FORGE uses data only for clear product purposes, safety, and support.

1. Controller and scope

FORGE Strength OS and FORGE-branded services are operated by Fatih Colak / FORGE. This policy applies to the mobile app, website, support pages, community features, subscriptions, and connected health integrations. For privacy requests, use the support center or email mfatihcolak1@gmail.com.

2. Categories of data we collect

• Account and authentication data, including name, email, profile photo, login provider, user ID, and account settings.
• Profile, goals, and preferences, including language, time zone, height, weight, goals, training experience, equipment, notifications, and coaching preferences.
• Workout, nutrition, and body-composition data, including exercises, sets, reps, weight, RPE, programs, meals, calories, macros, water, supplements, barcode searches, photo logs, and measurements.
• Health and connected-app data, including sleep, steps, active calories, workouts, body weight, recovery/readiness, and similar fitness signals from Apple Health, Health Connect, and other supported sources, only within the permissions you grant.
• Community and user content, including club membership, invite codes, room messages, challenge content, proof posts, photos, comments, reactions, reports, and moderation records.
• Purchase, technical, and support data, including subscription entitlement, restore status, device type, app version, push token, crash logs, analytics events, and support messages.

3. Health data commitments

• We use health data only for expected fitness, recovery, training, nutrition, sync, and support features.
• We do not read or write HealthKit, Health Connect, or similar data types unless you authorize them.
• We do not sell HealthKit, Health Connect, or connected health data, and we do not use it for ad targeting, data brokerage, credit, insurance, employment, or similar decisions.
• You can disconnect health access in the app or through Apple Health, Health Connect, and provider settings.
• Deleting data in FORGE does not automatically delete source records in Apple Health, Health Connect, or a third-party health provider.

4. Purposes and legal bases

We process data to operate your account, sync across devices, personalize training and nutrition flows, verify FORGE Pro access, send notifications, protect community safety, fix errors, and comply with legal obligations. Where applicable, our bases include performance of a contract, consent, legitimate interests, legal obligations, and the establishment, exercise, or defense of rights. We may request separate permission for health data, camera/photo access, notifications, and certain marketing communications.

5. Sharing and processors

Data may be processed by service providers such as Firebase, Google Cloud, Firebase Authentication, Firestore/Database, Storage, Cloud Functions, Crashlytics, Analytics, Messaging, Remote Config, App Check, App Store, Google Play, RevenueCat, and health providers when you initiate a connection. Profile details, messages, photos, and public content you share in community spaces may be visible to other users. We may disclose information when required for valid legal requests, safety, fraud, abuse, or rights enforcement.

6. AI coach and automated recommendations

FORGE may generate coaching suggestions, readiness/recovery interpretation, program priorities, and weekly summaries using your profile, workout history, nutrition records, and authorized health signals. These outputs are for fitness and wellness only; they are not medical diagnosis, treatment, emergency guidance, or clinical decision support. If personal data will be shared with a third-party AI provider, we will disclose that and obtain required permission before expanding that scope.

7. Retention, security, and transfers

We keep data while your account is active and for a reasonable period needed for support, safety, accounting, or legal requirements. Data removed from active systems may remain for a limited time in backup rotation. Data may be processed in Türkiye, the European Economic Area, the United States, and other countries where infrastructure providers operate. We use safeguards such as encryption, access limits, security rules, and App Check, but no system can guarantee absolute security.

8. Rights, children, cookies, and changes

Depending on applicable law, you may request access, correction, deletion, portability, objection, restriction, or withdrawal of consent. You can start account deletion from Profile > Account or through support. FORGE is not directed to children and expects users to be at least 16 unless local law requires a higher age. Our website may use cookies or similar technologies for basic analytics and security. We will use appropriate notice channels for material changes.