PRIVACY POLICY

CONTROLLER + CONTACT

SENTINEL FORGE™ is a product of ANQ LLC, a Wyoming limited liability company. ANQ LLC is the data controller for the SENTINEL FORGE application (“the Service”). This Privacy Policy explains how ANQ LLC collects, uses, stores, shares, and protects personal information.

Principal office: 2330 Poe Road, Secane, PA 19018, USA.

Questions, data-rights requests, or complaints: use the contact form. ANQ LLC has not designated a Data Protection Officer or an EU/UK representative (pending). Users in the EU/EEA/UK may make contact directly using the form above.

DATA COLLECTED

• Account information — callsign, email address, authentication credentials, optional military branch and MOS. When you create an account, SENTINEL FORGE records how you found it: the campaign name and source on the link you followed and the address of the page that sent you (without anything after the "?"). ANQ LLC uses it only to understand where people find SENTINEL FORGE. It is never sold or used for advertising.
• Demographics — height, weight, date of birth, biological sex (for baseline calibration).
• Fitness data — workout logs, exercise sets, ACFT scores, nutrition entries, body composition, and daily activity (steps, active energy, active minutes) from connected wearables. Daily activity reaches SENTINEL FORGE through a wearable’s own connection, not through Apple Health or Health Connect — SENTINEL FORGE does not request step permissions from either health platform.
• Health metrics — heart rate, resting heart rate, HRV, VO2 max (cardio fitness), oxygen saturation (SpO2 / blood oxygen), respiratory rate, sleep duration, sleep stages, sleep efficiency, bed and wake times, wake episodes, snoring episodes, skin temperature, stress signals, recovery scores, training strain, Body Battery, lactate threshold heart rate, menstrual cycle and menstrual symptoms (optional), and ECG (electrocardiogram) readings. An ECG reading includes the result classification, the average heart rate for the reading, and the recorded waveform itself — not a single number. Availability varies by device and platform — SENTINEL FORGE receives only what your connected hardware and health platform actually provide.
• Device data — OAuth tokens, sensor-sourced records, device identifiers for connected peripherals.
• Media — body-scan photos, meal photos, barbell plate-scan photos, marksmanship target photos, food barcode photos, Form Check video clips, and lab-result documents that you upload. Any image analysed by a feature leaves your device and is processed by Anthropic’s Claude vision model — without exception, and not on-device (see AI Features). Only the result is kept, not the image.
• Audio — short voice recordings captured only while you actively use voice logging, sent for speech-to-text transcription. On every platform, including iOS and Android, that recording leaves your device and is transcribed by a third party (Apple, Google, your browser vendor, or OpenAI — see Sub-processors). SENTINEL FORGE does not record in the background, there is no always-on listening, and ANQ LLC does not retain the audio after transcription.
• Usage + diagnostics — app events, error logs, IP address, browser / OS, timestamps.
• Signup progress (before you have an account) — when you start creating an account, SENTINEL FORGE records which step of the signup form you reached, the time, your platform (iOS / Android / web) and the app version, to identify where the process is failing people. It is tied to a random token generated on your device, not to you: it contains no name, email, callsign, IP address or device identifier, it is not derived from your device, it does not survive reinstalling the app, and it cannot be traced back to a person. If you finish signing up, the token is deleted from your device. It is never used for advertising, never shared, and never follows you to any other app or website.
• Communication — contact-form submissions, email replies, support tickets.

LEGAL BASIS (GDPR ART 6)

• Performance of a contract — account creation, subscription billing, core app function.
• Consent — optional features (AI features, marketing email, sensor linking). You can withdraw consent in Settings at any time.
• Legitimate interest — error tracking, fraud prevention, aggregated analytics, security monitoring.
• Legal obligation — tax records, responding to lawful requests from authorities.

HOW YOUR DATA IS USED

• Deliver personalized fitness analytics and performance dashboards.
• Generate AI-powered workout, recovery, nutrition, and cycle recommendations.
• Track progress across strength, endurance, and readiness metrics.
• Provide leaderboards, groups, chat, and head-to-head challenges when enabled by you.
• Debug errors, monitor abuse, and improve the Service.
• Send transactional email (account, billing, password reset). Marketing email is opt-in only.

ANQ LLC does not sell your personal data, and does not use your data for cross-site advertising.

