Ardent Forge ("we," "our," or "the app") is a workout logging and programming application. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. We built Ardent Forge for serious athletes, not for advertising — this policy reflects that.
We collect only what is necessary to operate the app. No data is collected for advertising purposes.
Account data. When you create an account, we collect your email address. Your display name is optional. We do not collect your real name, phone number, or physical address.
Workout data. The core of what Ardent Forge stores: exercises, sets, reps, weights, duration, distance, perceived difficulty, personal notes, and program structure. This data exists to serve you — it is not analyzed for advertising, sold, or shared with third parties.
1RM and performance data. One-rep maximums and derived training loads are stored to enable percentage-based programming. These are yours and exist only to compute your workouts.
Body weight. If you choose to log it (used in bodyweight percentage calculations), it is stored in your account. It is treated as sensitive and is never visible to other users, coaches, or accountability group members unless you explicitly share it.
Device and technical data. We collect minimal technical data necessary to operate the sync engine: device platform (Android, web), app version, and sync timestamps. We do not collect device identifiers, advertising IDs, or location data.
Self-hosted instances. If you self-host Ardent Forge, you are the data controller for all data on your instance. We have no access to data on self-hosted deployments.
To operate the app. Your workout data is used to display your history, compute training loads, generate pre-filled sets, detect personal records, and advance your position in programs. That is its only purpose.
To sync across your devices. Your data is synchronized to Supabase (our cloud backend) so it is available on all your devices. Sync is encrypted in transit via TLS and at rest in the database.
To support coaching and accountability features. If you join a group or connect with a coach, specific data is made visible per the permissions you set. Coaches can see workout completion and exercise performance — they cannot see your body weight, perceived difficulty ratings, or personal notes unless you grant access. You control these permissions and can revoke them at any time.
We do not use your data for advertising, machine learning model training, or any purpose outside operating the app.
We do not sell your data. Full stop.
Third-party services. Ardent Forge uses Supabase for authentication and cloud database hosting. Supabase processes your data on our behalf subject to their privacy policy. We use no analytics services, ad networks, or data brokers.
Coaches and group members. When you join an accountability group or accept a coaching relationship, other members can see the data defined by that group's visibility settings. Private fields (body weight, perceived difficulty, personal notes) are excluded from all group and coach queries by default. Review the group settings before joining.
Legal requirements. We may disclose data if required by law or to protect the rights and safety of users. We have no history of such disclosures and would notify users to the extent permitted by law.
Local storage. On Android, your workout data is stored locally in SQLite on your device. This data is not accessible to other apps. It syncs to the cloud when you are connected.
Cloud storage. Cloud data is stored in a PostgreSQL database hosted by Supabase. All data access is controlled by Row Level Security (RLS) policies — your data is only accessible to you, your authenticated sessions, and users you have explicitly granted access to.
In transit. All data transmitted to or from the cloud is encrypted using TLS 1.2 or higher.
Access controls. We do not have standing access to your workout data. Database access by operators requires explicit authentication and is logged.
Account deletion. You can delete your account from within the app. Deletion removes all your data from the cloud database within 30 days. Local SQLite data on your devices is deleted when you uninstall the app.
Export before deletion. You can export your complete workout history in JSON format before deleting your account. We do not hold your data hostage.
Retained data. After account deletion, we retain only what is legally required (e.g., basic transaction records for financial obligations, if any). We do not sell or use retained data.
Ardent Forge is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
Depending on your location, you may have the right to:
To exercise any of these rights, contact us at the address below. We respond to all requests within 30 days.
We will update this policy when our data practices change. Material changes will be communicated via in-app notification before they take effect. Continued use of the app after an update constitutes acceptance of the revised policy. The effective date at the top of this page reflects the most recent revision.
Questions, concerns, or data requests can be directed to:
Ardent Forge
robert@rghsoftware.com
For self-hosted deployments, the operator of your instance is the relevant contact. Refer to the instance's own privacy documentation.