Privacy Policy

Last updated: 17 July 2026

Forge ("the app", "we", "us") is a fitness app operated by Northbytes. This policy explains what data we collect, why we collect it, and what we do with it. If anything here is unclear, email us at piers@northstarsolutions.pro.

1. Data we collect

Account data

• Email address, warrior name (display name), and a password. Passwords are stored hashed — we never store or see your plaintext password.

Fitness and activity data

• Workouts you log: exercises, sets, reps, weights, duration, and notes.
• Progress data the app derives from your activity: XP, ranks, streaks, season and tournament results, and tribe/battle activity.
• Profile details you choose to add, such as body metrics and goals.

Health data (optional)

• If you connect Apple Health (HealthKit), we sync the categories you approve — such as workouts, steps, and heart-rate data — to power your stats and recovery features. This is entirely opt-in and you can revoke access at any time in the iOS Health app.
• If you log blood-glucose readings, we store them to show your trends.
• We never use HealthKit or other health data for advertising or marketing, and we never sell it.

Nutrition data

• Food you log, nutrition targets, and any food photos you submit for AI-powered macro estimation.

AI conversations

• Messages you exchange with the Oracle (the in-app AI trainer), including voice input if you use it, so the Oracle can keep context between sessions.

Purchases

• Purchases and subscriptions are processed by Apple. We receive purchase receipts (transaction identifiers and product details) to unlock what you bought — we never receive or store your payment card details.

Technical data

• Standard server logs (IP address, request timestamps) used for security and to keep the service running.

2. How we use your data

• To provide the app: track your training, compute XP and ranks, run seasons, tournaments, tribes, and battles.
• To power AI features you invoke (the Oracle, food-photo analysis).
• To send account emails such as verification codes and important service notices. We do not send marketing email without your consent.
• To detect cheating or abuse and keep leaderboards fair.
• To provide support when you contact us.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Who we share data with

We use a small number of service providers to run Forge. They only receive what is needed to do their job:

• Google (Gemini) and OpenAI — process the content of AI requests (Oracle conversations, food photos you submit for analysis) to generate responses.
• Resend — delivers our account emails.
• Fly.io — hosts our servers and database.
• Apple — processes payments and subscriptions.

We may also disclose data if required by law.

4. Data retention and deletion

We keep your data while your account is active. You can delete your account from within the app (Settings → Account); this permanently deletes your personal data from our systems. You can also email us to request deletion or a copy of your data.

5. Security

All traffic between the app and our servers is encrypted with HTTPS. Passwords are hashed, and access to production systems is restricted.

6. Children

Forge is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we will delete it.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email us and we will honour these requests.

8. Changes to this policy

If we make material changes we will update this page and the date at the top, and where appropriate notify you in the app.

9. Contact

Northbytes — piers@northstarsolutions.pro