Effective date: September 19, 2026
Forge Fitness is built on a simple principle: your data stays on your device. The app has no servers, no accounts, and no analytics. We cannot see your data. Not because we promise not to look, but because it never leaves your phone in the first place.
Forge Fitness stores the following information only on your device:
None of this is transmitted to us or to any third party. Deleting the app deletes this data.
With your permission, Forge Fitness reads from Apple Health: heart rate variability (HRV), resting heart rate, heart rate samples from your sleep, sleep duration, and daily step count. These appear in the app’s recovery card, rest-day view, and insights. If you choose to use the cycle import (a separate permission, asked only when you tap Import), the app also reads menstrual cycle dates recorded by your cycle-tracking app.
If you log menstrual cycle information, it receives the same treatment as everything else: stored only on your device, transmitted nowhere, visible to no one but you. There is no server copy of your cycle data, and we could not produce one if asked, because it does not exist.
If you choose to connect an Oura Ring, tapping Connect opens Oura’s own sign-in in a secure window run by iOS. You sign in to Oura there and approve the connection. Forge Fitness never sees your Oura email or password. Then:
If you choose to connect a WHOOP, tapping Connect opens WHOOP’s own sign-in in a secure window run by iOS, exactly like Oura. Forge Fitness never sees your WHOOP email or password. Then:
Forge has a coach you can ask about your training. It is off until you open it and read a short screen saying what it sends. When you send a message:
If you choose to share your training with a coach, the app writes one record to Apple’s iCloud infrastructure for this app containing only the categories you tick: your program, upcoming sessions, recent sessions, every set, effort (RPE), adherence, progress, and, only if you turn each one on separately, last night’s sleep, HRV and resting heart rate with the recovery band, and your notes. Recovery and notes are off by default.
The record is encrypted on your phone with a key made from a ten-character coach code that only you and the person you give it to hold. Nobody else, including us, can read it. Your coach reads it in their own copy of Forge Fitness and can change nothing on your phone. Turning a category off rewrites the record without it. Stopping the share, or your coach disconnecting, deletes the record. A share can also be set to end on its own after twelve weeks. Your coach can remember or screenshot what they saw; ending the share removes it from Forge, not from them. Never shared this way: your body weight and measurements, cycle log, progress photos, medication context, nutrition targets, or who your friends are. Don’t share, and nothing is ever written.
If you choose to log a meal from a photo, the photo is sent once, through the same relay the coach uses, to the service that estimates what is on the plate, and is not stored by us or by that service. What comes back is an estimate of the foods, calories, protein, carbohydrates and fat, which you can change before saving. Only the numbers you save are kept, on your device and in your own iCloud with the rest of your log. Food data is never shared with friends or with a coach. Don’t use the feature, and no photo is ever sent.
If you choose to join the friends leaderboard, the app publishes a small “card” so friends who have your code can see it: the display name you pick (it does not need to be your real name), your current streak, your weekly totals (sessions, volume, and PR days), your personal records from the last week, your all-time heaviest sets, and the top set of each exercise in your last few workouts.
Optionally, and only if you turn it on, your card can also carry last night’s sleep duration, heart-rate variability (HRV), resting heart rate, breathing rate, and the recovery status Forge gave you, each one its own switch. This sharing is off by default, only friends who have your code can see the values, and switching any of it off removes it from your card. Your workouts travel as each exercise’s top set; every set and your effort ratings travel only if you turn those on. Nothing else ever joins the card: your notes, your food, and every other health reading stay on your device.
Cards are stored in Apple’s iCloud infrastructure for this app and are findable only by your six-character friend code, which you share yourself. Don’t join, and nothing is ever published.
Like most apps, Forge Fitness’s data is included in your device backup (iCloud backup or computer backup) if you have backups enabled. Those backups are managed by Apple under your Apple ID and covered by Apple’s privacy policy. We have no access to them.
Forge Fitness syncs your data to your own private iCloud account so it survives a lost or replaced phone. There is no account to create and no password: syncing uses the Apple ID already on your device, and the data goes into your personal iCloud storage, which Apple encrypts and we cannot access. If you are not signed into iCloud, the app simply works locally. Your health readings (from Apple Health or Oura) are displayed from your device and included in this sync only as part of your recovery log; they are never sent anywhere else.
The app can show local notifications (for example, when your rest timer ends). These are generated entirely on your device. We do not send push notifications and have no ability to.
Forge Fitness is a fitness tool intended for teens and adults and is not directed at children under 13.
Delete any workout from the History tab, or delete the app to remove everything. Because no copies exist anywhere else, deletion is complete and immediate.
If the app’s data practices ever change, this policy will be updated and the effective date revised before the change takes effect.
Questions about privacy in Forge Fitness: useforgefitness@gmail.com