FORGE

Privacy Policy

Effective date: April 26, 2026

This privacy policy describes how FORGE ("FORGE", "we", "us", "our") collects, uses, and shares your information when you use the FORGE iOS app and the forgestreak.com website (together, the "Service"). FORGE is operated by Michael Ellis as an independent developer.

We designed FORGE to collect the minimum data necessary to make a discipline tracker actually work. We do not sell your data, we do not run ads, and we do not share your data with third parties for marketing purposes.

1. Information We Collect

1.1 Information you provide

• Sign in with Apple credentials. When you sign in we receive an Apple-issued user ID, and on first sign-in only, your name and a private relay email address. We never see your real Apple ID password.
• Username. A randomly generated handle assigned on first launch. You can edit it once.
• Discipline data. The disciplines you create, your daily check-ins, streak history, monthly perfect-day counts, and tier progression.
• Friend graph. The list of FORGE users you have accepted invite links from, and the invite link codes you have generated.

1.2 Information collected automatically

• Usage analytics. Anonymized event data about how you use the app (e.g., which screens you visit, when you check in) collected via Firebase Analytics. Used to understand which features matter and to improve the app.
• Crash reports. If the app crashes we collect a stack trace and device model via Firebase Crashlytics so we can fix the bug. Crash reports do not include your discipline data or your name.
• Subscription state. Whether you have an active premium subscription, managed by RevenueCat on top of Apple's StoreKit. We never see your payment method or billing details — those stay with Apple.
• Device information. Standard device identifiers (model, iOS version, app version, timezone, locale) used by the app to render correctly and schedule local notifications at the right time.

1.3 Information we do NOT collect

• We do not access your contacts. Friend invitations work via shareable links only.
• We do not access your photos, microphone, location, or health data.
• We do not track you across other apps or websites.
• We do not collect biometric data.

2. How We Use Your Information

• To provide the Service: render your dashboard, calculate your streaks and tier, schedule your nightly streak-at-risk notification, sync your data across your devices.
• To operate the friends + leaderboard feature: when you accept an invite link, we create a friendship edge between your account and the inviter; your weekly XP becomes visible to your accepted friends inside the app.
• To improve the Service: aggregated analytics tell us which features people use, which onboarding screens drop off, etc.
• To fix bugs: crash reports and error logs.
• To respond to your support requests when you email us.

3. How We Share Your Information

We share your information with the following service providers, who process data on our behalf under their own privacy policies:

• Apple Inc. — Sign in with Apple, App Store payment processing, iOS push notifications (we use only local notifications in v1). See Apple's privacy policy.
• Google LLC (Firebase). — Firebase Authentication, Cloud Firestore (where your discipline and friends data is stored), Firebase Analytics, Firebase Crashlytics. See Firebase's privacy policy.
• RevenueCat, Inc. — Subscription state and entitlement management. See RevenueCat's privacy policy.
• Superwall Labs, Inc. — Paywall presentation and A/B testing. Receives an anonymous user identifier. See Superwall's privacy policy.

We share your information with friends you have accepted on the platform: specifically, your username, your tier, and your weekly XP appear on the leaderboard visible only to users in your friends list. Removing a friend immediately revokes mutual visibility.

We may disclose your information if required by law (e.g., a valid court order), to protect the safety of users, or in connection with a sale or merger of FORGE — in which case you will be notified.

4. Data Retention

Your data is retained for as long as your account exists. If you delete your account in the app's Settings, your user document, discipline records, friend edges, invite codes, and leaderboard entries are deleted from our database within 30 days. Crash logs and aggregated analytics may be retained beyond that for up to 14 months per the underlying provider's defaults.

5. Your Rights

5.1 All users

You can:

• Access and edit your discipline data inside the app.
• Edit your username once.
• Remove a friend at any time, which also removes you from their leaderboard.
• Delete your account and all associated data via Settings → Account → Delete Account.
• Email hello@forgestreak.com with any privacy question or request.

5.2 EU / UK residents (GDPR)

If you are in the EU, UK, EEA, or Switzerland, you have the right to request access to, correction of, deletion of, or restriction of processing of your personal data; the right to data portability; and the right to lodge a complaint with your local data protection authority. To exercise any of these rights, email hello@forgestreak.com. Our legal basis for processing is your consent (when you create an account) and our legitimate interest in operating the Service.

5.3 California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, request deletion of personal information, opt out of the "sale" or "sharing" of personal information (FORGE does not sell or share your data for cross-context behavioral advertising), and not be discriminated against for exercising these rights. Email hello@forgestreak.com to make a request.

6. Children's Privacy

FORGE is not directed at children under 13 (or under 16 in EU/UK jurisdictions). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete the account.

7. Security

Your data is transmitted over HTTPS and stored in encrypted databases operated by Google Cloud (Firebase) and Apple. Authentication uses Apple's Sign in with Apple flow with a SHA256-hashed nonce. Despite our efforts, no internet service is 100% secure — we cannot guarantee absolute security.

8. International Transfers

Firebase data is stored in Google Cloud regions selected by us (currently us-central1). If you access FORGE from outside the United States, your data is transferred to the United States and processed under United States law.

9. Changes to This Policy

We may update this policy when we change how the app works or when laws change. We will post the updated policy at this URL with a new effective date. For material changes we will notify you in the app. Continued use after the effective date constitutes acceptance.

10. Contact

Questions, requests, or complaints? Email hello@forgestreak.com.