PRIVACY POLICY

1. INTRODUCTION

Forge ("we," "us," "our," or "Company") operates the Forge personal development platform (the "Service"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform.

This Privacy Policy explains our data practices, what information we collect, how we use it, and your rights regarding your personal information. By accessing and using Forge, you consent to the practices described in this policy.

2. INFORMATION WE COLLECT

Account Information

When you sign up for Forge, we collect: email address, name, password (hashed for security), and account creation date.

Check-In & Performance Data

We collect and store your daily check-in data, including: daily scores (mindset, energy, hunger ratings), affirmations and mantras, morning goals and evening reflections, task management data, progress metrics and streak counts, wins and accomplishments, and goals/vision statements.

AI Coach Interactions

Our AI Growth Coach uses your check-in data, goals, and conversation history to provide personalized coaching. We store your coaching conversations and AI-generated recommendations to improve the service.

Usage Information

We automatically collect: IP address, device type and browser information, pages visited and features used, time spent on the app, and general app analytics for performance monitoring.

Community Data

If you choose to participate in our community features (sharing affirmations, mantras, or wins), that information may be visible to other users as you specify.

3. HOW WE USE YOUR INFORMATION

• To provide the Service: Process your account, deliver check-ins, generate progress reports, power the AI Coach, and track performance metrics.
• To improve Forge: Analyze usage patterns, fix bugs, optimize features, and build new capabilities.
• To communicate with you: Send service updates, announcements, support responses, and feature releases. You can control communication frequency in your settings.
• For security & compliance: Detect fraud, prevent abuse, enforce our terms, and comply with legal obligations.
• For personalization: Tailor the AI Coach's responses, recommend features, and customize your experience based on your goals and progress.

4. DATA SECURITY & STORAGE

Your data is stored securely in our Neon PostgreSQL database with encryption at rest. We use industry-standard security practices including:

• HTTPS encryption for all data in transit
• Password hashing with bcrypt
• HTTP-only secure cookies for sessions
• Regular security audits and monitoring

While we implement strong security measures, no system is 100% secure. We encourage you to use a strong password and never share your login credentials.

5. DATA SHARING & THIRD PARTIES

We do not sell your personal data. Your check-in data, goals, and coaching conversations are strictly private. However, we may share information in these cases:

• Service Providers: We use third-party services for hosting (Vercel), database management (Neon), and analytics. These providers are contractually obligated to protect your data.
• Legal Requirements: If required by law, court order, or government request, we may disclose information.
• Business Transfers: If Forge is acquired or merged, your data may be transferred as part of that transaction.
• Community Features: If you choose to share affirmations, mantras, or wins publicly, other users will see that content.

6. YOUR PRIVACY RIGHTS

Depending on your location, you may have the following rights:

• Access: Request a copy of all personal data we hold about you.
• Correction: Ask us to update inaccurate or incomplete information.
• Deletion: Request deletion of your account and associated data. We will comply within 30 days.
• Portability: Receive your data in a portable format to transfer to another service.
• Opt-Out: Unsubscribe from marketing communications and disable non-essential analytics.

To exercise any of these rights, email us at privacy@forge.app with your request.

7. COOKIES & TRACKING

Forge uses cookies and session tokens to:

• Keep you logged in securely
• Remember your preferences
• Track usage analytics to improve the service
• Prevent fraud and unauthorized access

You can disable cookies in your browser settings, but this may affect functionality. We do not use third-party tracking pixels or allow ad networks to track your behavior on Forge.

8. CHILDREN'S PRIVACY

Forge is not intended for children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from anyone under 13. If we become aware that a child has provided us with personal information, we will delete such information immediately. Parents or guardians who believe a child has provided information to Forge should contact us at privacy@forge.app.

9. DATA RETENTION

We retain your personal data for as long as your account is active. After you delete your account, we retain data for up to 30 days to comply with legal obligations and prevent fraud. If you request data deletion, we will remove all information within 30 days, except where retention is required by law.

10. INTERNATIONAL DATA TRANSFERS

Your information may be processed and stored in the United States. By using Forge, you consent to the transfer of your data outside your country of residence. We will protect your data with appropriate safeguards as described in this policy.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by displaying a notice on the Forge platform. Your continued use of Forge after changes constitutes your acceptance of the updated Privacy Policy.

12. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: privacy@forge.app

We will respond to your inquiry within 14 business days.