Privacy policy
Last updated 2026-10-17
Forge is a workout tracker made by Sidebot LLC. This page says what the Forge app and website collect, why, who helps us run them, and how you delete it all.
What we collect
- Your email address. We use it to sign you in with a one-time code or your Apple or Google account. We never ask for a password.
- Your workouts. The exercises, sets, reps, weights, effort ratings and notes you log, your own exercises, your personal records, and the plans and suggestions Forge builds from them.
- Your measurements. Body weight and other body measurements you log, including body weight you choose to import from Apple Health or Health Connect.
- Your settings. Weight unit (lb or kg) and time zone.
- Sign-in sessions. For each device that is signed in we keep the IP address and browser or device type, to keep your account secure. We also count requests per IP address for a short time to limit abuse.
- Membership status. If you hold an existing Forge membership: the plan, its status, its end date, and the email on the payment, which Whop sends us. We use it to keep that membership working.
- Visits to our website and web app. Our own analytics tool records page views and a few button events against a random anonymous ID. It does not record your screen or your keystrokes. The Forge mobile apps do not include it.
- Ad measurement on the website and web app. We run ads, and we measure them. When you visit forgegetsfit.com or the web app, the Whop Pixel records your page views with a random visitor ID, the ad you came from, and your browser details. When you create an account on the web, Whop receives that sign-up together with your email address, your account ID and your IP address, and Whop passes it to Meta (Facebook and Instagram) so the ad can be counted. The Forge mobile apps do not include the pixel and send nothing to Whop or Meta for advertising.
Apple and Google sign-in
Signing in with Apple or Google is optional. The provider sends us your account identifier, email address, verification status and, when provided, name and profile image. We use these to create or link your Forge account. A matching verified email signs into your existing account. Apple’s Hide My Email relay addresses work too. We keep the provider link and encrypted sign-in tokens until you delete your account. Your workouts are not sent to Apple or Google for sign-in. You can still use an email code or log workouts as a guest.
What we do not collect
Your location, contacts, photos, microphone or camera, or payment card details. The Forge mobile apps have no advertising or tracking code and do not track you across other apps or sites. We do not sell your data.
Apple Health
Connecting Forge to Apple Health is optional and off until you turn it on in Account. When it is on, Forge saves the workouts you finish and the body weight you log there, and reads your body weight and the heart rate recorded during your workouts.
Heart rate stays on your device. Forge shows it on your workout summary and never sends it to us. Body weight read from Apple Health reaches our servers only when you import it or save it as a measurement. We do not use health data for advertising, we do not sell it, and we share it with no one except the providers below that store your account. Turn the connection off in Account, or remove Forge's access in the Health app settings at any time.
Coach recovery is a separate opt-in feature. With your permission, Forge reads approximately fourteen days of sleep, heart-rate variability, resting heart rate, steps, active energy and workouts from other apps. Your phone sends daily totals and averages to your private account to adjust workout volume. Raw Health records are not sent to our text service. Health data is never used in advertising or analytics events. Delete saved summaries and stop recovery use in Account → Coach profile → Delete my Health data. Remove device access in Health settings. Recovery suggestions are not medical advice.
How we use it
To run Forge: sign you in, save and show your history, records and charts, and, with adaptive plans, work out your next session. When you type a workout in your own words, or ask Forge to swap an exercise, that text goes to an outside text-processing service so it can be turned into sets. For plan explanations, the exercise names and weight numbers involved go there too. Neither request includes your email address or account ID.
Who processes data for us
- Vercel hosts the website and app, and relays the text requests above to the text-processing service.
- Neon stores our database.
- Resend sends your sign-in code by email.
- Whop handles billing for existing Forge memberships and holds those payment details.
- Cloudflare receives the anonymous analytics events from the website and web app.
- Whop and Meta receive ad measurement events from the website and web app: page views, and web sign-ups with your email address. They use them to count and improve our ads. The mobile apps send them nothing.
- Trigger.dev runs our background jobs, such as recording Whop billing events and clearing expired sign-in codes.
We share data with these providers only so they can do that work for us.
Keeping and deleting your data
We keep your data while your account exists. You can delete it yourself at any time: open Forge, go to Account, choose Delete account and confirm. Deletion is immediate and cannot be undone. It removes your account, sign-in sessions, Apple and Google sign-in links and tokens, workouts and sets, measurements, your own exercises, records, programs and suggestions, and your membership records. Payment and webhook records we keep for accounting no longer link to you. Our database provider may keep short-lived backups; deleted data drops out of them as they expire.
Deleting your account does not cancel an existing Forge subscription. Billing runs on Whop. Cancel it on Whop, from the link Forge shows you in Account and again when the deletion finishes. Otherwise Whop may keep charging you.
To export your workout history first, use Export workout history in Account. You can also email forge@chadai.app to ask for a copy of your data or to have something corrected.
Children
Forge is not directed at children under 13, and we do not knowingly collect their data.
Not medical advice
Forge shares general fitness information, not medical advice. Talk to a professional before you start a new training program, and stop if something hurts.
Changes
If we change this policy we will update the date above. If a change affects how we use your data, we will tell you in the app.