FitForge Privacy Policy

Summary

• FitForge is a fitness, sleep and nutrition tracker with an AI coach. It is not a medical device.
• Most of your data lives on your phone. When you sign in, health data, logs and a backup are also stored on our servers so the coach, briefings and restore work.
• AI features (coach, meal analysis, daily brief) only run after you allow them, and send an AI provider only what the request needs. Your name, email and account IDs are never sent, and lab report photos never leave your phone.
• We do not sell your data, do not show ads, and do not use analytics, advertising or crash-reporting SDKs.
• You can delete your server data, and optionally your account, from Settings → Your data → Delete my data, or by email (see Delete your account and data).

Data you enter in the app

• Profile: sex, age, height, weight, activity level, goals and calorie / macro targets.
• Food preferences: allergies, intolerances, diet pattern, religious restrictions and cuisines, if you add them.
• Logs: meals (text, photos, barcodes, ingredients, macros and micronutrients), water, weight, fasting, workouts, supplements, peptide protocols and side-effect notes, recipes and saved foods.
• Blood tests: markers you enter or photograph (name, value, unit, reference range, test date).
• Coach chat: the messages and images you send to the coach. Chat history is stored on your phone only.
• Voice input: voice meal logging uses your phone's built-in speech recognition to turn speech into text. FitForge never uploads raw audio; your phone's speech service (Google or Apple) may process the audio under its own settings and policy.

Health Connect and Apple Health

With your permission, FitForge reads health and fitness data from Google Health Connect (Android) or Apple Health (iOS). You choose what to share in the system permission screen and can change it at any time.

• Activity: steps, distance, floors climbed, exercise sessions and workouts, exercise time (iOS), active and total calories burned, basal metabolic rate / basal energy.
• Vitals: heart rate, resting heart rate, heart rate variability, blood oxygen (SpO₂), respiratory rate, and skin temperature on Android devices that support it.
• Sleep: sleep sessions and stages.
• Body: weight, body fat, height, body mass index, lean body mass.
• Nutrition: hydration.
• History (Android 14 and later): if you allow it, data older than 30 days, so trends and baselines can start from up to one year of history.

What we write back: meals you log (as nutrition records) and weights you save. FitForge does not read health data in the background; it syncs while you use the app.

How it is used: to show your Fitness, Sleep and Nutrition views, to compute readiness, trends, briefings and suggestions, and to give the coach context. When you are signed in and uploads are on, daily metrics, sleep sessions, workouts and daily nutrition totals are stored on our servers (including the name of the app that recorded each value) so these features work across sessions and devices.

Health Connect Limited Use. FitForge's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. Health Connect data is used only to provide and improve the user-facing fitness, sleep, nutrition and coaching features you see in the app. It is not used for advertising, not sold, not used to determine credit-worthiness or for lending, and not transferred to anyone except as needed to provide those features (our hosting and AI providers, below), to comply with law, or as part of a merger or acquisition with notice to you. People do not read it except with your consent, for security purposes, or to comply with law. Data from Apple Health is handled under the same rules and is never used for advertising or sold.

Calendar (optional)

If you turn on calendar planning, FitForge reads today's and tomorrow's events from the calendars you select, read-only. Event titles stay on your phone: they are shown to you and used on the device to guess a category. To time your Today suggestions, only each busy block's start and end time, its category (meeting, workout, meal, travel or other) and whether it is all-day are sent to our servers. Events marked as free are skipped. Calendar data is not included in coach chat or your backup.

Camera, photos, microphone and notifications

• Camera and photo library: to photograph or pick meals, scan barcodes, and photograph lab reports. Meal photos you submit are sent for analysis without location or camera details (they are removed on your phone first) and are also saved in the app on your phone. Lab report photos are read on your phone and never uploaded: you choose which results to share, as text.
• Microphone: for voice meal input. Speech is recognised on your phone when it supports offline recognition; otherwise your phone's own speech service (Google on Android, Apple on iOS) is used. FitForge only receives the text.
• Notifications: reminders (meals, water, fasting, weight, peptides, daily report) are scheduled locally on your phone. FitForge does not use push notifications or collect device push tokens.

Sign-in

• Google or Apple: we receive the provider's account identifier, and your email address and name if the provider shares them (Apple lets you hide your email).
• Solana wallet: we receive your public wallet address and a signed message proving you control it. FitForge never has access to your private keys or funds.

Server features (backup, briefings, synced history, data deletion) require signing in.

