Fitness Forge Privacy Policy

Effective date: August 20, 2026

Fitness Forge ("Fitness Forge", "we", "us", or "our") is an iOS app for tracking workouts and body measurements and for sharing workouts with other users. Fitness Forge is operated by Andrew Towse. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have.

If you have any questions, contact us at [email protected].

Summary

  • We collect the information you give us when you create an account (name, email address, date of birth) and the fitness data you log in the app.
  • We use your data to run the app: your account, your workout tracking and statistics, and the social features you choose to use.
  • We do not sell your personal data, and we do not show ads.
  • Your health and fitness data is never used for advertising or marketing, and is never shared with third parties for advertising, data mining, or any purpose other than providing the app's features.
  • You can delete your account, and the personal data associated with it, directly inside the app.

Information we collect

Account information

When you create an account, we collect:

  • Your first and last name
  • Your email address
  • Your date of birth (used to verify you are at least 13 years old)
  • A username and display name that you choose
  • The date you signed up

Sign-in and password management are handled by Firebase Authentication, a Google service. We never see or store your password.

Health and fitness information

When you use the app, we store the fitness data you choose to log:

  • Workouts you create, including their titles, descriptions, and the exercises they contain
  • Workout session logs, including start and end times, completion status, and per-set details such as repetitions, weight lifted, duration, and distance
  • Body measurements you record, such as body weight and height, together with the date and time they were recorded

Social information

If you use the app's social features, we store:

  • The accounts you follow and the accounts that follow you, including pending follow requests
  • Workouts you save from other users
  • The visibility setting (public or private) you choose for each of your workouts

Support requests

If you contact support, we store your email address and the content of your message so that we can respond.

Purchase information

If you buy a subscription, the purchase is processed entirely by Apple through your Apple account. We receive information about your subscription status (for example, whether your subscription is active) so we can unlock the features you paid for. We never receive your payment card details.

Information collected automatically

Our servers may record standard technical information about requests to them, such as IP addresses, in routine server logs used for security and to keep the service running. The app does not contain advertising or third-party tracking SDKs, and we do not use behavioral or product-analytics tracking services.

How we use your information

We use your information to:

  • Create and maintain your account, and let you sign in securely
  • Provide workout tracking, session logging, and body-measurement features
  • Calculate your personal fitness statistics and analytics (such as personal bests, training volume, and muscle-group breakdowns) — these are computed from your own data, for you, and are shown only to you
  • Provide social features you choose to use, such as following other users and viewing workouts they have made visible to you
  • Provide sharing features when you create a share link
  • Determine which subscription features you have access to
  • Respond to your support requests
  • Keep the service secure, prevent abuse, and enforce our Terms of Service and Community Guidelines
  • Comply with legal obligations

Our commitments about your health and fitness data

We want to be explicit about how we treat your health and fitness data:

  • We never use your health or fitness data for advertising or marketing of any kind.
  • We never share or sell your health or fitness data to third parties for advertising purposes, data mining, or any purpose other than providing and improving the app's features.
  • Your health and fitness data is stored on our servers, not in iCloud.
  • We do not show ads in the app, and we do not sell any of your personal data.

Who can see your information

  • Your public profile shows only your username and display name. Your real name, email address, and date of birth are never shown to other users.
  • Each workout you create has a visibility setting. Workouts you make public can be seen by other users of the app; private workouts can be seen only by you.
  • If you create a share link for a workout or session, anyone who has that link can view that workout or session — including people who do not have a Fitness Forge account, and even if the workout is otherwise private. Share links do not expire automatically, so treat them carefully and only share them with people you trust.

Third parties that process your data

We use a small number of service providers to run Fitness Forge. They process your data only to provide their services to us, and they are required to protect it. They are:

  • Apple — distributes the app and processes all subscription payments through the App Store.
  • Google (Firebase Authentication) — manages sign-in and account credentials. Google processes your email address and login credentials for this purpose.
  • Our hosting provider — the infrastructure company that runs our servers and database, where your account and fitness data are stored.

We do not sell personal data to anyone, and no third party receives your data for advertising purposes. We may disclose information if required to do so by law, or to protect the rights, safety, or property of our users or others.

Data retention and deletion

We keep your data for as long as your account is active.

You can delete your account at any time from inside the app, in the Settings screen. When you delete your account:

  • Your login credentials are permanently deleted from our authentication provider, so the account can no longer be signed in to.
  • Your personal identifiers — your name, email address, date of birth, and username — are permanently removed from our records immediately.
  • Your body measurements (such as weight and height history) are permanently deleted immediately.
  • Your workouts, workout sessions, and follow relationships are disassociated from your identity and retained only in anonymized form (for example, so that a workout another user saved does not break). If you would like this content fully deleted as well, email us at [email protected] and we will delete it.
  • Residual copies of your data in server backups are removed within 30 days.

If you cannot access the app, you can also request account deletion by emailing [email protected] from the email address on your account, and we will carry out the same deletion.

Your rights and choices

You can view and correct your account information (name, display name, date of birth) directly in the app. You can also:

  • Access or export your data — email us at [email protected] and we will provide a copy of the personal data we hold about you.
  • Correct your data — edit it in the app, or email us.
  • Delete your data — use the in-app account deletion described above, or email us.

We will respond to requests within 30 days. We do not discriminate against you for exercising any of these rights.

Information for users in the EEA, UK, and Switzerland

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent laws give you additional rights, and we rely on the following legal bases to process your data:

  • Performance of a contract — most of our processing (your account, workout tracking, social features, subscriptions) is necessary to provide the service you signed up for.
  • Legitimate interests — we process limited technical data (such as server logs) to keep the service secure and functioning.
  • Consent — where we rely on consent, you can withdraw it at any time.
  • Legal obligation — where we must process or retain data to comply with the law.

You have the right to request access to, rectification of, or erasure of your personal data; to restrict or object to its processing; and to data portability. To exercise these rights, use the in-app tools or contact us at [email protected]. You also have the right to lodge a complaint with your local data protection supervisory authority.

Where personal data is transferred out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Information for users in US states with privacy laws

If you live in California or another US state with a comprehensive privacy law (such as the CCPA/CPRA, or the privacy laws of Colorado, Connecticut, Virginia, Utah, or Texas), you have the right to know what personal information we collect (described in this policy), to access it, to correct it, and to delete it. You can exercise these rights using the in-app tools or by emailing [email protected].

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes other than providing the service. We will not discriminate against you for exercising your privacy rights.

Security

We protect your data using industry-standard measures, including encryption of data in transit (TLS) and access controls on our systems. No method of transmission or storage is completely secure, but we work to protect your information and will notify you as required by law if a breach affects your data.

Children

Fitness Forge is not directed at children under 13, and we do not knowingly collect personal data from children under 13. We collect your date of birth at signup and reject account creation for anyone under 13. If you believe a child under 13 has created an account, contact us at [email protected] and we will delete the account and its data.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by email before the changes take effect, and we will update the effective date at the top of this page. Your continued use of the app after changes take effect means you accept the updated policy.

Contact us

For any questions about this Privacy Policy or your data, contact:

Andrew Towse, operator of Fitness Forge
Email: [email protected]