1. Introduction
Welcome to FORGE, a fitness, workout tracking, nutrition management and gym community application operated by Fieldstack Technologies, India.
In this Privacy Policy, “FORGE”, “the Application”, “we”, “us” and “our” refer to the FORGE mobile application and the services operated by Fieldstack Technologies.
FORGE provides separate experiences for gym members and trainers. Its features include workout tracking, nutrition and hydration logging, fitness information, gym membership linking, trainer-managed records, gym announcements, leaderboards and other gym community features.
We respect your privacy and are committed to handling your personal information responsibly. This Privacy Policy explains what information may be collected, how it is used, where it is stored, who may receive it, how long it may be retained and how you can request its deletion.
By creating an account or using FORGE, you acknowledge that you have been provided with this Privacy Policy. Where consent is required by applicable law, we will seek that consent through the appropriate process.
2. Who Operates FORGE?
FORGE is operated by:
Fieldstack Technologies is registered as an MSME in India.
This Privacy Policy applies to personal information processed through the FORGE member application, trainer application and supporting backend services.
It does not automatically govern independent activities of a physical gym, such as its offline membership agreements, CCTV systems, payment records, attendance registers or other independently maintained records. Those activities may be subject to the gym's own privacy practices.
3. Information We Collect
The information processed by FORGE depends on whether you use the application as a gym member or a trainer and which features you choose to use.
3.1 Information Collected from Gym Members
A. Account and Authentication Information
When you register or sign in using Google, we may process:
- Full name.
- Email address.
- Google account identifier.
- Google profile photograph URL, where provided by Google.
- Authentication identifiers and session information required to manage your account.
Google Sign-In is used to authenticate your identity.
B. Gym Membership Information
When you link your account to a gym using the gym-issued identifier, we may process:
- Gym-issued member ID.
- Gym identifier.
- Membership or subscription status.
- Membership validity and expiration information.
- Information required to associate your application account with your gym.
Your Google account authenticates you, while your gym-issued ID identifies your membership and connects you to the appropriate gym.
C. Physical and Fitness Profile Information
During onboarding and profile updates, FORGE may collect:
- Age.
- Gender.
- Body weight.
- Height.
- Body Mass Index (BMI), calculated using your height and weight.
- Physical activity level.
- Fitness goals.
- Preferred workout intensity.
- Dietary preferences.
This information is used to provide fitness-related calculations, personalised targets and relevant gym features.
D. Avatar Information
Members can select from pre-designed illustrated avatars provided within the application. Members are not required to upload personal profile photographs to use the member interface.
E. Workout and Exercise Information
FORGE allows members to record personal fitness activities, including:
- Workout routines.
- Exercises performed.
- Sets and repetitions.
- Weights lifted.
- Workout duration.
- Workout dates and timestamps.
- Total workout volume.
- Custom workout routines.
Local Storage Architecture: According to the current application architecture, these workout records are stored locally on the user's device rather than uploaded to FORGE's cloud database.
F. Nutrition and Hydration Information
Depending on the features used, the application may process:
- Consumed meals and food items.
- Custom food entries.
- Calorie intake.
- Protein, carbohydrate and fat quantities.
- Daily hydration targets.
- Water consumption records.
Local Storage Architecture: According to the current application architecture, these records are stored locally on the user's device and are not uploaded to FORGE's cloud database.
3.2 Information Collected from Trainers
Trainers use additional features that allow them to manage gym-related activities.
A. Trainer Identity and Profile Information
We may process:
- Trainer's full name.
- Trainer or staff role.
- Trainer profile photograph.
- Information needed to associate the trainer with the relevant gym.
B. Certified Gym Records
When a trainer submits a gym record, the information may include:
- Member's name.
- Exercise name.
- Weight lifted.
- Record cover photograph.
- Optional action photograph.
- Information necessary to display and verify the achievement.
C. Gym Announcements
When a trainer publishes an announcement, we may process:
- Announcement subject.
- Announcement description.
- Optional banner photograph.
- Trainer name and profile photograph.
- Information necessary to publish the announcement to the relevant gym community.
