Effective date: 18 October 2026
The short version. Your training data lives on your phone. Forgelog has no accounts, no analytics, no advertising and no third-party tracking SDKs. Nothing leaves your device unless you set it up yourself — either an AI request using your own API key, or a backup to a server you choose.
What Forgelog collects
Forgelog does not send your training data to us. We don't have a server that receives it, and we can't read it.
Everything you record — workouts, sets, personal records, programs, notebook entries, injuries and measurements, progress photos — is stored in an app database on your device. Photos are stored in local app storage. There is no Forgelog cloud account and no sign-up.
What can leave your device, and only because you asked
1. AI features you trigger, using your own API key. Forgelog's AI helpers (program and workout generation, interview sheet fill, paste-import conversion, session-swap planning) are strictly bring-your-own-key. You enter an API key for a provider you choose — Anthropic, OpenRouter, OpenAI or a custom OpenAI-compatible endpoint. When you tap an AI action, the relevant context (your answers, the pasted text, or the current session) is sent directly from your device to that provider under your key. We never see it; there is no Forgelog server in the path. Your key is stored encrypted on your device and used only for calls you trigger. If a saved key exists, the app may also fetch the provider's model list at startup so the picker stays current.
2. Voice plan capture (opt-in). If you use push-to-talk voice capture, Forgelog requests microphone access only while you hold the button, records a single utterance, and sends it to the transcription provider you configured (your own key, same as above). Recording stops when you release.
3. Backups you configure. You can back up to any WebDAV server you choose. Backups are uploaded directly from your device to your server — again, no Forgelog server in the path. Backups can be end-to-end encrypted with a passphrase you set (AES-256-GCM with a key derived from your passphrase); if you leave encryption off, the backup file is unencrypted on your server. An automatic backup on Wi-Fi is available but off by default — it only runs if you turn it on. Backup files contain your full training database, including photos.
4. Exports and shares you start. Saving or sharing a backup file, exporting your logged sets to CSV/JSON, sharing a session recap image or text, or sharing a crash log all hand data to Android's share sheet or file picker — the destination is whatever you choose.
If you never configure an AI key or a backup server, the only network connections the app makes are the optional model-list checks described above, which can be avoided by not saving a key.
Managed AI service (when offered)
A paid, optional managed AI mode may be offered in some releases. If you use it, you create an account with your email address, and AI requests are processed through our managed service so you don't need your own key. We do not retain your generation requests after the response is delivered to you; the upstream AI provider may process them under its own API terms. We keep what the app store and tax law legally require (for example, a record of your purchase), and deleting your account removes your service-side data. If you never sign up, nothing in this section applies to you.
Permissions Forgelog requests, and why
| Permission | Why |
|---|---|
| Internet | For the AI calls and WebDAV backups you configure. Nothing else uses it. |
| Network state | To check for Wi-Fi before the optional automatic backup, so it never uses mobile data. |
| Notifications | Workout reminders and timers you set. |
| Exact alarm / receive boot completed | To fire those reminders on time and restore them after a restart. |
| Vibrate | Timer finish alerts. |
| Microphone | Only for opt-in push-to-talk voice capture, requested when you first hold the talk button. |
Data retention and deletion
Your data is yours and it's local. Deleting items in the app removes them from the database. Uninstalling the app removes everything — database, photos, keys and settings — because none of it is synchronised anywhere else. Backups on your WebDAV server stay until you delete them there. AI providers may retain request data according to their own terms and your account settings with them — that is outside our control, which is why we say so plainly.
Children
Forgelog is a training tool for adults and is not directed at children. We do not knowingly collect personal information from children.
No advertising, no trackers
Forgelog contains no advertising, no analytics or telemetry, and no third-party SDKs that phone home. This is enforced mechanically by our release checks, not just promised here.
Changes to this policy
If the software changes in a way that changes your privacy, this page will be updated and the effective date above will change with it. The current version always lives at this URL.
Contact
Questions, data concerns or bug reports: support@privacytechnologist.com.au
