Last updated: 30 September 2026
This policy explains what personal data the Forge mobile application ("Forge", "the app") collects, why we collect it, who we share it with, and the rights you have over it. Forge is operated by Novex Studio Ltd, a company registered in England and Wales, referred to below as "we" or "us".
If you have any questions about this policy or how your data is handled, contact us at forgefitnessxii@gmail.com.
We only collect data you give us directly, or that the app generates as you use it.
| Data | Why we collect it | Required? |
|---|---|---|
| Email address | To create your account, sign you in, verify your address, and send essential service emails such as verification codes. | Yes |
| Password | To secure your account. Passwords are hashed with bcrypt and are never stored or transmitted in readable form. | Yes |
| Date of birth | To confirm you meet the minimum age requirement and to place you in the correct age category on leaderboards. | Yes |
| Display name, bio, profile photo | To identify you to other users on leaderboards and in challenges. | No - optional |
| Health & fitness details - height, weight, training goal, experience level, available equipment, training availability | To generate your personalised workout and macro plans. This is the input to the planning engine. | No - only if you use the planner |
| Workout activity - exercises, sets, reps, weights and dates | To track your training history, show your progress over time, and rank verified lifts. | No - only what you log |
| Lift and performance videos and photos | To let a reviewer verify a personal record before it appears on the leaderboard. Submission is entirely voluntary. | No - optional |
| Push notification token | To deliver notifications to your device. Only collected if you grant notification permission. | No - optional |
| IP address | Used transiently to rate-limit requests and protect the service from abuse. Not retained as part of your profile. | Automatic |
| Blocked users list | To hide content from users you have chosen to block. | No - optional |
| App usage data | Which screens you open and which features you use, together with your device model, operating system version, country, and a randomly generated app instance identifier. We use this to see which parts of the app people actually use and where they get stuck. It contains no workout, health, or fitness values. | Collected automatically - can be switched off |
Forge asks for the following Android permissions. Each is requested only at the moment the relevant feature is used, and the app remains usable if you decline.
We use your data only to operate and improve the service. Specifically, to:
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.
Height, weight, and related fitness details may be treated as health data under UK GDPR. We process these only with your explicit consent, and only to build your plan. You can delete them at any time without losing access to the rest of the app.
We share data only with service providers who process it on our behalf, under contract, and only as needed to run the app:
We may also disclose data where we are legally required to do so, or where it is necessary to establish, exercise, or defend legal claims.
Some of our providers process data outside the United Kingdom. Where that happens, we rely on appropriate safeguards - such as UK adequacy regulations or standard contractual clauses - to ensure your data receives an equivalent level of protection.
Under UK GDPR you have the right to:
You can delete your account from within the app at any time. For any other request, email forgefitnessxii@gmail.com and we will respond within one month.
If you believe we have handled your data improperly, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Passwords are hashed using bcrypt and never stored in readable form. Traffic between the app and our servers is encrypted in transit using HTTPS. Session tokens are held in your device's secure storage. Access to production systems is restricted to those who need it. No system is perfectly secure, but we take reasonable and appropriate measures to protect your data.
Forge is not intended for anyone under 16, and we do not knowingly collect data from them. If you believe a child has given us personal data, contact us and we will delete it.
If we change this policy we will update the date at the top of this page. Where the change is significant, we will notify you in the app or by email before it takes effect.
Novex Studio Ltd
forgefitnessxii@gmail.com