Privacy Policy
Last updated: October 16, 2026
- Your camera video never leaves your device. Forja doesn't record, save or upload video or photos.
- We don't sell your data, show ads, or use advertising or analytics trackers.
- Your friends can see your username, your streak, and in the Feed a daily summary of your workout and the distance, time and route shape of your walks and runs (without the first and last 200 m, so where you start and finish never shows). They can't see your location or your email.
- Weekly leagues: other people in your league (not only friends) see your username, your color, the area your league is named after (worked out from your phone's time zone, for example "US East", never your location) and that week's points and number of days. You can turn this off in Settings with "Show Me in Leagues".
- Invite links: your link holds a private code, not your username. Anyone who joins or signs in through it becomes your friend, and we note which link or post brought a new account (for example a video), to see what works.
- You can delete your account, and everything tied to it, yourself, from inside the app.
Who we are
Forja ("we", "us") is a daily workout streak app, operated by Ramses Navarro. If you have any question about this policy or your data, contact us at hello@getforja.app.
What we collect, and why
Your account
Your email address and a password, so you can log in and keep your progress across devices. Your password is handled by our authentication provider and stored in scrambled (hashed) form; we never see or store it in readable form.
Your profile
The username you choose. It's how friends find and recognize you.
Your sign-up answers
When you first open Forja, it asks why you want to work out (up to three goals), how you heard about Forja, and roughly how many push-ups you can do. Your goals and push-up answer set up your training plan; how you heard about Forja helps us understand which channels bring people to the app. These answers are saved with your progress and are never shown to other users.
Your workouts
For each camera-verified set: the exercise, the number of reps (or seconds for a plank) and the date. We also keep your current and best streak, how many rest days you've used this week, the days you've logged, your training plan (your pace and your daily targets, which go up as you complete days and ease back when you miss some), your daily minimums and settings (such as distance units and your reminder time), and your walk and run routes.
When you log a day, Forja posts a summary of it to the Feed: the date, your streak, that day's push-ups, squats and plank time, and your walk/run minutes if you had any. Each walk or run you finish is also posted on its own: whether it was a walk or a run, its distance, moving time and pace, and the shape of its route as a line (no map) with the first and last 200 m cut off, so where it starts and ends - usually your home - is never shown or stored with the post. To work these out, the app sends the walk's GPS points to our server, which keeps only that trimmed line and discards the rest. Your accepted friends can see your posts and give them kudos. Feed posts are deleted automatically after 30 days.
Camera and body movement
To verify your push-ups, squats and planks, Forja uses your camera. The video is analyzed on your device by a pose-estimation model that finds a handful of body points (such as shoulder, hip, knee and ankle) in each frame. No video or photo is recorded, saved or sent anywhere.
So that our server can double-check a set before it counts toward your streak, the app sends a short, time-ordered list of the positions of those few body points for that set. It contains no images. Our server replays it to count your reps, then discards it, keeping only the result (exercise, count or seconds, and date). If you work out before creating an account, those lists stay on your device, are sent the same way if you create an account that day, and are deleted from your device after that day if you don't. The camera only runs while you're on the camera screen with a set open, and you can turn off camera access any time in your device or browser settings (Forja then can't verify new sets).
Location
Forja reads your location in two situations: when you open the Record tab, to center the map on where you are, and while you're tracking a walk or run, to draw your route and work out distance, pace and elevation. Your full routes are saved to your account and are visible only to you. We don't share your location with other users: friends see the distance, time and pace of your walks and runs and the route's shape without its first and last 200 m. If you use Share on a route, Forja makes an image with the same trimmed shape and your stats; it goes only where you send it. You can turn off location access in your device or browser settings.
Friends and safety
Friend requests and friendships, the kudos you give, the people you've blocked, and any report you send about another user (including the reason you write). Reports are visible only to us and are used to keep Forja safe.
Notifications
If you turn on reminders, we store the technical address your browser or phone provides for delivering notifications, plus the hour you chose, your time zone, and the date we last sent a reminder, so we send it at the right time and never more than once a day. You'll also get a notification when someone sends you a friend request, which includes their username. You can turn reminders off any time in Settings.
On your device
Forja keeps some information in your browser's or device's storage: your login session, your preferences (theme, sound), and, if you use the app without an account, your progress, which then stays only on your device. We don't use advertising or tracking cookies.
Technical information
Like any online service, the companies that host and deliver Forja (listed below) receive technical information when your device connects, such as your IP address and browser type.
Who can see what
| Information | Who can see it |
|---|---|
| Your username | Other Forja users who are signed in (it's searchable so friends can find you) |
| Your streak and best streak | You and your accepted friends |
| Your weekly league points and days, your color and your league's area (from your time zone) | People in your weekly league, unless you turn off "Show Me in Leagues" |
| Your invite code | Only you, and whoever you send your link to |
| Your Feed posts (date, streak, that day's push-ups, squats, plank time and walk/run minutes; and for each walk or run, its distance, moving time, pace and route shape without the first and last 200 m) | You and your accepted friends |
| Kudos you give, with your username | The friend whose post it is, and their friends who can see that post |
| Your individual sets, workout history, training plan, settings and saved routes | Only you |
| Your email address | Only you and us. Never shown to other users |
| People you've blocked | Only you |
| Reports you send | Only us |
Who we share data with
We don't sell your data, rent it, or share it for advertising. We use these providers to run Forja:
- Supabase — our database, login system and the server code that verifies your sets.
- Netlify — hosts the app.
- Anthropic — its AI assistant, Claude, helps us build and fix Forja. When we investigate a problem, it can read the app's stored data (such as usernames, streaks, workouts and saved routes), never your password or email address, and it can't change anything.
- jsDelivr and unpkg — deliver open-source code libraries the app needs (for example the maps library and the login library).
- Google — serves the app's font and the pose-estimation model file your device downloads for camera verification. Google receives your IP address when your device fetches them; it does not receive your video.
- OpenStreetMap — supplies map images. When a map is shown, your device requests images for the area being displayed, so OpenStreetMap receives that area and your IP address.
- Apple, Google and Mozilla push services — deliver notifications to your device if you turn reminders on.
We may also disclose information if the law requires it, or to protect the safety of our users.
How long we keep it
We keep your information until you delete your account, except Feed posts and their kudos, which are deleted automatically after 30 days. When you delete your account, we delete it and the data tied to it, including your profile, streak, training plan, verified sets, Feed posts, kudos, friendships, blocks, reports involving your account, notification settings and saved routes. Copies held in our provider's backups are removed as those backups expire.
Your choices and rights
- Delete your account: in Forja, open the gear icon on the Me tab, then Delete Account.
- Change your username or email: gear icon → Edit Profile.
- Turn off reminders: gear icon → Settings → Daily Reminders.
- Camera and location: change these any time in your device or browser settings.
- Ask us: you can ask for a copy of your data, to correct it, or to delete it by emailing hello@getforja.app. Depending on where you live (for example the EU, the UK or California), the law may give you additional rights over your data; we'll honor them.
Security
Data travels between the app and our servers over encrypted connections (HTTPS), and our database is set up so that each person can only read the information described in the table above. No system is perfectly secure, so we can't guarantee absolute security, but we take care to protect your information.
Children
Forja isn't meant for children under 13, and we don't knowingly collect information from them. If you believe a child has given us information, contact us and we'll delete it.
Changes to this policy
If we change what we collect or how we use it, we'll update this page and its date, and tell you in the app if the change is significant.
Contact
Ramses Navarro — hello@getforja.app