your personal data by contacting us.
Additional rights for EU/UK residents (GDPR)
If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, erase, restrict, or object to processing of your data, to data portability, to withdraw consent at any time, and to lodge a complaint with your local data protection authority. To exercise any of these rights, email support@forgeform.fit. We respond within the timeframes required by law (generally one month).
Additional rights for California residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to delete it (subject to legal exceptions); to correct it; to opt out of sale or sharing; and to non-discrimination for exercising these rights. ForgeForm does not sell or share your personal information as those terms are defined under the CCPA/CPRA. To submit a request, email support@forgeform.fit; we will verify your request using your account email before acting on it.
Deleting your account & data
You may request deletion of your account and all associated personal data at any time by emailing support@forgeform.fit from your account email address, or by using any in-app account deletion option where available. We will confirm and complete deletion within 30 days.
Age requirement
ForgeForm is for people aged 16 and over. It is not directed to anyone under 16, and we do not knowingly collect personal information from children under 16. If you believe someone under 16 has provided us with personal information, please contact us so we can remove it.
Health disclaimer
ForgeForm is a fitness and wellness product, not a medical device, and does not provide medical advice, diagnosis, or treatment. Sleep and Recovery scores are estimates for informational purposes only. Always consult a qualified healthcare professional before starting any new exercise or nutrition program. See the full Health & Fitness Disclaimer.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, through an in-app notice. Your continued use after an update means you accept the revised policy.
Contact us
Questions about this policy or your data? Contact the data controller:
| Company | Borges Realty LLC d/b/a ForgeForm.FIT (Florida, USA) |
|---|---|
| Product | ForgeForm |
| Privacy email | support@forgeform.fit |
| General & support | support@forgeform.fit |