Privacy Policy

StrengthForge OS · Effective June 29, 2026

This policy explains what information StrengthForge OS ("we", "the app") collects, how we use it, and the choices you have. We built StrengthForge OS to help athletes train and coaches support them. We take the trust of athletes, parents, and coaches seriously.

Who this applies to

StrengthForge OS is used by athletes and their coaches, often through a school, club, or team. Some athletes are minors. If you are under 18, please use the app with the awareness of a parent, guardian, or coach. We do not knowingly collect data from children under 13.

What we collect

• Account info — when you sign in with Google, we receive your name and email address. We never receive or store your Google password.
• Profile info you enter — such as age, height, weight, sport, position, team, city, and goals.
• Training data — the workouts you log: exercises, sets, reps, weights, duration, and timestamps.
• Coaching connections — the coach you link to (via an invite code you choose to enter) and any groups you are placed in.

How we use it

• To provide the core service: tracking your workouts and showing your progress.
• To let a coach you have connected to see your training data and assign you workouts. This connection only happens when you enter the coach's invite code.
• To operate, maintain, and improve the app.
• If — and only if — a parent or guardian has separately agreed, to produce anonymous group statistics for research. See below.

We do not sell your personal information, and we do not show you third-party advertising.

Anonymous group statistics for research (optional, off by default)

We are building anonymous reference data about youth athletic training — for example, the typical range of vertical jump for 15–16 year‑old volleyball setters. This is optional and off unless a parent or guardian turns it on, and it never affects an athlete's training, their coach, or anything else in the app.

• Only group statistics leave StrengthForge. Numbers about many athletes combined — never a report about one athlete.
• Never included, with or without permission: names, email addresses, phone numbers, photos, medical notes, allergies, emergency contacts, and anything typed as free text.
• Identity protections: ages are grouped into ranges rather than exact numbers, team and city are removed entirely, and any group too small to be anonymous is withheld rather than published.
• Who receives it: sports-science researchers, universities, national governing bodies, and youth training organizations, under a written agreement limiting what they may do with it.
• Withdrawing: a parent can withdraw at any time in the app, and it takes effect immediately for everything produced afterwards. One honest limit — a summary already published cannot be recalled, because we deliberately keep no way to trace a published statistic back to a person. That is the same design choice that protects the athlete's identity in the first place.

Because this permission is separate from the training consent, declining it changes nothing about participation.

Who can see your data

• You — always.
• A coach you connect to — can see your profile, your training sessions, and assign you workouts. You choose to connect by entering their code, and access can be revoked.
• Service providers — we use Supabase to store data and Google for sign-in. They process data on our behalf under their own terms.

Where your data is stored

Your data is stored using Supabase (a hosted database and authentication provider). Workout files are also kept on your own device. We use industry-standard measures to protect data in transit and at rest, and access to coaching data is enforced by database-level security rules.

Your choices and rights

• You can view and edit your profile in the app at any time.
• You can disconnect from a coach.
• You can request a copy of your data, or request that we delete your account and associated data, by emailing us at the address below.

Data retention

We keep your data while your account is active. If you ask us to delete your account, we remove your personal data from our systems within a reasonable period, except where we must keep it to meet legal obligations.

Schools and teams

When a school or team uses StrengthForge OS, the coach or program administers the coaching relationship. Schools may have their own obligations regarding student data (for example, under FERPA). We support coaches and programs in handling athlete data responsibly.

Clinics and events

When a parent or guardian registers a minor for a clinic or event, the host coach collects: athlete name and birthdate, parent contact details, emergency contacts, medical notes and allergies, authorized pickup names, an optional media release and marketing opt-in, and an e-signed consent waiver (kept as an audit record). This information is visible only to the event's coaching staff and is used to run the event safely.

Check-in photos: a photo may be taken at event check-in so coaches can identify athletes on the floor. Check-in photos are automatically deleted after the event's retention window (30 days by default). Consent records and registration details are retained as described under Data retention.

Changes to this policy

We may update this policy as the app evolves. We will post the new version here and update the effective date above.

Contact

Questions, access requests, or deletion requests: davidgravelleokc@gmail.com

This is a starting privacy policy. Before a wider launch, have it reviewed by a qualified attorney for your jurisdiction and for student-athlete data rules (e.g., COPPA, FERPA, state laws).