Forge Legacy

Consumer Health Data Privacy Policy

Last updated 28 September 2026 · Forge Legacy LLC

This page is written for the Washington My Health My Data Act, Nevada's consumer health data law, and similar state laws, but it applies to everyone who uses Forge Legacy. It adds to our main Privacy Policy and does not replace it.

1 · The health data we collect

• Training: workouts, exercises, sets, weights, durations, distances and personal records, including workouts you add from Apple Health if you connect it (the type, start and end time, distance, and which app or device recorded it).
• Body: body weight and measurements you log, progress photos, and the age, sex, height, weight, activity level and goal used to calculate nutrition targets.
• Nutrition: the foods you log, your calorie and macro targets, your diet, food allergies and food dislikes.
• Coaching: what you tell Coach Holt, summaries of those conversations, and limitations you tell the app about, such as an injury to train around.
• Media for AI features: a photo of a meal or a form-check video you choose to send. For a form check on iPhone, your phone measures the positions of your joints on the device; those positions never leave your phone and are never stored. Only a few numbers worked out from them, such as reps, depth and tempo, are sent with the frames.

2 · Where it comes from

From you, when you enter it, and from your phone when you use a feature that reads it, such as location during a tracked run, and, if you connect it, from Apple Health on your phone. We do not buy health data.

3 · Why we collect it

Only to provide the features you use: keeping your training record and food log, calculating targets, building programs and meal plans that respect your allergies and limitations, and answering you through Coach Holt. We do not use it for advertising, we do not sell it, and we do not use it to build a profile about you for anyone else.

4 · Who receives it

Health data is shared only with the service providers that run the app for us, and only what each one needs:

• Supabase: stores it.
• Anthropic: receives the question, the training or nutrition details, and any photo or video frames needed to answer, when you use an AI feature. It does not receive your name or email.
• Apple: may process your voice if you use the microphone.

Apple Health is on your own phone, not a company we send data to. Sentry, the crash-reporting service named in our Privacy Policy, does not receive health data.

Food databases (USDA FoodData Central, FatSecret, Open Food Facts) receive only a search term or a barcode, never your food log. Other users see your health data only where you choose to share something, such as a post in a squad. We have no affiliates that receive it.

5 · Your rights

You can:

• confirm whether we hold your health data and see it, including a list of who has received it;
• get a copy (Account Settings → Export My Data);
• delete it (Account Settings → Delete Account, or ask us);
• withdraw your consent by stopping use of the feature, or by asking us.

Write to support@forgelegacy.app with the subject “Health data request”. We will answer within 45 days. If we decline, you can appeal by replying to our answer, and we will respond to the appeal within 45 days. If the appeal is declined, Washington residents may contact the Washington State Attorney General.

6 · Contact

Forge Legacy LLC · support@forgelegacy.app