Privacy Policy

This policy explains what data Life OS collects, why, where it lives, and the control you have over it. We've written it in plain language. If anything is unclear, email us at support@forgelifex.com.

Who we are

Life OS is operated by Forge Lifex, Sweden. We are the data controller for the information described here. Contact: support@forgelifex.com.

What we collect

• Account & identity: your email, name, and the basics you enter (age or birth date, gender, occupation).
• Health & fitness details: things like weight, height, sleep, stress, injuries, allergies, and diet preferences. Under EU law this is sensitive (special-category) data, so we treat it with extra care and only collect what the plan and coaching need.
• Your activity: workouts, habits, goals, daily scores, streaks, and steps you log.
• AI coach conversations: the messages you send the coach, plus short summaries we keep so it can remember context next time.
• Payment info: if you subscribe, your email and subscription status. Card details are handled entirely by Stripe — we never see or store your card number.
• Technical data: a secure login cookie, a local cache in your browser for fast loading, and basic logs needed to run the service.

Why we use it, and our legal basis

• To build and run your plan, coaching, and progress — this is necessary to provide the service you signed up for (contract).
• To handle your health & fitness details, which are sensitive — we rely on your explicit consent, given when you complete onboarding. You can withdraw it at any time by deleting your account.
• To keep the service secure and prevent abuse (our legitimate interest).
• To send notifications, where you've enabled them (your consent).

We do not sell your data, and we do not use it for advertising.

Where your data is stored

Your data is stored with Supabase in the European Union. It's encrypted in transit, and access is restricted so that each account can only reach its own data. A copy is also cached in your browser so the app loads instantly.

AI processing by Anthropic

Your plan and coach replies are generated by Anthropic (the company behind Claude). When you use the coach or generate a plan, your messages and the relevant parts of your profile are sent to Anthropic's API to produce a response. Anthropic processes this under their own terms — please review Anthropic's privacy policy. We don't use your conversations to train any models ourselves.

Who else processes your data

We use a small set of trusted providers to run Life OS. Each only receives what it needs for its job. See the full list, with what each one does and where it's based, in our Subprocessors section at the bottom of this page.

International transfers

Some providers (such as Anthropic, Stripe, and Vercel) are based in the United States. Where data is transferred outside the EU, it relies on standard legal safeguards (such as Standard Contractual Clauses) provided by those companies.

How long we keep it

We keep your data while your account is active. When you delete your account, your data is removed from our systems (see below). We may retain limited billing records where the law requires it.

Your rights

Under EU law (GDPR) you can: access your data, correct it, delete it, export it, restrict or object to certain processing, and withdraw consent at any time. To exercise any of these, use the in-app options or email support@forgelifex.com. You also have the right to complain to your data protection authority — in Sweden, that's IMY (Integritetsskyddsmyndigheten).

Deleting your account and data

In the app, go to Profile → Reset everything. Confirming this permanently deletes all of your data from our servers — your profile, plan, workouts, habits, health logs, coach conversations, and account — and signs you out. This cannot be undone. (Note: simply clearing your browser only removes the local cache, not the server copy — use the in-app delete to remove everything.)

Cookies & local storage

We use a secure, essential cookie to keep you signed in, and your browser's local storage as a performance cache. We don't use advertising or tracking cookies. If we add product analytics in the future, it will be described here and used only with an appropriate legal basis.

Security

We encrypt data in transit, restrict access so each account only reaches its own data, and keep sensitive keys server-side only. No system is perfectly secure, so we don't promise absolute security — but we take reasonable, industry-standard measures to protect your information.

Children

Life OS is intended for adults (18+). We don't knowingly collect data from minors.

Changes to this policy

If we make a material change, we'll update the date above and let you know in the app or by email. Continuing to use Life OS after a change means you accept the updated policy.

Subprocessors

The providers that process data on our behalf:

• Supabase — database, authentication, storage (EU). Stores your account, health, activity, and coach-summary data.
• Anthropic — AI plan & coach generation (US). Receives your coach messages and relevant profile context.
• Stripe — payment processing (US/EU). Receives your email and subscription info; handles all card data directly.
• Vercel — hosting and delivery (US/global). Processes requests and technical logs.
• Resend — email delivery (US). Receives your email address to send account and sign-in emails.
• Sentry (error monitoring) — receives technical error and diagnostic data so we can find and fix crashes. Personal data is scrubbed before events are sent (no coach messages, health metrics, names or emails; each user is reduced to an anonymous id), and only when error monitoring is enabled.
• Browser push services (Apple, Google, Mozilla) — deliver notifications you opt into; receive only an anonymous push token.

Questions about your privacy? Email support@forgelifex.com. See also our Terms of Service.