Privacy Policy

1. Who we are

Foryx is the data controller for the personal data described here. You can reach our privacy team at privacy@foryx.com.

2. Data we collect

Account data: name, email, password hash, account type (individual, coach or studio seat) and profile photo if you upload one.

Training data: workouts, logged sets, loads, session history, programme progress, class attendance and personal records.

Health data: readiness and recovery signals, sleep and heart-rate metrics from wearables you connect, body metrics you enter, and — only if you enable it — menstrual cycle information.

Commercial data: subscription tier, purchases, receipts and, for coaches, earnings and payout details.

Technical data: device type, app version, IP address and diagnostic logs used to keep the service secure and working.

3. Health and cycle data

Health, recovery and menstrual cycle data are special category data. We process them only with your explicit consent, given when you enable the relevant feature, and you can withdraw that consent at any time in Settings.

Cycle tracking is optional, can be skipped during onboarding and switched off later. Coaches never see your recovery or cycle data unless you explicitly share it.

4. How we use your data

To run the service: deliver workouts, guide sessions, log training, calculate progression and readiness, and run classes.

To handle payments, subscriptions, entitlements and coach payouts.

To improve Foryx through aggregated, de-identified analysis, and to protect the service against abuse and fraud.

To send service messages. Marketing email is opt-in and can be turned off at any time.

5. Legal bases

Performance of our contract with you (providing the app and your purchases), your consent (health, cycle data, marketing, optional integrations), our legitimate interests (security, product improvement) and legal obligations (tax and accounting records).

6. Sharing

We share data with processors who run infrastructure, payments, email and analytics on our behalf, under contract and only for those purposes. We do not sell your personal data.

Coaches you work with can see the training data you share with them — programme progress and logged sessions — never your private recovery or cycle data unless you choose to share it.

7. Wearables and integrations

If you connect a provider such as Oura, Garmin or Fitbit, we import only the metrics needed for recovery and readiness. You can disconnect at any time, which stops future imports; previously imported data can be deleted on request.

8. Retention

We keep account and training data while your account is active. After deletion we remove or anonymise personal data within 30 days, except records we must retain for legal, tax or dispute-resolution reasons.

9. Your rights

You can access, correct, export, restrict or delete your data, object to certain processing and withdraw consent. Many of these are available directly in Settings; otherwise email privacy@foryx.com and we will respond within 30 days.

You also have the right to complain to your local data protection authority.

10. Security and transfers

Data is encrypted in transit and at rest, access is restricted on a need-to-know basis, and we review our practices regularly.

Where data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses with additional safeguards.

11. Children

Foryx is not intended for anyone under 16. If we learn that we hold data about a child under 16, we delete it.

12. Changes

We will notify you in the app or by email before material changes to this policy take effect.