Push Forward (pushforward.co)
Last updated: June 17, 2026
Push Forward is an AI fitness coach. You chat with an AI assistant about your workout and health data. To do that, we connect to third-party fitness services on your behalf (currently Hevy and Google Health) and send your conversation — including any fitness data the assistant fetches on your behalf — to Anthropic's Claude API for processing.
Account information. When you sign in with Google, we receive your name, email address, and profile photo from Google. We store these in your user profile.
Conversation history. We store your full chat history, including messages you send and responses from the AI assistant. Conversations may include fitness data retrieved from connected services.
Hevy workout data. If you connect Hevy, we use your Hevy API key to fetch your strength-training workouts (exercises, sets, reps, weights, and timestamps) on your behalf when the AI needs them to answer your questions. Fetched data is stored as part of your conversation history.
Google Health data. If you connect Google Health, we use your authorization to fetch the following kinds of data on your behalf when the AI needs them:
Push Forward reads from Google Health only — it does not write, modify, or delete any data in your Google account. Data fetched from Google Health is stored as part of your conversation history.
Third-party credentials. Your Hevy API key (a long-lived secret you paste in) and your Google Health refresh token (obtained through Google's OAuth consent flow) are encrypted at rest before storage — see Security below.
Usage metadata. We store token counts and estimated AI costs associated with each conversation for operational monitoring.
We do not sell your data. We do not use your data for advertising. We do not use your data — or share your data with anyone who uses it — to train AI models. See Sub-processors below for how this applies to Anthropic.
Anthropic (Claude AI). Anthropic is a sub-processor for Push Forward. Your conversation messages — including any fitness data the assistant has fetched from connected services and included in the conversation — are sent to Anthropic's Claude API to generate the assistant's responses. Data sent to Anthropic's API is not used to train their AI models. Per Anthropic's commercial terms, API request and response data may be retained for up to 30 days for Trust & Safety purposes (abuse detection and incident investigation) before being deleted. Anthropic's handling of API data is governed by their Commercial Terms of Service and Privacy Policy.
Google Firebase and Google Cloud. We use Firebase Authentication for sign-in and Cloud Firestore (on Google Cloud Platform) to store accounts, conversations, and credentials. Data is stored in the United States. Google's handling of this data is governed by their terms of service.
Hevy. When you connect your Hevy account, we use the Hevy API with the API key you provided to retrieve your workout data. Hevy's handling of your account and data is governed by Hevy's privacy policy.
Google Health. When you connect Google Health, we use the Google Health API with the refresh token granted by your Google account to read the data types listed above. Google's handling of this data is governed by the Google Privacy Policy.
Your account, conversation history, and connected-service credentials are retained for as long as your account is active. We do not currently offer an in-app deletion or export button — see Data Deletion below for how to request deletion by email. Conversations included in API requests to Anthropic may be retained by Anthropic for up to 30 days for Trust & Safety, as described above.
To request deletion of your Push Forward account and associated data — including your user profile, conversation history, encrypted Hevy API key, and encrypted Google Health refresh token — email [email protected] from the email address on your account. We will action requests within 30 days.
You can also independently revoke Push Forward's access to your connected services at any time, without contacting us:
An in-app, self-service account deletion flow is planned and tracked as a follow-up item.
All users may request access to, correction of, or deletion of their personal data by contacting us. We will respond within 30 days.
European Economic Area (GDPR). If you are in the EEA, you have the right to:
Our legal basis for processing your data is your consent (by creating an account and using the service) and legitimate interest (operating and improving the service). Your data is transferred to the United States for processing. By using Push Forward, you consent to this transfer.
To exercise any of these rights, contact us at [email protected].
California (CCPA). If you are a California resident, you have the right to:
To exercise any of these rights, contact us at [email protected].
We may update this policy from time to time. We will notify users of material changes by posting the updated policy with a new "Last updated" date.
For questions about this privacy policy or your data, contact us at [email protected].