Forge Legacy
Forge Legacy is a training record. This policy describes exactly what the app collects, why it collects it, who can see it, and how to remove it. It is written to be read rather than to be survived.
The short version. We collect what the app needs to work and a small amount of usage data to understand which parts people actually use. We do not sell your data, we do not run advertising, and we do not share your training or your food log with anyone you have not chosen. You can delete your account, and everything in it, from inside the app.
What changed on 28 September 2026. Error and crash reports, and some performance data, now also go to Sentry, a crash-reporting service (see “Diagnostics”). On iPhone you can connect Apple Health so workouts recorded by a watch or another app appear in Forge (see “Apple Health”). And a form check now measures your movement on your phone first; the positions of your joints never leave it (see “Coach Holt and the AI features”).
What changed on 25 September 2026. We added a section on Nutrition (food logging), named every company that processes data for us, and corrected what we say about routes: your full route is now saved, so the earlier promise that the first and last 200 metres are removed no longer applies. Routes remain visible to you only unless you add a map to a specific post. Health data now also has its own page: Consumer Health Data Privacy Policy.
Forge Legacy is operated by Forge Legacy LLC, a limited liability company registered in Utah, United States. For anything in this policy, contact support@forgelegacy.app.
This is the substance of the product, and most of it is health or fitness data:
If you use Nutrition, the app stores:
Food allergies are health information. We use them for one thing: keeping recipes that contain them out of your meal plan.
Your nutrition data is visible to you only. There is no setting that shares it, and it is never shown to your squads, your friends, or in search. If you post a meal or a recipe to a squad, the post does not include calories, macros, your weight, your targets or your eating history. The one exception is a food you choose to share, described next.
Sharing a food you scanned. When you scan a barcode Forge doesn't know, you can create the food yourself. A “Share with Forge” box, ticked unless you untick it, adds that product to a shared list so the next person who scans the same barcode finds it. Only the product is shared: its barcode, name, brand, serving size and nutrition numbers. Nothing that identifies you is shown to anyone. We keep a private record of who shared each food so we can deal with abuse, and no other user can see it. Anyone can report a shared food's numbers as wrong. If you delete your account, the foods you shared stay in the list as anonymous product information, and our record linking them to you is removed.
Looking up a food. When you search for a food or scan a barcode, the words you typed or the barcode number are sent, through our own servers, to food databases: USDA FoodData Central, FatSecret and Open Food Facts. If our servers find nothing for a barcode, your phone asks Open Food Facts directly, so Open Food Facts sees your device's internet address, as any website you visit would. These databases never receive your name, email or account. Foods that are found are kept in a shared reference list inside Forge so the next search is faster. That list records the food, not who searched for it.
Targets are estimates. Calorie and macro targets are calculated from general formulas. They are not medical or dietary advice. Forge does not recommend targets to anyone under 18, and it will not set a target below a safe minimum.
If your plan includes the AI features, what you ask Coach Holt, and the training or nutrition details needed to answer, are sent to our AI provider (see section 4). We also keep short summaries of your conversations with Coach Holt so he can remember what you talked about. They are visible to you only and are deleted with your account.
Some AI features read a photo or video you choose, for example a picture of a program, a recipe or a meal, or a clip for a form check. That photo or those video frames are sent to our AI provider so it can be read.
For a form check on iPhone, your phone first measures your movement on the device: it works out where your joints are in each frame. Those joint positions never leave your phone and are never stored. Only a few numbers worked out from them, such as how many reps, how deep and how fast, are sent to our AI provider along with the frames you chose.
If you talk to Coach Holt with the microphone, your phone's own speech recognition turns your voice into text. On iPhone that is Apple's speech recognition, and Apple may process the audio on its servers under Apple's privacy policy. We never receive or store the recording, only the text, exactly as if you had typed it.
If you start a tracked outdoor session, the app reads your precise location to measure distance, pace and elevation. This happens only during a session you started, including while the app is in the background so the measurement survives your phone going into a pocket. It stops when the session does.
Routes. Your full route is saved so your distance, pace and map are accurate. It is visible to you only. A map is shown to other people only on a post where you choose to include it, one post at a time, and that choice is off by default. A route usually starts and ends at your door, so think about that before you add a map to a post.
If you connect Apple Health in Settings, Forge reads your workouts from it: the type (run, walk, ride, swim, row), when it started and ended, its distance, and which app or device recorded it (for example “Garmin Connect” or “Apple Watch”). We do not read heart rate, calories, routes, sleep, or any other Health data. Each workout you choose to add becomes part of your Forge training history and is stored with the rest of it. If you turn on “Save Forge workouts to Apple Health”, Forge also writes the workouts you finish in Forge to Health on your phone. Data from Apple Health is never used for advertising or marketing, never sold, and never shared except as this policy describes. It is never sent to Sentry.
Camera and photo-library access are requested only at the moment you use them, and can be declined without preventing you from using the rest of the app.
Squad membership, friendships, posts, comments, reactions, challenge entries and shared workouts. All of these are visible only to the people in the squad or friendship concerned.
