This explains what Forge collects, why, and who processes it. We keep it minimal — Forge owns adherence and the next effort, not a data business.

What we collect

Account: your email and name (via Google or magic link). Training data: the programs you build, the sources you upload (text, PDFs, screenshots), your logged sets, sessions, and streaks. Billing: handled by Stripe — we store your subscription status and a Stripe customer id, never your full card number. Basic technical data: standard request logs and error reports needed to run and debug the app.

How we use it

To generate and adapt your programs, run your sessions, track adherence, process your subscription, and keep the service working and secure. We don't sell your data.

Subprocessors

We share data only with the services that run Forge:

• Supabase — database, authentication, and file storage (your account + training data).
• Stripe — subscription payments and billing.
• Anthropic (Claude) — processes your program inputs to generate/adapt programs.
• Vercel — application hosting and request logs.

Retention & your rights

We keep your data while your account is active. You can request export or deletion of your data at any time by emailing support@everythingistrain.ing(we action it manually); deleting your account removes your training data (some billing records may be retained as required by law).

Security

Your data is protected by row-level security (each row is scoped to your account) and access controls. No system is perfectly secure, but we treat your training data as private.