Privacy Policy
Effective & Last Updated: October 8, 2026 · Forge Athletic Performance LLC
1. Scope & Commitment to Confidentiality
Forge Athletic Performance LLC d/b/a Forge Athletic ("Forge Athletic", "we", "us") understands that health and fitness information is personal. We protect your account details, health information, movement assessments, progress photos, and wearable data with strong security safeguards.
2. Biometric, Health & Computer Vision Telemetry
Zero Public AI Training & Zero Data Commercialization Guarantee
We strictly guarantee that your personal health questionnaires (PAR-Q), resting heart rates, Apple Health / Whoop telemetry, posture mesh scans, video telestrator recordings, and progress photos are never sold, rented, or commercialized to third-party data brokers, advertisers, or public artificial intelligence models.
AI Inference Isolation: When our platform utilizes Google Gemini models for generating S.O.A.P. session notes, periodization macrocycles, or posture mesh analysis, all API requests are transmitted over encrypted enterprise channels with zero persistent data retention for public model training.
3. Information We Collect & Store
- Account & Identity Data: Full name, verified email, telephone number, and authentication tokens.
- Biometric & Training Telemetry: Workout sets, poundage, repetition cadences, RPE exertion, 1RM milestones, and body composition measurements.
- Media & Video Streams: Form check videos, live session telestrator recordings, posture screen images, and check-in photos stored securely in private Supabase Storage buckets with Row-Level Security (RLS) enforcement.
- Payment Data: Payment details are processed directly via Stripe; Forge Athletic never stores your credit card numbers or raw billing credentials on our servers.
4. Cryptographic Security & Database Architecture
We employ military-grade AES-256 encryption at rest and TLS 1.3 encryption in transit. Our database architecture utilizes PostgreSQL Row-Level Security (RLS) policies, ensuring that your biometric records and private messages are accessible only by you and your designated lead sports scientist (Coach Gordon).
5. Data Deletion & Right to Be Forgotten
In accordance with global privacy regulations (including GDPR and CCPA), you retain complete ownership of your personal data. You may request permanent deletion of your profile, workout logs, and uploaded media at any time through your Account Settings or by contacting us in writing.
6. Children's Privacy & COPPA Compliance
Forge Athletic is strictly designed for adults and young adults aged 13 and older under adult supervision. In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly solicit, collect, or retain personal information, movement videos, or biometric telemetry from children under 13 years of age. If we discover that an individual under the age of 13 has submitted personal information, we will immediately delete the account and purge all associated records from our servers.
7. Privacy Inquiries & Data Protection Officer
For inquiries regarding your biometric data or privacy protections, contact:
Forge Athletic Performance LLC
Data Protection & Privacy Office
Email: scott@forge-athletic.app