3.3 Information Retrieved from Health Platforms
FORGE may allow users to connect supported device health platforms, including:
- Google Health Connect on Android.
- Apple HealthKit on iOS.
Depending on the permissions granted and the platform's availability, the application may access:
- Daily steps.
- Active calories burned.
- Total calories burned.
- Distance.
- External workout information.
- Heart rate readings.
- Sleep duration and sleep stages.
- Weight records.
- Blood pressure.
- Blood oxygen saturation (SpO2).
- Body temperature.
These permissions are optional and depend on the user's choice.
According to the current application architecture, health information retrieved through these integrations is stored locally in encrypted application storage. It is not intended to be uploaded to FORGE's cloud servers or made available to gym trainers or other members. You can manage or revoke the relevant permissions through your device's health platform settings.
4. Device Permissions and Photo Access
FORGE requests or uses device permissions and system services only where needed for application features.
4.1 Internet Access
Internet access is required for authentication, account-related operations, gym membership verification, profile synchronization and other online features.
4.2 Network Connectivity
On Android, network connectivity information may be used to determine whether the application is online or offline and to support its caching functionality.
4.3 Physical Activity Recognition
On supported Android devices, activity recognition may be used for step-counting and movement-related features.
4.4 Health Platform Permissions
Users may separately grant access to supported health information through Google Health Connect or Apple HealthKit. The application uses the information for its health and fitness features and does not intend to use it for advertising.
4.5 Photo Selection and Uploads
Photo uploads are available through trainer-side features, including:
- Trainer profile photographs.
- Gym announcement banner photographs.
- Certified gym record photographs.
Members do not need to upload personal photographs for their member profiles. When a trainer chooses to upload a photograph, the application provides a photo-selection experience through the device's supported photo picker. The trainer selects the photograph or photographs they wish to upload.
The application is intended to access only the photographs explicitly selected by the trainer, rather than requiring unrestricted access to the entire photo library. Selected photographs may be uploaded to FORGE's supporting cloud storage services and displayed within the relevant gym community, depending on the feature.
5. How We Use Your Information
We use the information described in this Privacy Policy for purposes including:
- Creating and managing user accounts.
- Authenticating users through Google Sign-In and other supported authentication options.
- Linking members and trainers to their respective gyms.
- Verifying gym membership status and validity.
- Maintaining member and trainer profiles.
- Calculating fitness-related targets and metrics.
- Providing workout, nutrition and hydration features.
- Displaying health and fitness information when users enable supported integrations.
- Allowing trainers to view relevant information about their assigned members.
- Publishing certified gym records and leaderboards.
- Publishing gym announcements and related photographs.
- Managing gym community features, including song requests and events.
- Maintaining application security and preventing unauthorised access.
- Responding to support, privacy and account deletion requests.
We do not intend to use personal health information for targeted advertising or unrelated commercial profiling.
6. How Information Is Stored
FORGE uses a combination of local device storage and cloud-based services.
6.1 Local Device Storage
Certain information is stored locally on your device, including:
- User profile information cached for application functionality.
- Workout logs.
- Nutrition and meal logs.
- Hydration records.
- Health information retrieved from supported health platforms.
- Application cache information.
The application architecture uses encrypted local storage for these records. Workout, nutrition and health records described in this section are intended to remain on the user's device and are not uploaded to the FORGE cloud database.
6.2 Cloud Storage and Databases
Certain account, membership and gym operational information is stored using cloud infrastructure, including:
The exact storage location and retention of individual records may depend on the service and feature involved.
7. Who Can See Your Information?
FORGE separates personal member information, trainer information and gym community information.
7.1 Information Visible to Members Themselves
Members can access their own account and profile information and use the relevant workout, nutrition and health features. Personal workout logs, meal details, hydration records and health platform information are not intended to be visible to trainers or other members.
7.2 Information Visible to Assigned Trainers
A trainer assigned to a member may be able to view relevant information such as:
- Member's full name.
- Gym-issued member ID.
- Age and gender.
- Height and weight.
- BMI.
- Fitness goal.
- Workout intensity preference.
