Legal

Privacy Policy

Last updated: April 7, 2026

ForgeBody ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our AI weight loss coaching service delivered via SMS.

1. Information We Collect

When you sign up for ForgeBody, we collect:

• Personal details: First name, age
• Health data: Current weight (lbs), goal weight (lbs)
• Contact information: US phone number
• Payment information: Processed by Paddle — we never store your card details
• Message history: SMS conversations between you and your AI coach
• Food photos: If you send MMS photos for nutritional analysis, they are processed and not stored permanently

2. How We Use Your Data

We use your information to:

• Deliver personalized AI coaching via SMS
• Send daily check-in messages and coaching responses
• Process subscription payments via Paddle
• Improve coaching quality based on conversation history
• Send service-related communications (billing, updates)

We do not use your data for advertising, sell it to third parties, or share it for any purpose other than delivering the service.

3. SMS / TCPA Consent

By providing your phone number and checking the consent box during signup, you agree to receive automated marketing and coaching text messages from ForgeBody at the number provided.

• Message frequency: 1–3 messages per day (daily check-in + replies)
• Opt-out: Reply STOP to any message to cancel all SMS. You will receive one confirmation message, then no further messages.
• Help: Reply HELP for support information
• Rates: Standard message and data rates may apply from your carrier
• Carriers: Not responsible for delayed or undelivered messages

4. Third-Party Services

We use the following third-party providers to operate ForgeBody:

• Anthropic (Claude API) — AI model that generates coaching responses. Messages are processed per Anthropic's Privacy Policy.
• Twilio — SMS delivery infrastructure. Messages pass through Twilio's systems per their Privacy Policy.
• Paddle — Payment processing. Card data is handled by Paddle per their Privacy Policy. We never see your full card number.
• Supabase — Secure database storage for user profiles and message history.

5. Data Storage & Security

Your data is stored on secured servers with industry-standard encryption. We use:

• Encrypted database (Supabase / PostgreSQL)
• HTTPS for all data transmission
• Access controls limiting who can view your data

While we take reasonable measures to protect your data, no system is 100% secure. If a breach occurs that affects your rights, we will notify you within 72 hours as required by applicable law.

6. Data Retention

We retain your data as follows:

• Active subscribers: Data retained for the duration of your subscription
• Cancelled accounts: Data deleted within 90 days of cancellation
• Payment records: Retained for 7 years as required by tax law (processed by Paddle)
• Message history: Retained for coaching context; deleted with your account

7. Your Rights

You have the right to:

• Access: Request a copy of all data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and all associated data
• Portability: Request your data in a portable format
• Opt-out of SMS: Reply STOP to any message at any time

To exercise any right, email support@tryforgebody.com. We will respond within 30 days.

8. California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale / Sharing: ForgeBody does not sell or share your personal information for cross-context behavioral advertising. You may submit a request to confirm this at any time.
• Right to Limit Use of Sensitive Personal Information: Health-related data (e.g., weight, nutrition information) is classified as sensitive personal information under CPRA. We use this data solely to provide the ForgeBody coaching service and do not use it for advertising profiling or secondary purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

How to submit a California privacy request: Email support@tryforgebody.com with subject line "California Privacy Request" and specify your request type. We will respond within 45 days as required by CCPA.

Do Not Sell or Share My Personal Information: ForgeBody does not sell or share your personal information with third parties for their own marketing purposes. To submit a formal opt-out request or to confirm our data practices, email support@tryforgebody.com with subject line "Do Not Sell Request".

10. Children's Privacy

ForgeBody is intended for adults aged 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, contact us immediately at support@tryforgebody.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via SMS or email. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests:

• Email: support@tryforgebody.com
• Website: tryforgebody.com