Privacy policy

Last updated: 12 October 2026

This policy explains what personal information FitForge ("we", "us") collects when you use fitforge.co.uk, why we collect it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

FitForge is the data controller for your personal information. You can contact us about anything in this policy at admin@fitforge.co.uk or through our contact form.

2. Information we collect

• Account details: username, email address and password. Passwords are stored only as a secure one-way hash - we can never see them.
• Profile details you choose to add: display name, bio and profile photo.
• Your activity: your workout plan, streaks, badges, friends, private messages, forum posts and shared posts.
• Premium and payments: your subscription plan and status. Card details are collected and stored by our payment provider, Stripe - we never see or store them.
• Wellness information: if you are a Premium member, nutrition plans and wellness sessions created for you by our coaches. This may include calorie targets you have asked for.
• Messages to us: anything you send through the contact form, including your name and email address.
• Technical information: your IP address and basic request details in security and error logs, and one essential session cookie.

3. How and why we use it

• To provide your account and the features you use - lawful basis: performance of our contract with you.
• To take payment for Premium and manage your subscription - contract.
• To keep the service secure, prevent spam and abuse, and fix problems - legitimate interests.
• To reply to messages you send us - legitimate interests.
• To send essential account emails such as password resets - contract. We do not send marketing emails without your consent.
• To meet legal obligations, such as keeping payment records for tax purposes - legal obligation.

We do not sell your personal information and we do not use it for advertising.

4. Who we share it with

We only share information with service providers who help us run FitForge, under contracts that require them to protect it:

• Hostinger - website hosting and database storage.
• Stripe - payment processing for Premium subscriptions.
• YouTube (Google) - exercise videos are played using YouTube's embedded player. When you press play, YouTube receives information such as your IP address. If you choose "Essential only" in our cookie settings we use YouTube's privacy-enhanced mode.

Other members can see your username, display name, profile photo, bio, badges and forum posts. Only your friends can see your shared posts and send you messages. We may also disclose information if the law requires it.

5. International transfers

Some of our providers may process data outside the UK. Where they do, they use safeguards approved under UK law, such as the UK International Data Transfer Agreement or adequacy regulations.

6. How long we keep it

• Account and activity data: for as long as your account is open. When you delete your account, it is removed immediately from our live systems and from backups within 30 days.
• Payment and subscription records: up to 6 years, as required for tax and accounting.
• Contact form messages: up to 2 years.
• Security logs: up to 90 days.

7. Cookies

We use one essential cookie (ffsid) to keep you logged in and protect forms from misuse. It is deleted when you log out or close your browser, or after 30 days if you tick "Keep me logged in". We store your theme and cookie choices in your browser's local storage. YouTube may set its own cookies when you play a video - you can choose "Essential only" at any time using Cookie settings in the footer.

8. Your rights

You have the right to:

• access a copy of your information - you can download it yourself from Settings;
• correct information that is wrong - most of it can be edited in Settings;
• delete your information - use "Delete my account" in Settings;
• object to or restrict how we use it, and ask us to transfer it to you or another organisation.

To use any of these rights, email admin@fitforge.co.uk. We will respond within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

9. Children

FitForge is for people aged 13 and over. If you believe a child under 13 has created an account, please contact us and we will delete it.

10. Security

We use encrypted connections (HTTPS), hashed passwords, protection against common web attacks, and access controls on our systems. No service can be 100% secure, so please use a strong password that you don't use anywhere else.

11. Changes to this policy

We may update this policy from time to time. We will show the date of the latest version at the top of this page and tell you about significant changes by email or on the website.