- Dietary preference.
- Activity level.
- Profile completion information.
Trainers are not intended to have access to a member's Google email address, personal workout history, individual meal records, hydration logs or health platform readings.
7.3 Information Visible Within the Gym Community
Certain information is intended to be shared with other members of the same gym. This may include:
- Certified gym records.
- Record-holder names.
- Exercises and weights lifted.
- Photographs submitted as record verification.
- Trainer announcements.
- Announcement banner photographs.
- Trainer names and profile photographs.
- Gym events.
- Song requests and associated YouTube links.
By using a feature that publishes information to the gym community, you understand that the information submitted through that feature may be visible to other members linked to the same gym. Do not submit photographs or information that you do not want displayed to the relevant gym community.
8. Sharing Information with Third-Party Service Providers
FORGE does not sell personal information to third parties. We use external service providers to operate and maintain the application. Information may be shared with them where necessary to provide the relevant functionality.
9. Health Information and Additional Privacy Commitments
Health information is particularly personal and should be handled carefully. FORGE uses supported health platform integrations to provide fitness-related functionality.
We commit to the following principles:
- Health information is used for relevant fitness and wellness features.
- Health information is not intended for targeted advertising.
- Health information is not sold to data brokers or advertising platforms.
- Health information retrieved from supported device health platforms is intended to remain in local encrypted storage.
- Health information is not intended to be made available to trainers or other gym members.
- Users can manage the relevant health permissions through their device settings.
We do not use health platform information to make decisions about credit, insurance eligibility or employment.
10. Payments and Financial Information
FORGE does not currently process gym membership payments, credit card payments, debit card payments or bank transfers through the application.
Gym membership payments, renewals and related financial arrangements are handled directly between the member and the physical gym. The application may display membership status and validity information received from the gym's supporting systems.
FORGE does not intend to collect bank account or payment card information for these membership transactions.
11. Location Information
FORGE does not intentionally collect or continuously track precise GPS location information as part of its described application functionality.
Distance and activity information displayed through fitness features may be obtained from on-device sensors or supported health platforms. If a future feature requires location access, the relevant purpose and permission will be disclosed before that information is collected.
12. Cookies, Local Storage and Similar Technologies
FORGE is primarily a native mobile application. It uses local storage technologies to maintain application information, offline records and cached data.
The application architecture uses Hive storage and encrypted local databases for supported local information. Secure storage facilities provided by the operating system are used to protect relevant encryption keys and authentication-related information.
The application does not rely on advertising cookies or third-party advertising trackers as part of its described functionality.
13. Data Security
Fieldstack Technologies takes reasonable technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.
The application architecture includes safeguards such as:
- HTTPS/TLS network communication.
- Encrypted local application storage.
- Secure operating-system storage for relevant cryptographic keys.
- Authentication and session management.
- Access controls for relevant application data.
- Backend authorisation and database security controls.
No internet-based service or electronic storage system can be guaranteed to be completely secure. Users should protect their Google accounts, device passwords and other authentication credentials and should not share them with others.
14. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to applicable legal requirements. Different categories of information may have different retention periods:
15. Account Deletion and Personal Data Erasure
You may request deletion of your FORGE account and associated personal information. We provide a web-based account deletion request process so that users can submit requests even if they have uninstalled the application or cannot access their account.
15.1 How to Request Account Deletion
You can submit a request through the Account Deletion Form available on the dedicated FORGE website. The form requests the following information:
- Full name.
- Registered Google account email address.
- Gym-issued ID.
- User type (Member or Trainer).
- Gym name.
- Reason for deletion (optional).
- Confirmation that you wish to request account deletion.
You do not need to be logged into the FORGE application to submit the web-based request. You may also contact our Grievance Officer using the contact details in Section 20 if you need assistance.
15.2 How Deletion Requests Are Processed
After receiving a request:
- We review the submitted information to identify the relevant FORGE account.
- We may contact you if additional information is required to verify the request.
- Where the account is linked to a gym, we coordinate with the relevant gym administration where necessary.
- We follow up on the request to ensure that the required deletion actions are completed.