If you buy a subscription, Apple handles the payment. We receive a record of your plan and its status (for example active, renewed or cancelled) so the app knows what you have access to. We never see your card or payment details.
We record a limited set of product events, such as which screens are opened and which features are used, so we can tell what is worth building and what is being ignored. These are stored against your account identifier so we can count people rather than taps. They never include the names of foods you log. They are never sold, never shared with advertisers, and are not used to build a profile about you. We do not use third-party advertising or tracking SDKs, and the app does not track you across other apps or websites. Error reports are covered separately below, under “Diagnostics”.
When the app hits an error it sends us a report, so we can fix it without having to ask you what happened. It contains the error message, the technical trace of where in our code it occurred, the screen you were on, your app version and phone model, and a short trail of the last few steps that led up to it: the screens you moved between and the names of the actions you took, never what you typed into them. It never contains your training figures, your photos, your location, or text you wrote. One honest exception: an error message is written by our code, and once in a while it can quote a value you entered, for example if that value was rejected. Reports are capped in length, kept for 90 days, stored in our own database, and read only by us.
The “Help improve Forge” switch turns off the trail, not the report. With it off we still learn that the app broke, on which screen and on which version, because that is a fault in our software, not a record of what you did. We no longer record the steps that got you there.
Sentry. Error and crash reports are also sent to Sentry, a crash-reporting service we use, including crashes that close the app before our own report can be sent. A Sentry report contains the technical trace of the error, your app version, phone model and operating system, and your account identifier (a random code, not your name or email) so we can tell how many people a problem affects. For a sample of sessions Sentry also receives performance data: how long the app took to start, and how long screens and network requests took, so we can find what is slow. Web addresses in it are cut off before any search terms. Sentry never receives the step trail described above, your name, email, training figures, food log, health data, photos, location, or anything you typed; the same honest exception about error messages applies, and we remove email addresses and search terms from them before they are sent. Turning off “Help improve Forge” also stops the performance data. Sentry processes these reports only to provide them to us, and keeps them for up to 90 days.
If you enable push notifications, we store a device push token so messages can reach your phone. Turning notifications off removes it.
If you send us feedback, a bug report or a suggestion, from Account Settings → Send Feedback in the app or by emailing support, we store what you wrote, along with the screen you were on, the app version and the device platform, so we can reproduce the problem and reply. It is read only by us, is never used for advertising or profiling, and is deleted with your account.
If you ask for a test invitation on forgelegacy.app, we store the email address you enter. We use it only to send you the invitation and to contact you about the test. We keep it until the test program ends, and delete it sooner if you ask. The website uses no advertising or tracking cookies.
| Data | Who can see it |
|---|---|
| Your workouts, records, goals, chapters and reflections | You, unless you choose to share a specific item |
| Your food log, targets, allergies and eating history | You only |
| A food you shared from a barcode scan | Everyone, as product information with nothing that identifies you |
| Your conversations with Coach Holt | You only |
| Progress and transformation photos | You only |
| Route maps | You only, unless you add the map to a specific post |
| Squad posts, check-ins and challenge results | Members of that squad |
| Friend activity and shared milestones | Confirmed mutual friends |
| Name, handle and avatar | Anyone who can search for you by handle, if you are discoverable |
| Live training status | Only the audience you select, and off by default |
Our database enforces these boundaries itself, not only the app. There are no public profiles and no global leaderboards.
We do not sell personal data, and we do not share it for advertising. We use a small number of service providers who process data on our behalf, only to provide the app:
Apple Health is on your own phone, not a company we send data to.
We may disclose data if the law requires it, or to protect someone's safety. If the companies we use change in a way that affects your data, we will update this page.
Your training record and food log are kept for as long as your account exists, because that is the point of them. Squad check-in video is deleted automatically after a limited period. Diagnostic reports are kept for 90 days. Deleting your account removes the rest, as described below.
You can delete your account and its contents from Account Settings → Delete Account, inside the app. It is immediate and it cannot be undone.
Deletion removes your sign-in credentials, your profile, and every record attached to it: workouts, sets, records, goals, chapters, honors, photos, videos, posts and memberships; your food log, targets, preferences, foods, meals, recipes and meal plans; and your conversations with Coach Holt. Foods you shared from a barcode scan stay in the shared list as anonymous product information. If you own a squad with other members in it, ownership passes to the longest-standing member so that other people do not lose their own records. A squad with nobody else in it is deleted with your account.
Workouts Forge saved to Apple Health stay in the Health app on your phone. You can delete them there.
Backups may keep copies for a short period before they are rotated out. Before you delete, you can download your data from Account Settings → Export My Data.
Depending on where you live, you may have the right to access, correct, delete, or get a copy of your data, and to withdraw consent. Write to support@forgelegacy.app and we will act on it. If we decline a request, you can appeal by replying to our answer. Residents of Washington, Nevada and other states with consumer health data laws should also read our Consumer Health Data Privacy Policy.
Forge Legacy is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it. Users under 18 are not given recommended calorie or macro targets.
When this policy changes, we update the date at the top of this page. If a change affects data we already hold, we will tell you in the app before it takes effect.
Forge Legacy LLC · support@forgelegacy.app