Privacy Policy
How we collect, use, share, and protect personal data when you use Forzelite.
Last updated: Pending legal review
1. Overview
This Privacy Policy describes how Forzelite (“Forzelite,” “we,” “us”) processes personal data in connection with our strength & conditioning platform and related websites and applications (the “Services”). It explains the categories of data we handle, why we handle them, and the choices and rights available to you.
We act as a data controller for data we collect about visitors and account holders, and as a data processor for athlete and program data that our customers (coaches and organizations) submit to the Services. Where we act as a processor, our handling of that data is governed by our customer agreements and the Data Processing Addendum.
2. Data We Collect
We may collect the following categories of personal data:
- Account data — name, email address, role, and organization details provided at signup.
- Athlete and performance data — training programs, session logs, recovery metrics, and related inputs submitted by coaches or athletes.
- Billing data — subscription and payment metadata (payment card details are handled by our payment processor, not stored by us).
- Usage and device data — log data, IP address, browser type, and aggregated product analytics.
- Communications — messages you send to our support or sales teams.
3. How We Use Data
We use personal data to:
- provide, maintain, and improve the Services;
- authenticate users and secure accounts;
- process billing and manage subscriptions;
- provide support and respond to requests;
- generate aggregated, de-identified insights and analytics; and
- comply with legal obligations and enforce our terms.
4. Legal Bases (GDPR)
Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases: performance of a contract, legitimate interests (such as securing and improving the Services), compliance with legal obligations, and consent (for example, non-essential cookies). You may withdraw consent at any time without affecting prior processing.
7. Subprocessors
The following categories of subprocessors may process personal data on our behalf. This list is a template and will be reconciled with the verified production vendor list before launch.
| Subprocessor (category) | Purpose | Location |
|---|---|---|
| Cloud infrastructure provider | Application hosting, compute, storage, and networking | United States / EU regions |
| Managed database provider | Primary application database and backups | United States / EU regions |
| Payment processor | Subscription billing and payment processing | United States |
| Transactional email provider | Account, billing, and notification emails | United States |
| Error monitoring and logging provider | Application observability and incident diagnosis | United States |
| Product analytics provider | Aggregated, privacy-respecting usage analytics | United States / EU regions |
| Customer support tooling | Support ticketing and customer communication | United States |
8. Data Retention
We retain personal data for as long as needed to provide the Services and for legitimate business and legal purposes. Customers can request deletion of athlete and program data subject to applicable retention obligations.
9. Your Rights
Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. To exercise these rights, contact us using the details below.
10. Minors
The Services may be used to manage data about minor athletes by their coaches and guardians. Where applicable (for example, under FERPA or similar regimes), such processing is governed by our customer agreements and the appropriate parental/guardian consent collected by our customers.
11. Security
We implement administrative, technical, and organizational measures designed to protect personal data, including encryption in transit, role-based access controls, and tenant data isolation. No method of transmission or storage is perfectly secure.
12. Contact
For privacy questions or to exercise your rights, contact us at privacy@forzelite.com.