Privacy Policy — Forgely

Effective date: 6 August 2026
Last updated: 7 August 2026
Product: Forgely (also referred to as Gym Mate / Gym Tracker)
Operator: Vlad Buhaescu (“we”, “us”, “our”)

This policy describes how the app handles data as built today. It is provided for App Store and portfolio use and is not a substitute for formal legal advice.

1. Overview

Forgely is a workout tracking mobile application. You can create an account, manage exercise templates, log workout sessions, and manage your profile. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using Forgely, you agree to this Privacy Policy. If you do not agree, do not use the app.

2. Information we collect

2.1 Account and authentication

When you register or sign in, we may collect:

• Display name
• Email address
• Authentication credentials or tokens provided by our identity providers

Sign-in methods currently supported or planned:

• Email and password (Firebase Authentication)
• Google Sign-In
• Sign in with Apple (when enabled for App Store compliance)

We do not receive or store your Google or Apple account passwords.

2.2 Workout and fitness data you create

We store content you enter in the app, associated with your user ID, including:

• Custom exercises (name, description, and related metadata)
• Workout templates (names, exercises, set counts)
• Completed workout sessions (exercises, sets, reps, weights, timestamps, notes as applicable)
• Profile information shown in the app (for example name and email from your account)

We do not currently collect body metrics (height, weight, age, sex) or health-sensor data from Apple Health / HealthKit. If those features are added later, this policy will be updated.

2.3 Technical and diagnostics data

Our backend providers may automatically process limited technical data needed to run the service, such as:

• Device / app identifiers used for authentication and security
• Basic diagnostics or crash-related information if enabled by the platform or Firebase tooling
• IP address and similar network metadata as processed by Google’s infrastructure

We do not intentionally collect advertising identifiers for ad targeting.

2.4 Information we do not sell

We do not sell your personal information.

3. How we use information

We use the information above to:

• Create and secure your account
• Sync your workouts, templates, and exercises across devices signed into your account
• Provide profile, logout, and account-deletion features
• Send transactional authentication messages (for example password-reset emails) via Firebase Auth
• Operate, maintain, debug, and improve the app
• Comply with law and enforce our terms

We do not use your workout data for third-party advertising.

4. Where data is stored and who processes it

Forgely uses Google Firebase services, including:

• Firebase Authentication — account sign-in and password reset
• Cloud Firestore — storage of your user-owned workout data under your user ID
• Google Sign-In — optional authentication

These providers process data on our behalf under their own terms and privacy policies:

• Google Privacy Policy
• Firebase / Google Cloud terms

Data is stored on Google’s infrastructure (location depends on your Firebase project configuration). We aim to scope Firestore access so each user can only read and write their own data (users/{uid}/…), subject to published security rules.

5. Data retention

• Account and workout data are retained while your account is active.
• If you delete your account in the app, we attempt to permanently delete your Firebase Auth user and purge user-owned Firestore data (workouts, templates, and custom exercises associated with your account). Shared/global exercise catalog content that is not user-owned may be retained.
• Residual copies may remain briefly in backups or logs maintained by our providers until those systems expire them according to their retention schedules.
• Authentication emails (for example password reset) are handled by Firebase; we do not operate a separate marketing email list for Forgely today.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, or delete personal data. In Forgely you can:

• View profile name and email in the Profile screen
• Log out
• Delete your account from Profile (may require re-authentication with password or Google)

To request help with deletion or data access, contact us using the details in §10.

If you signed in with Google or Apple, you can also revoke the app’s access in that provider’s account settings.

7. Children’s privacy

Forgely is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will take steps to delete it.

8. Security

We rely on Firebase Authentication, encrypted transport (HTTPS/TLS), and Firestore security rules to protect your data. No method of transmission or storage is 100% secure. Please use a strong password and keep your device secure.

9. International transfers

If you use the app from outside the country where Google hosts your Firebase project, your information may be processed in other countries that may have different data-protection laws. Providers such as Google may transfer and store data globally as described in their policies.

10. Contact

Operator: Vlad Buhaescu
Support: gymtrackerapp-prod.web.app/support/ (supportforgely@gmail.com)

11. Changes to this policy

We may update this Privacy Policy when the app’s data practices change (for example new sign-in providers, health metrics, or analytics). The “Last updated” date at the top will change. Continued use of the app after an update means you accept the revised policy where permitted by law.

12. App Store privacy summary (nutrition labels)

For Apple’s privacy nutrition labels, categories that typically apply to the current build include:

We do not currently use data for third-party advertising or tracking across other companies’ apps. Revisit these labels whenever you enable Analytics, Crashlytics linking, Apple Sign-In, or new profile fields.