Privacy policy

Last updated: 8 November 2026 (version 2026-11-08)

Forge is a training app made by Ashley Barton in the United Kingdom. Ashley Barton is the data controller for the information described here. Contact: barton.at@gmail.com.

This policy explains what Forge stores, where, why, and how to delete it.

Using Forge without an account

You can use Forge without signing in. Your profile, training history, saved workouts, injuries, plan and settings then stay only on your phone, with up to 7 daily backups in the app's own storage. Nothing is sent to Forge's server.

Your Forge account

If you create an account with Sign in with Apple or Google:

• What we receive from Apple or Google: an account identifier, your email address (with Sign in with Apple you can choose to hide it), and your name if you share it. We never see your Apple or Google password.
• What is saved to your account:
• your profile: goal, training days, session length, equipment and experience
• logged workouts
• saved workouts and folders (My workouts)
• your plan and AI coach plans
• injuries and how they're progressing
• HYROX race details
• your settings
• Why: so your history is never lost, you can sign in on a new phone, and the AI coach can work without your own API key.
• Where: Forge's server is run by Supabase on Amazon Web Services in London (eu-west-2). Data is encrypted in transit and at rest. Each account can only read its own data.
• Injuries and training data are health data. We only store them in your account with your explicit agreement. You give it with the switch shown before you sign in, and we record the date and the version of this policy you agreed to. You can withdraw it at any time by deleting your account.
• Your workouts in progress, Apple Health settings and readiness scores stay on your phone.

Apple Health

If you allow it, Forge reads:

• runs and running distance
• sleep, heart rate variability and resting heart rate

It also saves your finished workouts to Apple Health. On Apple Watch it reads your heart rate during a race.

Apple Health data is used only on your phone. It is never uploaded to Forge's server, never shared, and never used for advertising.

The AI coach

When you ask the AI coach to plan a week or a 6-week block, Forge sends Anthropic (the maker of Claude) the information needed to write the plan:

• your profile and equipment
• active injuries
• recent training, up to the last 3 weeks
• any note you add

When you paste a workout that Forge can't fully read, it sends the pasted text to Anthropic to read it.

• With an account, these requests go through Forge's server, which checks your monthly allowance and passes them to Anthropic. Forge's server keeps only a count of requests and their size, not what was sent or the answer.
• Anthropic processes this data under its commercial terms and data processing terms, which do not allow it to train models on it. Anthropic may process data in the United States, under the safeguards in those terms.
• If you use your own Claude API key instead of an account, requests go straight from your phone to Anthropic under your own agreement with Anthropic.

Who we share data with

We share data only with the services that run Forge:

• Supabase: hosting and database (London).
• Anthropic: the AI coach, only when you use it.
• Apple and Google: sign-in only.

We don't sell data, show adverts, or use analytics or tracking tools.

Lawful bases (UK GDPR)

• Running your account and syncing your data: contract.
• Health information (injuries, training, recovery): explicit consent.
• Keeping the service secure and enforcing fair-use limits on the AI coach: legitimate interests.

How long we keep it

• While you have an account: we keep your data until you delete it.
• When you delete your account: everything stored with it is deleted from the server straight away. Server backups that may contain it are overwritten within 7 days.
• Server security logs: these may include IP addresses and are kept by Supabase for a short period.

Your rights

You can:

• See and export your data: More › Backup & import exports everything as a file.
• Correct it: edit it in the app.
• Delete it: More › Account › Delete account deletes your account and everything in it. More › Reset all data clears this phone.
• Withdraw consent: delete your account.
• Ask a question or make a request: email barton.at@gmail.com. We'll reply within one month.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Children

Forge isn't intended for children under 13.

Changes

If this policy changes in a way that affects what we do with your data, the app will ask you to agree again.