- We process the deletion of personal information held by or on behalf of Fieldstack Technologies, subject to applicable legal requirements and legitimate retention exceptions.
Submitting a deletion request does not itself mean that the account or all associated information has already been deleted. We will treat the request as an ongoing process and seek to complete the applicable deletion actions rather than treating forwarding the request to a gym as completion.
15.3 Information That May Be Deleted
Depending on the account type and the information associated with it, deletion may include:
- Account authentication information.
- Member or trainer profile information.
- Gym membership linkage information maintained by FORGE.
- Associated account records.
- Song requests and other account-linked information where applicable.
- Trainer profile photographs and uploaded media where applicable.
- Other personal information maintained by FORGE that is no longer required.
Local information stored on your device may also need to be removed through the application's deletion functionality or by removing the application and its local data.
15.4 Information That May Need to Be Retained
Some information may need to be retained where required by applicable law or for a legitimate and documented purpose. For example, a physical gym may independently maintain billing, attendance, membership or other records under its own legal and contractual obligations. Information independently maintained by a gym may be subject to that gym's own retention and deletion procedures.
Where Fieldstack Technologies retains any information after a deletion request, the retention will be limited to the applicable purpose and legal basis.
15.5 Completion of Deletion
We aim to complete valid deletion requests as soon as reasonably practicable and within the time required by applicable law. If a request cannot be completed immediately, or if any information must be retained, we will explain the relevant reason where appropriate.
16. Your Privacy Rights
Depending on applicable law and your location, you may have rights concerning your personal information. These rights may include:
- Requesting information about the personal data processed by us.
- Requesting correction of inaccurate or incomplete personal information.
- Requesting deletion of personal information where applicable.
- Withdrawing consent where processing is based on consent.
- Raising a grievance regarding our data handling practices.
- Requesting information about relevant third-party service providers.
- Exercising other rights available under applicable privacy legislation.
16.1 Rights Under Indian Privacy Law
Fieldstack Technologies aims to handle personal information in accordance with applicable Indian data protection requirements, including the Digital Personal Data Protection Act, 2023 and the rules and provisions applicable to the relevant processing. You may contact our Grievance Officer to raise a privacy concern, request information, seek correction or request erasure of your personal information.
16.2 Rights in Other Jurisdictions
If you access FORGE from another jurisdiction, additional privacy rights may apply depending on the laws governing your information. We will consider valid requests in accordance with the applicable legal requirements.
17. Children's Privacy
FORGE does not currently impose a general age restriction through an age-based access rule. However, users under the age of 18 may be subject to additional legal protections concerning the processing of their personal information.
Where applicable law requires verifiable parental or guardian consent before processing a child's personal information, such consent must be obtained before the relevant processing takes place. We do not intend to use children's personal information for targeted advertising or prohibited behavioural monitoring.
If you believe that a child's personal information has been processed without the consent or safeguards required by applicable law, please contact our Grievance Officer. We may take appropriate steps to restrict or delete information where required by law.
18. International Data Transfers
FORGE uses third-party cloud infrastructure providers to operate its application and supporting services.
The current architecture identifies Supabase database infrastructure in the AWS Mumbai region (“ap-south-1”) and also uses Railway and Cloudflare services. Depending on the provider, service configuration and user's location, information may be processed or transferred in jurisdictions outside the user's location.
Such processing is subject to the relevant service providers' infrastructure arrangements and applicable data protection requirements.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in application functionality, data processing practices, third-party services or applicable legal requirements.
When changes are made, we will update the “Last Updated” date displayed at the beginning of this document. Where required by applicable law, we will provide additional notice or obtain renewed consent before implementing material changes. We encourage users to review this page periodically.
20. Contact Information and Grievance Redressal
If you have questions, concerns, complaints or requests relating to this Privacy Policy or the processing of your personal information, you may contact us using the following details.
For account deletion, please use the Account Deletion Form available on the dedicated FORGE website. You may also contact the Grievance Officer if you need assistance with the process.
We will review privacy-related enquiries and grievances and respond in accordance with applicable legal requirements.