What is sent to our servers and AI providers

• Meal analysis: meal text and photos, to estimate calories, macros and micronutrients.
• Coach chat: your message, recent conversation, any image you attach, and the context the coach needs to answer: profile, goals, food preferences, today's meals, water, health summary (steps, calories, sleep, heart rate, HRV, SpO₂), workouts, supplements, peptide protocols and notes, weight history, latest blood-test markers and today's briefing.
• Blood tests: a lab report photo is read on your phone. Lines with names, dates of birth, ID numbers, addresses, phone numbers, emails, doctors or clinics are left out, and you choose which results are sent, as text. The results are analysed by AI and the markers are stored with your account.
• Health sync (signed in): daily metrics, sleep sessions, workouts and daily nutrition totals, as described above.
• Suggestions and briefings: your profile, today's intake and activity, recent history, fasting state, supplements, labs and calendar busy times, plus your feedback on suggestions.
• Food lookups: barcodes and food search text are sent to Open Food Facts directly from the app, without any account identifier. Our server may also look a product up in Open Food Facts, the USDA FoodData Central database, or a web search run by our AI provider; only the product name or search text is sent, never your identity or health data.
• Cloud backup (Google or Apple sign-in): a snapshot of your profile, goals, meals, weight, water, fasting, workouts, supplements, peptides, recipes and blood tests, so you can restore it on a new phone. Photos and chat history are not included.
• Technical data: app version, build and platform with each request, and your IP address, which is used for rate limiting and abuse prevention.

Your consent. FitForge asks before anything is sent to an AI provider and names the providers in use (Settings → AI & privacy, which always shows the current list). You can turn AI features off there at any time; the rest of the app keeps working and your data stays on your phone.

AI providers. AI features are currently processed by xAI (Grok), in the United States. xAI states that it keeps API requests for up to 30 days to check for abuse and does not use them to train its models. If we change provider (for example to DeepSeek models), we will only use a hosting provider that does not keep requests or train on them, update this list and the in-app list first, and ask for your consent again. A research search used by the coach sends only the search question to an embedding service.

Never sent to an AI provider: your name, email address, account or wallet identifiers, lab report photos, and the location or camera details of photos. Before anything is sent, email addresses, phone numbers and long ID numbers are removed from what you type, and your own name and email are replaced on your phone.

Uploads can be paused. After you delete your data, uploads stay paused until you turn them back on or sign in again.

Payments

• Solana: premium can be paid from your wallet. We store your wallet address, plan, amount, payment status and transaction signature. Swaps are quoted through Jupiter, which receives your public wallet address. Transactions are public on the Solana blockchain and cannot be deleted by us.
• App Store and Google Play: if you subscribe through a store, the store processes the payment; we only receive and keep the purchase and subscription status needed to unlock premium.
• We also keep trial dates and free-tier usage counts to enforce limits.

Who we share data with

We do not sell or rent personal data, and we do not share it for advertising. We share it only with service providers that run FitForge for us: our hosting and database providers (Vercel and a managed PostgreSQL provider), the AI providers above, Open Food Facts and USDA (product queries only), Google and Apple (to verify sign-in), and Solana RPC and Jupiter (for wallet payments). We may disclose data if required by law.

How long we keep data

• On your phone: until you delete it in the app, clear app data, or uninstall.
• Synced health records (daily metrics, sleep, workouts, daily nutrition, suggestions and feedback): up to about 400 days, then deleted automatically. Derived daily features are kept up to 120 days and sync logs up to 30 days.
• Backup, blood-test markers, insights and saved foods: until you delete your data or account.
• Payment, subscription and trial records: kept after deletion where needed for accounting, legal obligations and fraud prevention. When you delete your account they are unlinked from it and your sign-in email and name are removed.

Deleting your data

In the app, open Settings → Your data → Delete my data (shown when you are signed in). This permanently deletes the health data, logs, labs, insights, suggestions, saved foods and cloud backup we store, for every way you sign in. You can also tick Also delete my account and Also clear data on this phone. If you no longer have the app, see Delete your account and data.

You can also revoke FitForge's access at any time in Health Connect, Apple Health, or your phone's calendar, camera and microphone settings.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to or restrict its use. Email us to make a request; we may need to confirm that you control the account first. You can withdraw your consent to AI processing at any time in Settings → AI & privacy; this does not affect processing that already happened.

Security

Data is sent over HTTPS. Sign-in tokens are kept in your phone's secure storage, and Android system backup of app data is disabled. No system is perfectly secure, but we limit access to what is needed to run the service.

Children

FitForge is not directed to children under 13, and the profile accepts ages 13 and over only. If you believe a child has given us personal data, email us and we will delete it.

Medical disclaimer

FitForge provides general fitness and nutrition information. It does not provide medical advice, diagnosis or treatment. Talk to a qualified professional before changing diet, medication, supplements or peptides.

Changes to this policy

We will update this page when FitForge's data practices change and revise the "Last updated" date. Material changes will be highlighted in the app or release notes.

Contact

For privacy questions or requests, email oplopuser@protonmail.com. See also the Support page.