Sony Center, Kemperplatz 1 10785 Berlin, Germany
Privacy Policy

Privacy Policy

Effective Date: 1 March 2026

Your Data. Your Progress. Your Control. At Physique Forge X, your data supports your growth – not the other way around.

This Privacy Policy explains how Barlize UG (haftungsbeschränkt) (“Company”, “we”, “us”) collects, processes, and protects personal data when you use the Physique Forge X mobile application (the “App”).

If you have any questions, you may contact us at any time.

1. Scope of Application

This Privacy Policy applies exclusively to the Physique Forge X mobile application and its related in-app features and services.

It does not apply to other products, services, or websites operated by Barlize UG (haftungsbeschränkt), including the Barlize online shop or any separate digital offerings.

2. Controller (GDPR)

Barlize UG (haftungsbeschränkt)
10785 Berlin, Germany
E-Mail: contact@barlize.de

We are the controller within the meaning of the General Data Protection Regulation (GDPR).

3. Data We Collect

To provide personalized training and nutrition functionality, we may process the following data:

a) Account Data

  • Email address

b) Profile & Health-Related Data

  • Age
  • Height
  • Weight
  • Fitness status
  • Workout frequency
  • Meal consumption

This data is processed solely for fitness and lifestyle optimization within the App.
No medical analysis, diagnosis, or evaluation of any health condition is performed.

c) Food Tracking Features

  • Food photos (for AI-based nutritional estimation)
  • Barcode scan inputs

Food photos are processed solely for the purpose of providing calorie and macronutrient estimations. Images are not permanently stored unless technically required to provide the feature. Food images are not used to train AI models.

d) Technical Data

  • Device type
  • App version
  • IP address (temporarily for security purposes)

4. Purpose of Processing

We process personal data to:

  • Operate and provide the App
  • Generate AI-based fitness and nutrition recommendations
  • Maintain system stability and security
  • Prevent fraud and misuse
  • Provide customer support

5. Legal Basis (GDPR)

Processing is based on:

  • Article 6(1)(b) GDPR – performance of a contract
  • Article 6(1)(f) GDPR – legitimate interests (IT security, fraud prevention)
  • Article 6(1)(c) GDPR – compliance with legal obligations

You may withdraw your consent at any time with effect for the future, including by deleting your account.

6. Hosting & Infrastructure

Our backend infrastructure is hosted within the European Union via infrastructure providers (including Lovable Cloud EU).

Where required, Data Processing Agreements (DPAs) pursuant to Article 28 GDPR are in place.

We do not:

  • Use your data to train AI models
  • Sell your personal data
  • Share health-related data with third parties for advertising, marketing, or analytics purposes
  • Conduct tracking for personalized third-party advertising
  • Store payment card information

Payments are processed exclusively by the respective platform providers (e.g., Apple App Store or Google Play).

7. AI Processing

AI features analyze only the data you actively provide.

AI-generated outputs:

  • May contain inaccuracies
  • Do not constitute medical advice
  • Serve informational and supportive purposes only

There is no automated decision-making producing legal or similarly significant effects within the meaning of Article 22 GDPR.

AI features analyze fitness and lifestyle data solely for training optimization purposes.
The App does not diagnose, assess, or evaluate any medical or health condition.

7a. Not a Medical Device

Physique Forge X is not a medical device within the meaning of the EU Medical Device Regulation (MDR).

The App is intended solely for general fitness and nutrition purposes and does not replace professional medical advice, diagnosis, or treatment.

8. Data Retention & Account Deletion

We retain personal data only as long as your account remains active and/or as required by applicable law.

Users may delete their account at any time directly within the App. Upon account deletion:

Personal data will be deleted within 30 days, unless legal retention obligations apply.

Technical backup copies will be deleted no later than 90 days thereafter.

9. Your Rights (GDPR)

You have the right to:

  • Access your data (Art. 15 GDPR)
  • Rectify inaccurate data (Art. 16 GDPR)
  • Erase data (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw consent (Art. 7(3) GDPR)

To exercise your rights, contact: contact@barlize.de

You also have the right to lodge a complaint with a supervisory authority within the European Union.

10. Children

The Service is intended only for individuals aged 16 and older.

We do not knowingly collect personal data from individuals under the age of 16. If we become aware of such processing, we will delete the data without undue delay.

11. Updates

We may update this Privacy Policy when necessary.

The effective date at the top of this document indicates the latest revision.