Privacy
Last updated 8 September 2026
The short version: NOXFORGE has no analytics and no tracking of any kind. It stores the training and food you log so it can follow you between your devices, and you can export or delete all of it whenever you like.
No telemetry. There is no analytics SDK, no advertising network, no cross-site tracking, and no third-party scripts watching what you do. Nothing about your behaviour is collected or sold — there is no business model that depends on it.
What we store
So that your data is there on every device you sign in on, the following is kept on the NOXFORGE server, tied to your account:
- Your training log — sessions, sets, weights, and any custom exercises or routines you make.
- Your food log — meals, calories and macros, and your targets.
- Body weight and any measurements you enter.
- Your settings and preferences.
That is the whole list. We do not ask for, or store, anything we do not need to run the app.
What stays on your device
- Progress photos. Photos you add on the Body screen are stored only in your browser or phone, in local storage. They are never uploaded to our server and never leave your device unless you choose to share them.
- Voice input. When you dictate to the coach, the listening happens in your own browser. Only the resulting text is sent onward — the audio is not.
How you sign in
NOXFORGE uses passkeys — Face ID, Touch ID or a fingerprint, stored by your device. We never see or store a password, because there is no password. If an instance offers Google or email sign-in, that identifier is stored only to recognise you at sign-in. Your session is kept with a single signed cookie; there are no tracking cookies.
The AI coach, and your own provider
The coach is optional and off until you turn it on. When you use it, you supply your own API key from an AI provider (such as Anthropic's Claude or OpenAI). Requests — including the text you send and, if you use meal-photo scanning, that photo — go to your provider under your account, and are governed by that provider's privacy policy. We relay the request; we do not meter it and we do not keep a copy of the conversation to train anything.
Health data
If you connect Apple Health or Android Health Connect, NOXFORGE reads workouts and activity you approve so it can bring them in. It does not write anything back, and imported data is treated like anything else you log — kept for you, shared with no one.
Getting your data out, and deleting it
- Export. One tap exports everything as a JSON file you keep.
- Delete. You can delete your account and its data. Ask at the address below if you cannot find the option, and we will remove it.
Where it runs
The site and app are served through Cloudflare, which processes network traffic to deliver the pages and to protect against abuse. Your account data is stored on the NOXFORGE server.
Children
NOXFORGE is not directed at children, and we do not knowingly collect data from anyone under the age required to consent in their country.
Changes
If this policy changes in a way that matters, we will update the date above and, for a material change, say so in the app.
Contact
Questions, or a request about your data: support@noxforge.osixlab.com.