FYL
Privacy Policy
This Privacy Policy explains how FYL (“Forge Your Lift”), operated by Korra Limited (“FYL”, “we”, “us”), collects, uses, and shares your personal information when you use the FYL mobile app and our website at forgeyourlift.com (together, the “Service”). By using the Service, you agree to this Policy.
1. Information we collect
Account & profile
When you create an account we collect your email address, a password (stored only in hashed form by our authentication provider), and a username. You may optionally add a profile photo and a short bio. If you sign in with Apple, Google, or Discord, we receive basic profile information (such as your name and email) from that provider in accordance with your consent and their settings.
Training data
We collect the workout information you enter, including routines, exercises, sets, reps, weights, durations, distances, notes, rest times, workout history, and any bodyweight or body-measurement entries you record. This is the core data the Service exists to track for you.
Apple Health (HealthKit) — iOS, optional
If you grant permission, FYL reads from and writes to Apple Health. We request access to: workouts, active energy burned, body mass, body-fat percentage, height, walking/running distance, cycling distance, heart rate, and step count. Health data is used only to display your metrics and to sync your workouts and body measurements between FYL and Apple Health.
Contacts — optional
If you choose to “find friends,” FYL reads the email addresses stored in your device contacts and sends them to our servers solely to identify which of your contacts already have a FYL account, so we can suggest people to follow. We do not read names, phone numbers, or other contact details for this feature, and we do not use these emails to send marketing or invitations. You can use the Service without granting contacts access.
Social activity
We collect the social actions you take in the Service: who you follow, your likes and comments, and which workouts you choose to share. You control the visibility of each workout you post.
Subscriptions & purchases
FYL Pro can be purchased through Apple (App Store), Google (Google Play), or, when offered, through our web checkout. Korra Limited provides FYL Pro; web transactions are sold through Link, Stripe’s merchant-of-record service. We receive purchase and subscription status, product, customer, and transaction identifiers, and related billing information needed to process the purchase, grant paid features, prevent fraud, provide support, and meet legal obligations. We do not receive or store your full payment card details — those are handled by Apple, Google, Stripe, or Link.
Device & technical information
We process limited technical information needed to operate the Service, such as app version and basic device information, and logs generated by our hosting provider. FYL does not use third-party advertising networks or third-party analytics/tracking SDKs.
Marketing communications
If you opt in, we use your email address to send product updates and announcements. You can opt out at any time using the unsubscribe link or in-app settings.
2. How we use your information
- Provide, operate, and maintain the Service and your account.
- Save and sync your workouts, progress, records, and body metrics.
- Power social features (following, feed, likes, comments) you choose to use.
- Process and manage subscriptions and entitlements.
- Respond to support requests and communicate with you about the Service.
- Maintain security, prevent abuse, and comply with legal obligations.
- With your consent, send marketing communications.
3. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service); consent (for Apple Health access, contacts access, and marketing — which you may withdraw at any time); legitimate interests (to secure and improve the Service); and legal obligation where applicable.
4. How we share information
We do not sell your personal information and do not share it for cross-context behavioral advertising. We share information only with:
- Service providers (processors) who host and run the Service on our behalf — including Supabase (database, authentication, and file/image storage) and our other infrastructure providers.
- Apple and Google for authentication and for processing app subscriptions and purchases; Stripe and Link for merchant-of-record web payments, billing, transaction support, fraud prevention, and applicable indirect-tax handling; and Discord if you choose it for sign-in.
- Other users, but only the profile and workout content you choose to make visible.
- Authorities or third parties where required by law, or to protect the rights, safety, and security of our users or the Service.
5. Data retention
We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it to comply with legal obligations or resolve disputes.
6. Your rights & choices
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. EEA/UK users may lodge a complaint with their data protection authority. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct, and to not be discriminated against for exercising those rights (note: we do not sell or “share” personal information as defined by California law).
To exercise any of these rights, contact us at support@forgeyourlift.com.
7. Deleting your account
You can request deletion of your account and associated personal data at any time by emailing support@forgeyourlift.com from your account email address. We will verify your request and delete your data as described in Section 5.
8. Security
We protect your information using encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Children
FYL is not directed to children under 13 (or under 16 in the EEA), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
10. International transfers
We are based in Hong Kong, and your information may be processed in Hong Kong, the United States, and other countries where we or our service providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.
11. Changes to this Policy
We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice through the Service.
12. Contact us
Questions about this Policy or your data? Contact us at:
Korra Limited
Unit 102A, 1/F Hutchison Logistics Centre, 18 Container Port Road South, Kwai Chung, Hong Kong
Phone: +852 5705 9974
Email: support@forgeyourlift.com