ForgeWOD

ForgeWOD · Legal

Privacy Policy

Effective October 12, 2026 · Version 2026-10-12

This Privacy Policy explains how ForgeWOD (“ForgeWOD,” “we,” “us”) collects, uses, and shares personal information when you use the ForgeWOD platform (the “Service”). It applies to coaches, gym owners, athletes, and visitors to our websites.

“ForgeWOD” refers to MJ Albanna, an individual operating the ForgeWOD project as a sole proprietorship. ForgeWOD is currently in a pre-formation trial phase and intends to form a limited liability company (anticipated name: ForgeWOD, LLC). On formation, this Privacy Policy and any data-handling rights and obligations described here will be assigned to that entity as part of the business transfer described in Section 4.

1. Research and Development Preview

ForgeWOD is an early research and development preview. The Service is under active development, which affects how we handle your information:

  • We use it to improve the product. Usage data, feedback, error reports, and the performance of generated programming are reviewed to evaluate and improve the Service, the movement library, and the quality of our AI prompts. Wherever we can answer the question with de-identified or aggregated data, we do.
  • Preview data may be reset. Features may change or be withdrawn and the Service may be interrupted, so data you submit during the preview may be altered or deleted in the course of development. Do not rely on the Service as your only record of your training.
  • We still do not sell your data, and we still do not let AI vendors train on it. The preview label does not loosen the commitments in Section 4 below.

Calling the Service a research preview does not make your use of it human-subjects research. We do not conduct studies on you, and no institutional review board oversees your use of the Service.

2. Information We Collect

You provide directly

  • Account information: name, email, role, password (stored as a hash by our auth provider), and gym affiliation.
  • Athlete profile: age, gender, bodyweight, training age, level, equipment access, and movement limitations (a body area, how it affects training, a severity, and movements to avoid or substitute, each chosen from a fixed list), including ones you have marked as healed.
  • Performance data: max lifts, training logs, RPE, notes, and session results.
  • Coach inputs: targets, cycle plans, gym WOD schedules, and edits to AI-generated cards.
  • Billing information: handled by our payment processor; we receive a customer ID, plan, and high-level status, not your full card number.

Medical information we do not collect

We do not ask for, and the Service is designed not to accept, medical information such as diagnoses, medications, test results, treatment notes, or medical records. Please leave it out of free-text fields such as notes and comments too. ForgeWOD is not a healthcare provider or a business associate of one, so the U.S. Health Insurance Portability and Accountability Act (HIPAA) does not govern the information you give us; we keep medical information out of the Service instead.

We still treat movement limitations as sensitive. We use them only to build and safety-check your programming, which includes sending them to our AI inference provider for that purpose. We never sell them or use them for advertising.

What we send to our AI provider, and only with your permission

ForgeWOD builds athlete programming with an AI model from Anthropic. Before any of your information is sent, we ask for your explicit permission, and we send nothing until you give it. You can turn it off at any time in Profile → AI data permission; without it we can't generate programming for you. When it's on, each time programming is generated for you — by you, your coach, or a scheduled run — we send:

  • Your name
  • Age
  • Gender
  • Bodyweight (including from Apple Health, if you connect it)
  • Training age
  • Level
  • Equipment access
  • Max session length
  • Movement limitations — area, how it affects training, severity, and movements to avoid or substitute
  • Max lifts and when you tested them
  • Recent training — dates, session type, RPE and summaries (not your private notes)
  • Program track (for example CrossFit or bodybuilding)
  • Training targets — cycle phase, focus, sessions per week, intensity, instructions and upcoming events
  • Notes your coach adds when generating your programming
  • Your coach's tone note for you
  • Examples of how your coach programs

We do not send your email address, your private session notes or comments, or free-text notes on movement limitations. Anthropic processes this only to produce your programming and does not use it to train its models.

In the iPhone app: Apple Health and notifications

  • Apple Health (optional). If you connect Apple Health, ForgeWOD saves the sessions you log as workouts in Health and reads your latest bodyweight from Health. It reads nothing else. A bodyweight from Health becomes your profile bodyweight: your coach, if you have one, can see it, and with your AI permission it is sent to Anthropic as part of your programming, as listed above. We keep only that bodyweight, when it was measured, and that it came from Health. We never use data from Apple Health for advertising, marketing, or data mining, never sell it, and never let it be used to train AI models. You can turn off ForgeWOD's access at any time in the Health app.
  • Notifications (optional). If you allow notifications, we store a device token from Apple so we can send your programming notices to your phone through the Apple Push Notification service. Notifications carry your programming notice only — never your movement limitations or other health details, and never marketing. Without notifications, those notices go by email.
  • Offline copy. The app keeps a copy of today's session on your phone so you can see it without a connection. It is removed when you sign out.

Collected automatically

  • Usage data: pages viewed, features used, IP address, device type, and timestamps.
  • Cookies and similar technologies required for authentication and session management.

3. How We Use Information

  • To deliver, operate, and personalize the Service, including assembling AI prompts and validating generated programming.
  • To improve the Service, the underlying movement library, and AI prompt quality, using de-identified or aggregated data where possible.
  • To process payments and manage subscriptions.
  • To send transactional messages (invites, password resets, billing notices, and your programming notices by email or phone notification) and, with your permission, occasional product updates.
  • To prevent abuse, enforce our Terms, and comply with legal obligations.

4. How We Share Information

  • Within your gym. Coaches at your gym can see athlete profiles, movement limitations, training logs, and programming for the athletes they coach. This is a core feature of the Service.
  • Service providers. We share information with vendors that help us run the Service: cloud hosting (Vercel, Supabase), email (Resend), phone notifications (the Apple Push Notification service), payment processing (Stripe), and AI inference (Anthropic). These vendors are bound by contractual confidentiality and data-protection obligations.
  • Compliance and safety. We may disclose information if required by law, in response to a valid legal process, or to protect the rights, safety, or property of ForgeWOD, our users, or the public.
  • Business transfers. If ForgeWOD is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will provide notice if your information becomes subject to a different privacy policy.

We do not sell personal information, and we do not allow our AI vendors to train foundation models on your Customer Data.

5. Data Retention

We retain account and Customer Data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements. Athletes can delete their account at any time from Profile → Settings → Delete account, in the app or on the web. Deletion is immediate and permanent: your profile, movement limitations, max lifts, programming, logged sessions, results and comments are removed, any membership billed through ForgeWOD is cancelled, and you are signed out everywhere. Notification device tokens are deleted when you sign out of the app or delete your account. Workouts already saved to Apple Health stay in your Health app until you delete them there. Coaches, and anyone who prefers it, can request deletion via the contact below. We keep records of past payment events from our payment processor for accounting, and some records may be retained in backups for a limited period before being overwritten.

6. Your Rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. To exercise any of these rights, email privacy@forgewod.app from the address associated with your account. We will respond within the time required by applicable law.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, row-level security on our database, hashed passwords, and access controls scoped to gym membership. No system is perfectly secure; report suspected vulnerabilities to security@forgewod.app.

8. Children

ForgeWOD is for adults. The Service is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If we learn an account belongs to someone under 18, we block it and delete it on request; if you believe a minor has provided us with personal information, contact us and we will delete it.

9. International Users

ForgeWOD operates from the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, processed in, and stored in the United States, where data-protection laws may differ from those in your country.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be announced through the Service or by email and the “Effective” date above will be updated.

11. Contact

MJ Albanna, d/b/a ForgeWOD · privacy@forgewod.app