Privacy Policy

This Privacy Policy explains how ForgeWOD (“ForgeWOD,” “we,” “us”) collects, uses, and shares personal information when you use the ForgeWOD platform (the “Service”). It applies to coaches, gym owners, athletes, and visitors to our websites.

“ForgeWOD” refers to MJ Albanna, an individual operating the ForgeWOD project as a sole proprietorship. ForgeWOD is currently in a pre-formation trial phase and intends to form a limited liability company (anticipated name: ForgeWOD, LLC). On formation, this Privacy Policy and any data-handling rights and obligations described here will be assigned to that entity as part of the business transfer described in Section 3.

1. Information We Collect

You provide directly

• Account information: name, email, role, password (stored as a hash by our auth provider), and gym affiliation.
• Athlete profile: age, gender, bodyweight, training age, level, equipment access, movement limitations, and injury history.
• Performance data: max lifts, training logs, RPE, notes, and session results.
• Coach inputs: targets, cycle plans, gym WOD schedules, and edits to AI-generated cards.
• Billing information: handled by our payment processor; we receive a customer ID, plan, and high-level status, not your full card number.

Collected automatically

• Usage data: pages viewed, features used, IP address, device type, and timestamps.
• Cookies and similar technologies required for authentication and session management.

2. How We Use Information

• To deliver, operate, and personalize the Service, including assembling AI prompts and validating generated programming.
• To improve the Service, the underlying movement library, and AI prompt quality, using de-identified or aggregated data where possible.
• To process payments and manage subscriptions.
• To send transactional messages (invites, password resets, billing notices) and, with your permission, occasional product updates.
• To prevent abuse, enforce our Terms, and comply with legal obligations.

3. How We Share Information

• Within your gym. Coaches at your gym can see athlete profiles, injury history, training logs, and programming for the athletes they coach. This is a core feature of the Service.
• Service providers. We share information with vendors that help us run the Service: cloud hosting (Vercel, Supabase), email (Resend), payment processing (Stripe), and AI inference (Anthropic). These vendors are bound by contractual confidentiality and data-protection obligations.
• Compliance and safety. We may disclose information if required by law, in response to a valid legal process, or to protect the rights, safety, or property of ForgeWOD, our users, or the public.
• Business transfers. If ForgeWOD is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will provide notice if your information becomes subject to a different privacy policy.

We do not sell personal information, and we do not allow our AI vendors to train foundation models on your Customer Data.

4. Data Retention

We retain account and Customer Data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements. You can request deletion of your account and associated data at any time via the contact below; some records may be retained in backups for a limited period before being overwritten.

5. Your Rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. To exercise any of these rights, email privacy@forgewod.com from the address associated with your account. We will respond within the time required by applicable law.

6. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, row-level security on our database, hashed passwords, and access controls scoped to gym membership. No system is perfectly secure; report suspected vulnerabilities to security@forgewod.com.

7. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

8. International Users

ForgeWOD operates from the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, processed in, and stored in the United States, where data-protection laws may differ from those in your country.

9. Changes

We may update this Privacy Policy from time to time. Material changes will be announced through the Service or by email and the “Effective” date above will be updated.

10. Contact

MJ Albanna, d/b/a ForgeWOD · privacy@forgewod.com