← Back to home

Privacy Policy

Push Forward (pushforward.co)
Last updated: March 20, 2026

What Push Forward Does

Push Forward is an AI fitness coach. You chat with an AI assistant about your workout data. To do this, we connect to third-party fitness services (like Hevy) on your behalf and send your conversation to Anthropic's Claude AI.

What We Collect

Account information. When you sign in with Google, we receive your name, email address, and profile photo from Google. We store these in your user profile.

Conversation history. We store your full chat history, including messages you send and responses from the AI assistant. Conversations may include workout data retrieved from connected services.

Fitness data. When you connect a fitness service (e.g., Hevy), we retrieve your workout data through their API. This data is included in your conversations with the AI and stored as part of your chat history.

Third-party API keys. If you provide an API key for a connected service, we encrypt it at rest using AES-256 encryption and store it in your user profile. We never store API keys in plaintext.

Usage metadata. We store token counts and estimated costs associated with each conversation for operational monitoring.

How We Use Your Data

We do not sell your data. We do not use your data for advertising.

Third-Party Services

Anthropic (Claude AI). Your conversation messages, including any workout data included in the conversation, are sent to Anthropic's API for processing. Anthropic's use of this data is governed by their usage policy.

Google Firebase. We use Firebase Authentication for sign-in and Cloud Firestore for data storage. Your data is stored on Google Cloud Platform infrastructure in the United States. Google's handling of this data is governed by their terms of service.

Hevy. When you connect your Hevy account, we use the Hevy API to retrieve your workout data. We access your data using the API key you provide. Hevy's handling of your data is governed by their own privacy policy.

Data Retention

Your account and conversation data are retained as long as your account is active. We do not currently offer automated data export or deletion, but you can request deletion of your data by contacting us.

Security

Your Rights

All users may request access to, correction of, or deletion of their personal data by contacting us. We will respond within 30 days.

European Economic Area (GDPR). If you are in the EEA, you have the right to:

Our legal basis for processing your data is your consent (by creating an account and using the service) and legitimate interest (operating and improving the service). Your data is transferred to the United States for processing. By using Push Forward, you consent to this transfer.

To exercise any of these rights, contact us at [email protected].

California (CCPA). If you are a California resident, you have the right to:

To exercise any of these rights, contact us at [email protected].

Changes to This Policy

We may update this policy from time to time. We will notify users of material changes by posting the updated policy with a new "Last updated" date.

Contact

For questions about this privacy policy or your data, contact us at [email protected].