Privacy Policy

This Privacy Policy explains how FYL (“Forge Your Lift”), operated by Korra Limited (“FYL”, “we”, “us”), collects, uses, and shares your personal information when you use the FYL mobile app and our website at forgeyourlift.com (together, the “Service”). By using the Service, you agree to this Policy.

1. Information we collect

Account & profile

When you create an account we collect your email address, a password (stored only in hashed form by our authentication provider), and a username. You may optionally add a profile photo and a short bio. If you sign in with Apple, Google, or Discord, we receive basic profile information (such as your name and email) from that provider in accordance with your consent and their settings.

Training data

We collect the workout information you enter, including routines, exercises, sets, reps, weights, durations, distances, notes, rest times, workout history, and any bodyweight or body-measurement entries you record. This is the core data the Service exists to track for you.

Location, routes and motion — optional

When you start an outdoor run, walk or ride, FYL collects precise location to record your route, distance, pace and splits, including while the screen is locked or FYL is in the background. Recording stops when you end the session. With your permission, FYL also uses motion sensors to count walking steps and the barometer to measure climbs. You can log sessions by hand without location access.

Recordings are kept on your device during a session. Saving uploads the route and workout totals to your FYL account. Your full route stays private to your account; other people see the route only as allowed by the workout’s visibility and Route settings. The default hides the first and last 200 metres and sections that return near those endpoints. You can instead hide the map or choose to show the full route. A trimmed route may still reveal places you visit, so choose Hide map for routes you do not want others to see.

When you draw a route, the points are sent to FYL’s route server, hosted on Hetzner, to find a suitable path. Those request points are not retained as saved routes or logged by the routing application. A route is stored in your account only if you choose to save it. GPX import reads the file you select; exporting creates a file containing the route and any included recording timestamps. Files you share outside FYL follow the destination’s privacy practices.

FYL separately asks whether routes from workouts you share with followers or everyone may improve aggregate maps and route suggestions. This is optional: the first and last 200 metres are excluded and the data is combined with other people’s routes. Change this choice in Settings → Runs, walks and rides. Private workouts are not included. Turning this off prevents future contributions; it does not necessarily undo statistics already combined with other people’s data.

Mapbox maps — optional

Before opening interactive maps, FYL asks whether you allow Mapbox maps. Mapbox receives the area you view, your IP address, device/vendor identifiers, and map usage and diagnostic information to supply, measure and maintain maps. A map following you reveals your location to Mapbox. Mapbox processes this information under its privacy policy. FYL turns off optional Mapbox location telemetry when opening maps. The map’s attribution menu also has Mapbox’s data controls; if you change that choice there, Settings → Runs, walks and rides → Turn off Mapbox telemetry lets you opt out again without turning maps off.

You can turn Mapbox maps off in the same settings. GPS recording remains available. The map permission is saved locally for your account. A new installation without restored settings asks again. Terrain elevations are calculated using Mapterhorn data hosted through Cloudflare R2 and a private Worker. These services process the tile requests needed to look up elevations; a saved elevation profile is stored with the route or workout.

Apple Health (HealthKit) — iOS, optional

If you grant permission, FYL reads from and writes to Apple Health. We request access to: workouts, active energy burned, body mass, body-fat percentage, height, walking/running distance, cycling distance, heart rate, and step count. When you choose to sync an outdoor GPS workout, FYL also asks to write its workout route to Apple Health; this is separate from sharing a map with other FYL users. Health data is used only to display your metrics and to sync your workouts and body measurements between FYL and Apple Health.

If you turn on Settings → Watches, FYL also reads the heart rate, active energy and workouts that your watch’s app (for example Garmin Connect, WHOOP or HUAWEI Health) saved to Apple Health around each workout you log in FYL. FYL stores only the totals with that workout: calories, average and maximum heart rate, and the watch brand. Individual heart-rate readings stay on your device.

Health Connect — Android, optional

If you grant permission, FYL saves your completed workouts to Health Connect on your device. If you also turn on Settings → Watches, FYL reads the exercise sessions, heart rate, active calories and total calories that other apps (for example Samsung Health or Garmin Connect) saved to Health Connect around each workout you log in FYL, and only while FYL is open. FYL stores only the totals with that workout: calories, average and maximum heart rate, and the watch brand. Individual readings stay on your device.

