01Introduction

FORGE ("we", "us", "our") operates klemforge.com and the FORGE app. This policy explains what data we collect, why, and how we protect it. By using FORGE you agree to this policy.

02Data We Collect

• Account data: name, email address, password (encrypted, never stored in plain text).
• Profile data: age, sex, height, weight, fitness goals, training experience, injury history, dietary preferences — used to personalise your programme and coaching.
• Usage data: workout logs, session history, personal records, AI coach conversations, login streaks.
• Payment data: handled entirely by Stripe. We never store card numbers or payment details. We receive only subscription status and transaction IDs.
• Device data: device type, browser, IP address, push notification subscription token.
• Preferences: language, units, notification settings, colour theme.

03How We Use Your Data

• To generate and personalise your AI workout programme.
• To power your AI coach with context about your training and goals.
• To process payments and manage your subscription.
• To send transactional emails: welcome, password reset, trial expiry notices.
• To send push notifications if you enable them.
• To improve the product using anonymised, aggregated usage patterns.

04Who We Share Data With

We share data only with these trusted services:

• Supabase (database and authentication) — servers in the EU.
• Anthropic (AI coaching engine) — your profile and training data is sent to generate responses.
• Stripe (payments) — payment processing only.
• Resend (email delivery) — email address and name only.

We do not sell your data. We do not share it with advertisers.

05Data Retention

• Your data is retained while your account is active.
• If you delete your account, all personal data is deleted within 30 days.
• Anonymised aggregate data may be retained for product analytics.

06Your Rights (GDPR / UK GDPR)

If you are in the EU or UK you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with your supervisory authority.

To exercise any right, email support@klemforge.com.

07California Residents (CCPA)

California residents have the right to know what personal information we collect, request deletion, and opt out of sale (we do not sell data). Contact support@klemforge.com to exercise these rights.

08Health Data

Fitness and health information you provide (injuries, weight, goals) is used solely to personalise your experience. It is not shared with third parties for any other purpose. FORGE is not a medical service. Content from the AI coach is for fitness guidance only and does not constitute medical advice.

09Cookies and Tracking

FORGE uses only functional cookies and local storage necessary to keep you logged in and save your preferences. We do not use tracking cookies or advertising pixels.

10Children's Privacy

FORGE is not intended for users under 16. We do not knowingly collect data from children.

11Security

We use industry-standard encryption for data in transit (HTTPS) and at rest. Passwords are hashed and never stored in plain text. Access to user data is restricted to authorised personnel only.

12Changes to This Policy

We may update this policy. We will notify you by email and update the "Last updated" date. Continued use of FORGE after changes constitutes acceptance.

13Contact

Questions about this policy: support@klemforge.com

FORGE, Rue du Rhône 14, 1204 Genève, Switzerland.