Legal

Privacy Policy

In effect from 31 August 2026·Version 1.0

The short version: the free calculator sends nothing anywhere. The paid tracker stores what you type, because it has to in order to show you a trend. We do not sell any of it, and we do not run advertising trackers.

The free calculator collects nothing

Every number on the calculator is worked out in your own browser. Your weight, height, age, protein and training answers are never transmitted to us and are not stored anywhere. Close the tab and they are gone. That is why it needs no account.

The same is true of the protein one-pager — it is a static page with no inputs.

What the paid tracker stores

When you buy the tracker and create an account, we store:

Your email address — to sign you in and to contact you about your purchase. Your profile — height, age, sex at birth, starting weight, the date you started your medication, and optionally which medication. Your weekly check-ins — weight, protein intake, number of strength sessions, and optionally which week of your current dose you are on. Whether you have paid, and until when.

That is the whole list. We do not ask for your name, address, phone number, date of birth, or any identity document, and we have no way to store them.

Health data

Weight, medication and training information is health-related, and we treat it as sensitive. We ask for it because the estimate cannot be produced without it — not to build a profile of you. It is used for one purpose: showing you your own trend. It is never used for advertising, never sold, and never shared with any other person or company for their own purposes.

Who else touches your data

Supabase — hosts the database and sends your sign-in link. Data is stored in the United States. Storage Paddle.com Market Ltd — the merchant of record for your purchase. They handle the payment and hold the billing details. We never see your card number. Paddle has its own privacy policy covering what it collects. Payment Cloudflare — serves the website. Hosting

If we ever add another processor — an email tool or analytics, for example — this list is where it will appear, and the version at the top will change.

Cookies and tracking

We run no advertising trackers, no third-party analytics, and no cross-site pixels. There is no cookie banner because there is nothing to consent to.

Two things are stored in your own browser and never sent to us:

Your light or dark theme choice. Your sign-in session, if you use the tracker — the same as staying logged in anywhere else.

How long we keep it

Your account and check-ins stay until you ask us to delete them. If you ask, we delete the account and every check-in attached to it, permanently, within 30 days. Paddle keeps its own record of the transaction for as long as tax law requires — that is outside our control.

Your rights

You can, at any time, ask us to:

Send you a copy of everything we hold about you. Correct anything that is wrong. Delete your account and all of your data.

Write to hello@forgefitai.com and we will action it within 30 days. We will not ask you why.

Security

Data is protected by row-level security at the database: your rows are readable only by your own signed-in account, enforced by the database itself rather than by our code. Payment access is written only by Paddle's verified webhook and cannot be set from the browser.

No system is perfect. If we ever discover a breach affecting your data, we will email you and say what happened.

Children

ForgeFit is for adults. We do not knowingly collect anything from anyone under 18.

Contact

the operator of ForgeFit is responsible for this data. Write to hello@forgefitai.com — we reply within two working days.