Contacts — optional

If you choose to “find friends,” FYL reads the email addresses stored in your device contacts and sends them to our servers solely to identify which of your contacts already have a FYL account, so we can suggest people to follow. Contact names and phone numbers are read on your device to display people you can invite; these are not uploaded for matching. If you choose an invitation, FYL opens your device’s messaging or email app for you to send it. FYL does not automatically send invitations or use the matching emails for marketing. You can use the Service without granting contacts access.

Social activity

We collect the social actions you take in the Service: who you follow, your likes and comments, and which workouts you choose to share. You control the visibility of each workout you post.

Subscriptions & purchases

FYL Pro can be purchased through Apple (App Store), Google (Google Play), or, when offered, through our web checkout. Korra Limited provides FYL Pro; web transactions are sold through Link, Stripe’s merchant-of-record service. We receive purchase and subscription status, product, customer, and transaction identifiers, and related billing information needed to process the purchase, grant paid features, prevent fraud, provide support, and meet legal obligations. We do not receive or store your full payment card details — those are handled by Apple, Google, Stripe, or Link.

Device & technical information

We process limited technical information needed to operate the Service, such as app version and basic device information, and logs generated by our hosting provider. FYL does not use third-party advertising networks. Interactive maps use the Mapbox SDK as explained above; its service and optional telemetry processing are separate from FYL’s workout analytics.

Marketing communications

If you opt in, we use your email address to send product updates and announcements. You can opt out at any time using the unsubscribe link or in-app settings.

2. How we use your information

• Provide, operate, and maintain the Service and your account.
• Save and sync your workouts, progress, records, and body metrics.
• Power social features (following, feed, likes, comments) you choose to use.
• Process and manage subscriptions and entitlements.
• Respond to support requests and communicate with you about the Service.
• Maintain security, prevent abuse, and comply with legal obligations.
• With your consent, send marketing communications.

3. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service); consent (for optional location and motion access, Mapbox maps, route contributions, Apple Health and Health Connect access, contacts access, and marketing — which you may withdraw at any time); legitimate interests (to secure and improve the Service); and legal obligation where applicable.

4. How we share information

We do not sell your personal information and do not share it for cross-context behavioral advertising. We share information only with:

• Service providers (processors) who host and run the Service on our behalf — including Supabase (database, authentication, and file/image storage), Hetzner (routing server), Cloudflare (terrain storage and request processing), and our other infrastructure providers.
• Apple and Google for authentication and for processing app subscriptions and purchases; Stripe and Link for merchant-of-record web payments, billing, transaction support, fraud prevention, and applicable indirect-tax handling; and Discord if you choose it for sign-in.
• Mapbox when you allow interactive maps, as described in Section 1 and in Mapbox’s linked privacy policy.
• Other users, but only the profile and workout content you choose to make visible.
• Authorities or third parties where required by law, or to protect the rights, safety, and security of our users or the Service.

5. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with legal obligations or resolve disputes.

6. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. EEA/UK users may lodge a complaint with their data protection authority. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct, and to not be discriminated against for exercising those rights (note: we do not sell or “share” personal information as defined by California law).

To exercise any of these rights, contact us at support@forgeyourlift.com.

You can stop a recording, deny or revoke location and motion access in your phone’s settings, disable Mapbox maps or telemetry, leave routes out of aggregate contributions, change a workout’s route visibility, or delete saved routes and workouts in FYL. These choices do not prevent you from using the weight-training and manual logging features.

7. Deleting your account

You can request deletion of your account and associated personal data at any time by emailing support@forgeyourlift.com from your account email address. We will verify your request and delete your data as described in Section 5.

8. Security

We protect your information using encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

FYL is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. International transfers

We are based in Hong Kong, and your information may be processed in Hong Kong, the United States, and other countries where we or our service providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

11. Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice through the Service.

12. Contact us

Questions about this Policy or your data? Contact us at:

Korra Limited
Unit 102A, 1/F Hutchison Logistics Centre, 18 Container Port Road South, Kwai Chung, Hong Kong
Phone: +852 5705 9974
Email: support@forgeyourlift.com

← Back to FYL