Privacy Policy

1. Who We Are

ForgeUp is operated by Open Key Technologies LLC ("we", "us", "our"). This policy explains how we handle information collected through the ForgeUp iOS app and web application at forgeup.app.

2. Information We Collect

Account information. When you sign up, we collect your email address and password (stored as a secure hash). You may optionally provide a display name.

Fitness data. We collect the workout data you enter: exercises, sets, reps, weights, and notes. We also store the AI-generated programs built for you.

Training profile and health notes. Your goal, experience level, schedule, preferred split, available equipment, and any health notes you choose to enter (for example injuries or medical conditions).

AI conversation history. When you chat with Milo, your coach, messages are stored so Milo can maintain context across sessions.

Device and usage data. We collect basic analytics (page views, feature usage) to improve the product. We do not sell this data.

Payment information. Subscriptions are processed by Apple. We never see your payment card details.

3. How We Use Your Information

• Operate and improve the ForgeUp service
• Generate and personalize your workout programs
• Power Milo, your AI coaching assistant
• Send transactional emails (account confirmation, password reset)
• Comply with legal obligations

We do not sell your personal information to third parties.

4. AI and Third-Party Services

Milo, your AI coach, uses third-party AI services. Before your first conversation, the app asks for your permission; nothing is sent to an AI service until you agree.

What is sent: your messages to Milo and any photos you attach; your training profile (goal, experience, schedule, split, equipment); health notes you entered; your current program, workout history, and notes Milo has saved about your training.

Who receives it:

• Anthropic, PBC (Claude API): generates Milo's replies and your programs.
• Voyage AI: creates search indexes (embeddings) of your past conversations so Milo can recall relevant context.

How it is used: only to respond to you and build or adjust your training. We do not sell this data or use it for advertising, and we do not track you across other companies' apps or websites. These providers process the data under their commercial API terms, which require protection of customer data at least equal to this policy.

We use Supabase for database and authentication services, and Google Sign-In for OAuth authentication. These services have their own privacy policies.

5. Data Retention

We retain your data as long as your account is active. You may request deletion of your account and data at any time by emailing privacy@forgeup.app. We will delete your data within 30 days of a verified request.

6. Security

We use industry-standard security measures including encrypted connections (TLS), hashed passwords, and access controls. No system is 100% secure; if you believe your account has been compromised, contact us immediately.

7. Children's Privacy

ForgeUp is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have done so, we will delete the information promptly.

8. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)

You can permanently delete your account and all associated data at any time in the iOS app under Profile & Goals → Delete Account.

To exercise any of these rights, email privacy@forgeup.app.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of ForgeUp after changes take effect constitutes your acceptance of the updated policy.

10. Contact Us

Questions? Email us at privacy@forgeup.app.