Privacy policy

Last update: June 2026

This privacy policy is governed by French law and the EU GDPR. The English version is provided for information only.

1. Data controller

2. Data collected

We collect only the data needed to run the service: identifiers (email, name, avatar), training data (loads, RPE, sets), declared health data, payment data (processed by Stripe).

3. Purpose

Program personalization and weekly adaptation, delivering the AI assistant and tracking, subscription management, product improvement (anonymized data only).

4. Legal basis

Processing is based on contract performance (art. 6.1.b GDPR) for the data needed to run the service, and on consent (art. 6.1.a GDPR) for health data provided voluntarily.

5. Retention

Data is kept for the duration of your subscription + 3 years after account closure. Health data is deleted immediately upon request.

6. Processors

Supabase (storage, EU Frankfurt), Stripe (payments), Vercel (hosting), Anthropic (AI assistant), PostHog (analytics EU, consent-gated), Google Analytics (consent-gated), Resend (emails).

7. Your rights

Under GDPR, you have the right to access, rectification, erasure, portability and objection. To exercise these rights: contact@forgesport.fr. You may also lodge a complaint with the CNIL (cnil.fr).

8. Cookies and analytics

Strictly necessary cookies: Supabase session and cookie preference. Analytics cookies: PostHog + Google Analytics, only loaded after explicit consent via the cookie banner. No advertising cookies.