SUB-PROCESSORS + SERVICES

ANQ LLC shares data only with the service providers necessary to operate the Service:

• Anthropic (Claude API) — AI Coach, Form Check, Body Scan, Meal Scan, training guidance. Data is sent only when you use AI features. Anthropic does not train on API inputs under their Commercial Terms.
• Microsoft Azure — application hosting, PostgreSQL database, object storage, CDN. United States region.
• Stripe — payment processing (subscriptions, one-time purchases). Card data is handled entirely by Stripe; ANQ LLC receives only billing metadata.
• Printify — print-on-demand production and shipping for SWAG store orders. When you place a SWAG order, the shipping name and address you enter at checkout are received and stored by ANQ LLC to process, ship and support that order, and are shared with Printify — along with the items ordered — so it can be produced and delivered. Printify never receives your payment details, and nothing from your training data.
• Resend — transactional email delivery (password reset, receipts, account notices).
• Capgo — over-the-air updates for the mobile app bundle.
• Sentry — crash and performance monitoring. ANQ LLC scrubs PII where reasonably feasible.
• Google Play — Android app distribution and in-app billing (once enabled). Separately, Google’s speech-recognition service receives your voice recordings when you use voice logging on Android — see the speech-to-text entry below.
• Apple — iOS app distribution via the App Store and in-app purchase processing. Apple provides subscription status and transaction identifiers; ANQ LLC does not receive your payment card details. Apple’s speech-recognition service also receives your voice recordings when you use voice logging on iOS — see the speech-to-text entry below.
• RevenueCat — subscription and entitlement management across the App Store and Google Play. Receives your account identifier and purchase/subscription events so the app knows which tier you are entitled to.
• Google Firebase — app-event analytics and push-notification delivery for the mobile app. Firebase receives in-app event names and a pseudonymous app-instance identifier, plus a device push token on iOS. SENTINEL FORGE uses the Analytics build that has no advertising-identifier support: the IDFA is not collected, you are not tracked across other companies’ apps or websites, and this data is not used for advertising. This is a separate service from Google Play above.
• Speech-to-text providers (Apple, Google, your browser vendor, and OpenAI) — voice logging sends a short recording for transcription, only while you are actively using a voice feature. On every platform, your voice recording leaves your device and is transcribed by a third party. Which one depends on your device: your device’s or browser’s own speech-recognition service is tried first where one exists — Apple’s on iOS, Google’s on Android, your browser vendor’s on the web. These services are not restricted to on-device processing, so they may transcribe your audio on their servers; whether any given recording is handled on your device or on theirs is decided by that provider and your device, and is not something ANQ LLC controls or is told. If no such service is available, or it fails, or it returns nothing usable, the recording is sent to OpenAI (Whisper API) instead — OpenAI does not train on API inputs under their API terms. SENTINEL FORGE does not record in the background, there is no always-on listening, and ANQ LLC does not retain the audio after transcription.
• OpenFoodFacts — barcode and packaged-food lookups. Barcode scans query the OpenFoodFacts database directly from your device.
• Spoonacular — recipe search for meal recommendations. Receives your remaining macro targets for the day.
• USDA FoodData Central — nutrition database lookups for food search. Receives the food text you search for.
• Third-party sensor providers — Oura, Fitbit, Eight Sleep, Suunto, Withings, Whoop, Ultrahuman, Garmin, Google Health. SENTINEL FORGE requests only the scopes needed for performance tracking, and does not push your data back to these providers. A Fitbit device connects through the Google Health API — see Google Health API Data below.

AI FEATURES

SENTINEL FORGE uses Anthropic’s Claude model to generate workout analysis, training recommendations, recovery notes, meal parsing, and body-scan analysis. When you invoke an AI feature, relevant fitness and biometric data is sent to Anthropic for processing and discarded by them after the response is returned (per their Commercial Terms). AI output is probabilistic and may contain errors. You are responsible for evaluating AI guidance against your own judgment and professional advice. AI outputs are not medical advice.

Photographs. Every feature that analyses an image you supply sends that image to Anthropic’s Claude vision model. As of this writing that is the barbell plate scanner, the food barcode scanner (which photographs a product barcode and reads the digits printed beneath it), the marksmanship target scanner, Form Check, the body-composition scan, and meal photo scan / import — but the rule is the category, not this list: if a feature reads a picture, the picture is sent. The image leaves your device and is processed on Anthropic’s servers — ANQ LLC does not perform this analysis on-device and does not restrict these services to on-device processing. ANQ LLC does not store the image after the analysis returns; only the result (a weight, a score, a barcode number, a macro estimate) is saved to your account. Anything else visible in the frame is sent along with the subject, so point the camera at what you intend to capture.

GARMIN CONNECT DATA

This section describes specifically how SENTINEL FORGE collects, uses, processes, and stores data from Garmin Connect, and whether that data is shared with or processed by any third party. It applies only if you choose to connect a Garmin account.

