Privacy Policy

Last updated: 9 July 2026

1. Who We Are

Forgeborn is a fitness RPG mobile application ("the App") developed and operated by Marc Gough. If you have any questions about this Privacy Policy, please contact us at hello@playforgeborn.com.

2. What Data We Collect

We collect only the data necessary to operate the App and provide you with a personalised experience.

Account Information

• Email address (used for account creation and login)
• Password (stored securely, never visible to us)
• Username and character name (chosen by you during onboarding)

Fitness and Workout Data

• Workout sessions you log manually (type, duration, intensity)
• Workout sessions synced from Google Health Connect or Apple Health (exercise type, duration, calories burned, heart rate if available)
• XP earned, stats gained, and progression data
• Daily quest completions

Chat and Mentor Data

• Messages you send to Aldric Vesper, our AI mentor
• Conversation history stored to provide context across sessions

Payment Data

• Subscription status (whether you are on the free or Pro tier)
• Payment processing is handled entirely by Stripe — we do not store your card details

Data We Do NOT Collect

• Device identifiers or hardware information
• Location data
• Contacts or calendar data
• Advertising identifiers
• Analytics or behavioural tracking data

3. How We Use Your Data

We use the data we collect solely to:

• Create and manage your Forgeborn account
• Award XP and track your in-game progression
• Generate personalised responses from Aldric Vesper (our AI mentor)
• Sync workouts from Google Health Connect or Apple Health
• Process subscription payments via Stripe
• Send you your launch invite and important account communications

We do not use your data for advertising, profiling, or any purpose beyond operating the App.

4. Third Parties We Share Data With

We share your data with the following third parties only where necessary to operate the App.

Anthropic (Claude API)

When you send a message to Aldric Vesper, your message and recent conversation history are sent to Anthropic's Claude API to generate a response. This includes any workout context Aldric uses to personalise his advice. Anthropic's privacy policy →

Stripe

When you subscribe to Forgeborn Pro, your payment is processed by Stripe. We share only what Stripe requires to process the transaction. We do not store your card details. Stripe's privacy policy →

Supabase

Your account data, workout logs, and conversation history are stored on Supabase's infrastructure, hosted in the European Union. Supabase's privacy policy →

We do not sell your data to any third party, ever.

5. Health Data

Forgeborn connects to Google Health Connect (Android) and Apple Health (iOS) to read exercise session data. This is used solely to verify your workouts and award XP. We do not write to Health Connect or Apple Health, and we do not share your health data with any third party except as described in Section 4.

You can revoke Health Connect or Apple Health permissions at any time through your device settings. Revoking permissions means workouts will need to be logged manually.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Your profile, workout logs, and conversation history will be permanently deleted within 30 days
• Payment records may be retained by Stripe in accordance with their legal obligations

To request account deletion, email us at hello@playforgeborn.com with the subject line "Delete My Account."

7. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Correction — request that we correct inaccurate data
• Deletion — request that we delete your data
• Portability — request your data in a machine-readable format
• Objection — object to how we process your data

To exercise any of these rights, contact us at hello@playforgeborn.com. We will respond within 30 days.

8. Data Security

We take reasonable technical measures to protect your data, including:

• All data transmitted between the App and our servers is encrypted using HTTPS/TLS
• Passwords are hashed and never stored in plain text
• Row-level security policies ensure users can only access their own data
• Edge Functions are protected with JWT verification

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Forgeborn is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at hello@playforgeborn.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this document. For significant changes, we will notify you via email or an in-app notification.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please get in touch: