Articles ← Back to app

Privacy Policy

Last updated: August 9, 2026

This policy is drafted to match the app's current functionality and has not been reviewed by a lawyer. It should be checked against applicable Polish/EU law before being relied on for compliance.

Who We Are

ForceIndex ("we", "us", "our") is a fitness tracking application available at force-index.com. We help users track workouts, nutrition, and water intake.

Data Controller:
Artur Tykhyi
ul. Seminaryjska 6/8, m. 3
Kielce, Poland
[email protected]

What Data We Collect

When you use ForceIndex, we collect:

We do not collect precise GPS location or payment card details (we do not currently process payments directly).

How We Use Your Data

We do not sell or rent your personal data. Some data is shared with the service providers below strictly to operate the app.

Other Users Can See Some of Your Data

If you use the Friends feature, other users you connect with can see information such as your display name, avatar, subscription tier, and shared activity/stats relevant to that feature.

AI Features

ForceIndex uses OpenAI's API to power its AI chat/coaching feature. When you use it, the assistant can pull in your current profile (name, weight, height, age, gender, body fat %, body measurements), weight history, workout history, and nutrition history/goals to answer your question — this data is sent to OpenAI to generate the response. OpenAI's own privacy policy applies to how they process it. Don't share information in the AI chat that you would not want processed by a third-party AI provider.

Third-Party Service Providers

We use the following processors to operate ForceIndex. Each only receives the data needed for its purpose:

International transfers: some providers above are based outside the European Economic Area. Where that is the case, we rely on the safeguards they offer (such as the EU-U.S. Data Privacy Framework or standard contractual clauses) as provided in their own terms.

Data Storage and Security

Your data is stored on secure servers. We use bcrypt for password hashing and JWT tokens for session management. All data is transmitted over HTTPS. We retain your data for as long as your account is active, and delete it on request (see "Your Rights").

Your Rights

Under GDPR, you have the right to access, correct, delete, restrict, or export your personal data, and to object to or withdraw consent for processing (e.g. analytics — see Cookie Policy). To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Polish supervisory authority (Urząd Ochrony Danych Osobowych, uodo.gov.pl).

Cookies

We use localStorage and sessionStorage to keep you logged in — this does not require consent. Optional analytics cookies are only set if you consent. See our Cookie Policy for details.

Children

ForceIndex is not directed at children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

Changes

We may update this policy from time to time. Continued use of ForceIndex after changes constitutes acceptance of the updated policy.

Contact

[email protected]