Forge stores your name, your workout logs, and which groups you're in. That's the app.
We don't sell your data. We don't run ads. We don't track your location, read your contacts, or ask for your photos.
You can ask us to delete everything at any time, and we will.
The rest of this page is the detailed version, in plain language.
Forge is a fitness accountability app operated from Mumbai, India, by an individual developer. In this policy, "Forge", "we", and "us" mean the operator of the Forge app and the website at goforge.in.
If you have any question about your data, you can reach a real person directly at team@goforge.in.
Only what the app needs to work. Here's the complete list:
| What | Why we need it |
|---|---|
| Your display name | So your group knows who logged a workout. Usually set by your group admin when they add you, or chosen by you when you join. |
| Your workout logs | The type of workout (gym, running, yoga, etc.) and the date it happened. This is the core of the app — it's what gets scored. |
| Your group membership | Which groups you belong to, which team you're on, and your role in the group. |
| Your PIN | Stored only as a scrambled (hashed) value, never as the number itself. Used to confirm it's you when you open the app. |
| An anonymous device ID | Firebase generates a sign-in identifier. Legacy PIN sessions may use anonymous sign-in. Where Google or Apple sign-in is enabled, the identifier is associated with the account you choose. |
| Linked sign-in account | If you choose Google or Apple, we receive an account identifier and the name and email address the provider shares. Apple may supply a private relay email address. Forge does not receive your Google or Apple password. |
| Private support | If you message Forge, we store your message, linked profile name, group codes, timestamps, replies, progress status and read markers. Only your linked account and an authorised support administrator can access the conversation. We do not automatically attach Health records, PINs or workout history. Support messages are retained with your account and removed when linked-account deletion completes; you can also request removal by email. |
| Challenge steps and solo records | Participating in an enabled steps challenge uploads daily step totals for scoring. Solo mode stores your workout dates, chosen activities and notes separately. If you opt into the solo leaderboard, your solo display name, monthly points and workout-day count appear there; you can hide your entries from solo rankings. |
| Basic usage data | Which screens get opened, and roughly how the app is used. This tells us what to improve. It's aggregate, not surveillance. |
| Device type | Whether you're on mobile or desktop, and general browser information, so the app renders correctly. |
Your data is used for exactly these purposes and nothing else:
We do not use your data for advertising, profiling, or automated decision-making, and we never sell it.
Your name, your workout logs, your points, and your streak are visible to other members of any group you're in. This is intentional — Forge is a group accountability app, and that visibility is the product. Don't log anything you wouldn't want your group to see.
We use a small number of third-party services to run Forge. They process data on our behalf:
We do not sell, rent, or trade your personal data to anyone, for any purpose, ever. We do not share it with advertisers or data brokers. The only other circumstance in which we would disclose data is if we were legally required to by a valid order under Indian law.
Forge’s primary Firestore database and server functions are configured in Mumbai, India (asia-south1). This does not mean every service processes data only in India.
Firebase Authentication processes sign-in data in the United States. Google and Apple process sign-in information under their own policies. GitHub Pages serves website files through a global network, and our public-page analytics may process usage information internationally. See Firebase’s privacy and data-location information.
You have the right to:
There's no form and no ticket system. Email a person: team@goforge.in
On the phone apps you can optionally connect Forge to Apple Health (iOS) or Health Connect (Android). It is off until you switch it on in Profile → Health. If you do, Forge asks to read exactly two kinds of data, and nothing else:
| What Forge reads | What it's for |
|---|---|
| Exercise sessions Health Connect: Exercise · Apple Health: Workouts | Workout suggestions. Forge looks at the workouts your phone or watch recorded in the last 7 days (type, start time and duration) and offers each one as a suggestion: "Your watch recorded a 40 min run on day 14. Log it?" On iPhone, a workout's suggestion also shows the distance Apple Health stored with that workout. Forge does not read routes or location. |
| Daily step totals Health Connect: Steps · Apple Health: Steps | The steps challenge. When your group admin turns on a weekly steps challenge, Forge reads one total per completed day for the challenge dates to score your team. |
To delete your Forge data, email team@goforge.in with the subject "Delete my data", and tell us your display name and which group you're in.
We'll delete your personal data and confirm to you when it's done, normally within 7 days and always within 30.
What gets deleted: your name, your identity record, your PIN, your group membership, and your personal workout history.
What may remain: a group's past season results may retain an anonymised record that a team scored certain points, because removing it would rewrite other people's history. This record will not identify you.
Deletion is permanent and cannot be undone. If you rejoin later, you start fresh.
Forge is not intended for children under 13, and we don't knowingly collect data from them.
Forge groups are often family groups, and a group admin may add a family member who is a minor. If you are under 18, you should only use Forge with the knowledge and permission of a parent or guardian. If you're a parent and want your child's data removed, email team@goforge.in and we'll delete it, no questions asked.
We take reasonable measures to protect your data: connections are encrypted (HTTPS), your PIN is stored scrambled rather than in plain text, and database access is restricted by security rules.
Being honest with you: Forge is a small, actively developed app built by one person, not a bank. The data it holds is your name and your workouts. It doesn't hold anything financially sensitive. We're continuously improving our security, including moving toward proper account-based sign-in. Please don't reuse a PIN that you use for anything important, like your phone or your bank card.
If you ever discover a security problem in Forge, please tell us at team@goforge.in — you'll get a fast, grateful reply.
Occasionally we run in-app or link-based surveys. Survey responses are collected anonymously — we do not store your name or any identifier alongside your answers, and we cannot tell who submitted which response.
Our public pages (goforge.in/about and similar) use Google Analytics to measure basic engagement — how many people visit and which sections they read. This is standard web analytics and does not identify you personally.
If we change how we handle your data, we'll update this page and change the "last updated" date at the top. If a change is significant — for example, if we started collecting something new — we'll tell you in the app before it takes effect.
For any privacy question, request, or complaint, including data access and deletion requests:
Email: team@goforge.in
We aim to respond within 7 days.