• What is collected — when you connect Garmin Connect and grant access, SENTINEL FORGE receives, through Garmin’s Health and Activity APIs, the health and activity summaries your device records: heart rate and resting heart rate, heart-rate variability, Body Battery / recovery, stress, oxygen saturation (SpO2), respiratory rate, VO2 max, sleep, steps and calories, and activity summaries. If you use Garmin’s menstrual-cycle tracking (Women’s Health), SENTINEL FORGE also receives your cycle summaries. SENTINEL FORGE requests only the read scopes it uses and receives only what your device actually reports.
• How it is used — to power your performance dashboards, to compute your TALOS readiness and recovery scores, and to generate AI training, nutrition, sleep, recovery, and cycle recommendations. SENTINEL FORGE does not use Garmin data for advertising and does not sell it.
• Third-party processing (AI). Values derived from your Garmin data are sent to Anthropic (Claude API), ANQ LLC’s AI sub-processor, when you use an AI feature — specifically rolling multi-day averages, computed readiness and pillar scores, and a bounded sample of recent daily summaries. Raw sub-daily sensor streams are not sent to the AI. For Women’s Health, only your derived cycle phase and timing (current phase, day within the cycle, cycle length) are sent to Anthropic to tailor training, nutrition, and recovery guidance; your raw cycle logs are not transmitted to the AI. Anthropic does not train on API inputs under their Commercial Terms and discards the data after the response is returned. No other third party receives your Garmin data for its own purposes; the infrastructure providers listed under Sub-processors (for example Microsoft Azure hosting and Sentry error monitoring) process it only to operate and secure the Service.
• Where it is stored — Garmin data is stored encrypted at rest in SENTINEL FORGE’s United States infrastructure (Azure PostgreSQL), and the OAuth tokens that authorize the connection are stored encrypted. It is retained while your account is active and deleted within 30 days of an account-deletion request.
• Not shared back, and revocable — SENTINEL FORGE only reads from Garmin; it does not push workouts, courses, or any data back to Garmin Connect. You can disconnect Garmin at any time in Settings, which stops further collection and revokes the tokens.

GOOGLE HEALTH API DATA

Since Build 20.0.31, a Fitbit device connects to SENTINEL FORGE through the Google Health API rather than Fitbit’s own web API, which Google has retired. This section describes specifically what SENTINEL FORGE reads through that API, how it is used, and who else processes it. It applies only if you choose to connect a Fitbit or Google Health account.

• What is collected — SENTINEL FORGE requests only the read scopes it uses, and receives only what your device actually reports:
  Activity and fitness — steps, active energy, workouts, VO2 max.
  Health metrics and measurements — resting heart rate, heart-rate variability, oxygen saturation, respiratory rate, weight, body fat.
  Sleep — sleep sessions and stages.
  ECG — electrocardiogram readings, including the result classification, the average heart rate for the reading, and the recorded waveform.
• No reproductive-health data is read through Google Health — SENTINEL FORGE does not request Google’s reproductive-health permission from any operator, because the Google Health API does not currently support reading period records. If you granted that permission earlier, it is no longer used: disconnecting Fitbit in Settings asks Google to revoke it, and you can also remove it directly in your Google account. Your cycle information itself never comes from this connection; where you use cycle-aware guidance, the cycle comes from what you enter in the app or share from another connected service (see Garmin Connect data above).
• How it is used — to power your performance dashboards, to compute your TALOS readiness and recovery scores, and to generate AI training, nutrition, sleep, recovery and cycle recommendations. SENTINEL FORGE does not use Google Health data for advertising and does not sell it.
• Third-party processing (AI). Values derived from your Google Health data are sent to Anthropic (Claude API), ANQ LLC’s AI sub-processor, when you use an AI feature — rolling multi-day averages, computed readiness and pillar scores, and a bounded sample of recent daily summaries. Raw sub-daily sensor streams are not sent to the AI. ECG waveforms are never sent to the AI. Anthropic does not train on API inputs under their Commercial Terms and discards the data after the response is returned.
• Where it is stored — Google Health data is stored encrypted at rest in SENTINEL FORGE’s United States infrastructure (Azure PostgreSQL), and the OAuth tokens that authorize the connection are stored encrypted. It is retained while your account is active and deleted within 30 days of an account-deletion request.
• Not shared back, and revocable — SENTINEL FORGE only reads from the Google Health API; it does not write anything back. You can disconnect at any time in Settings, which stops further collection and revokes the tokens, and you can revoke access directly in your Google account.
• Limited Use — SENTINEL FORGE’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: the use of information received from Google Health API and/or Developer Tools will adhere to the Google Health API Developer and User Data Policy, including the Limited Use requirements. SENTINEL FORGE does not transfer, sell or use this information for advertising, and does not use it with any product that qualifies as a medical device or in any manner involving Protected Health Information as defined by HIPAA.

