Privacy policy for Forge

What Forge stores

• Account: the email address used to sign in (Firebase Authentication).
• Your content: projects, milestones, tasks, ideas, notes, time tracked, recurring tasks and invoices, including any client names, email addresses and postal addresses typed into an invoice.
• Devices: for each phone or computer that uses Forge, a device name, its type, its timezone (so the daily digest arrives at the right local time) and, if notifications are turned on, a push token from Firebase Cloud Messaging.

Where it's stored

In Google Firebase (Cloud Firestore, Cloud Functions, Firebase Authentication and Firebase Hosting), in the United States. The apps also keep a copy on the device so they work without a connection; signing out removes it.

What it's used for

Only to run Forge: showing and syncing your data, sending the daily digest notification, and emailing an invoice when you choose to (sent through Resend to the recipient you enter).

What Forge doesn't do

• No advertising, no analytics or tracking, and no crash-reporting SDKs.
• No selling or sharing of data with anyone, other than the service providers above that run Forge.
• The fingerprint/face/PIN app lock uses your device's own screen lock; Forge never receives or stores any biometric data.

Permissions (Android app)

• Internet: to sync.
• Notifications: the daily digest and the running-timer notification. Optional.
• Biometrics: only if you turn on the app lock.

Keeping and deleting data

Data is kept until it's deleted in the app. To have everything deleted, including the account, email [email protected].

Children

Forge isn't meant for children and doesn't knowingly collect their data.

Changes and contact

Changes to this policy are posted on this page with a new date. Questions: [email protected].