Privacy Policy

Forge Fitness is an iPhone gym companion: you build a routine, log sets, track food and body weight, and watch charts. This policy explains what data the app handles. The short version: Forge has no account and no server, and twofox collects nothing. The only network requests it ever makes are two optional lookups, described below.

1. Who we are

Forge Fitness is made and published by Nischal Khadka, an independent developer, under the name twofox. For anything about this policy, write to support@twofox.app.

2. What we collect

Nothing. The app does not ask you to create an account, does not collect your name, email address or contact details, does not record how you use it, and contains no analytics, crash-reporting or advertising software from anyone. It has no code that talks to a server of ours.

3. What stays on your device

• Your profile: the name you typed at onboarding, unit system, starting and goal weight, weekly workout target, calorie and protein goals, and your reminder setting.
• Training: plans, days, planned exercises, logged workouts, every set, rest timers and notes.
• Nutrition: the foods you log with their calories and macros, and your body-weight history.
• The exercise library, bundled and, if you sync it, extended from wger.

This data is kept in the app's own on-device database and shared with the Home Screen widgets through a private container that only Forge can read. It is included in your iPhone backup like any other app data. Deleting the app deletes all of it from the device.

4. Optional network lookups

Both of these are free, keyless, community-run services, and both are optional. The app works fully offline without them; you can log every exercise and food by hand.

• wger (wger.de), the exercise catalog. When you tap Sync online catalog in Settings, the app downloads the public exercise list, and when an exercise has demonstration images they are loaded from wger's servers as you view them. Requests contain the catalog page or image being fetched, nothing about you.
• Open Food Facts (openfoodfacts.org), the food database. A search request contains the text you typed; a barcode lookup contains the barcode you scanned.

Like any web request, these carry your IP address to the service that answers them, and are subject to those services' own privacy policies. Neither service receives your training data, your identity, or a device identifier, and nothing is written back to them.

5. Camera

The barcode scanner uses the camera, so iOS asks for camera permission the first time you open it. Scanning runs entirely on your device using Apple's built-in barcode recognition. Frames are never saved and never leave the camera; only the decoded number is used, for the food lookup above.

6. Notifications

The daily Time to train reminder is a local notification scheduled on your device at the time you choose. It is off by default, and notification permission is requested only when you turn it on. Nothing is sent from a server.

7. Widgets

Home Screen widgets read the same on-device store as the app and show your week and next workout. Nothing is sent anywhere.

8. Third parties

Apart from the two lookups above, there are none. No third-party SDKs, no advertising networks, no analytics providers. We do not sell, rent or share data with anyone; there is no data to share.

9. Exporting and deleting your data

• Export: Settings → Export writes your workouts as a CSV file you can save or share.
• Erase: Settings → Reset all data erases every plan, workout, food entry and weigh-in and returns the app to onboarding.
• Delete the app: iOS removes the app's private storage, including the widgets' copy.

10. Children

Forge collects no personal information from anyone, including children. It is a training log for adults and older teens who lift; see the terms for the health disclaimer.

11. Your rights

Privacy laws such as the GDPR, the CCPA and the Maryland Online Data Privacy Act give you rights to access, correct, delete or export personal data a company holds about you. twofox holds no personal data about Forge users, so every one of those rights is satisfied by the controls on your own device described above. If you believe we have got any of this wrong, write to us and we will answer.

12. Not medical data handling

Forge is a training log, not a medical device, and it does not transmit health information anywhere. It does not read from or write to Apple Health. See the terms for what that means in practice.

13. Changes to this policy

If this policy changes, the new version appears here with a new date. We will never quietly start collecting data under an old policy.

14. Contact