INTERNATIONAL TRANSFERS

SENTINEL FORGE infrastructure is hosted in the United States. If you access the Service from the EU, EEA, UK, or elsewhere outside the U.S., your data will be transferred to and processed in the United States. Where required, such transfers are governed by the Standard Contractual Clauses (SCCs) issued by the European Commission, including the UK Addendum.

DATA STORAGE AND SECURITY

Your data is encrypted at rest using Azure PostgreSQL with encryption enabled and encrypted in transit via HTTPS/TLS 1.2+. OAuth tokens for connected peripherals are stored encrypted. Passwords are hashed using industry-standard adaptive hashing. Access is restricted to authorized personnel on a least-privilege basis. No security program is perfect; ANQ LLC will notify affected users and regulators of material breaches as required by law.

DATA RETENTION

• Account + fitness + health data — retained while your account is active. Deleted within 30 days of account deletion request.
• Error + diagnostic logs — 90 days.
• Signup progress events — 12 months, then deleted automatically.
• Email metadata (Resend) — 90 days.
• Billing records — retained for 7 years to meet U.S. tax obligations.
• SWAG order shipping details — the shipping name, phone, address and email on a store order are removed from ANQ LLC’s records 90 days after the order is released to production (or, if it was cancelled first, 90 days after it was placed). The order itself — what was bought, what was paid, and the payment and print references — stays under Billing records. Deleting your account removes these details from any completed order at once; an order that has not shipped keeps its address until it does.
• Backups — encrypted backups rotate out within 35 days.

YOUR RIGHTS

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — delete your data (“right to be forgotten”).
• Portability — export your data in a machine-readable format.
• Objection + restriction — object to or restrict processing.
• Automated decision-making — the Service uses algorithmic scoring for readiness and training recommendations. You can request human review of any automated output that materially affects you.
• Withdraw consent — for any consent-based processing.
• Complain to a regulator — EU/UK users may lodge a complaint with their supervisory authority.

Exercise these rights in-app (Settings → Account) or via the contact form. ANQ LLC responds within 30 days (GDPR) or 45 days (CCPA).

CCPA (CALIFORNIA) + STATE PRIVACY

California residents, and residents of other U.S. states with comprehensive privacy laws (Colorado, Connecticut, Virginia, Utah, and others) have the rights described above, including the right to know, delete, correct, and opt out of the “sale” or “sharing” of personal information. ANQ LLC does not sell or share your personal information as those terms are defined under the CCPA.

A “Do Not Sell or Share My Personal Information” link is not required because ANQ LLC does not engage in such activity. If this ever changes, the link will be added and this policy updated with reasonable notice.

COOKIES + TRACKING

SENTINEL FORGE uses cookies (or equivalent local storage) for session authentication, user preference storage, and one random token that links the steps of a single signup attempt together (see “Signup progress” above). That token is deleted from your device as soon as the account is created; if you do not finish signing up it stays on your device until you clear your browser data or remove the app. Before you create an account, the SENTINEL FORGE web app keeps a small note in your browser of the link that brought you there (the campaign name and source, and the page that sent you, without anything after the "?"), so it can be saved with your account when you sign up. The note is deleted from your browser once your account is created or you sign in. If you never sign up or sign in, it stays in your browser until you clear your browser data. SENTINEL FORGE does not use third-party advertising cookies, cross-site trackers, or third-party analytics cookies.

AGE + ELIGIBILITY

SENTINEL FORGE is rated for users aged 13 and over. Accounts are not restricted by age above that minimum. ANQ LLC does not knowingly collect personal information from anyone under 13; if ANQ LLC becomes aware that a user under 13 has created an account, that account and its data will be deleted.

In the EU/EEA/UK the age at which a person may consent to data processing without parental authorization is set nationally and ranges from 13 to 16. Where a user is below the threshold in their country, a parent or guardian must provide that consent.

Training, nutrition, and recovery carry physical risk at any age. SENTINEL FORGE is a fitness and performance tool, not a medical device, and nothing it produces is medical advice, diagnosis, or treatment. Consult a qualified physician before beginning or changing any training, nutrition, or recovery programme, particularly if you are pregnant, managing an injury or a medical condition, or taking medication. Stop exercising and seek medical attention if you experience pain, dizziness, chest discomfort, or difficulty breathing. Users under 18 should involve a parent, guardian, or coach in decisions about training load, calorie targets, and body-composition goals.

CHANGES TO THIS POLICY

ANQ LLC may update this Privacy Policy from time to time. Material changes will be announced in-app. The “last updated” date at the top reflects the most recent revision. Continued use of SENTINEL FORGE after a change takes effect constitutes acceptance of the updated policy.