Legal

Privacy Policy

Last updated: May 2026

1. Who we are

FORGE: Habits is developed and operated as an independent app. For any questions regarding this privacy policy, you can contact us at: hello@forgehabits.app

As a developer based in the Netherlands, we comply with the General Data Protection Regulation (GDPR).

2. What data we collect

We collect the minimum data necessary to provide the service.

a) Data you provide to us:

• Email address — collected when you join our waitlist or create an account. Used only to notify you of app launch or send account-related communications.
• Username — chosen by you during account creation. Used to identify you within the app.

b) Data generated by your use of the app:

• Habit data — habits you create, completions, streaks, and categories. This is stored locally on your device by default.
• Cloud backup snapshots — if you use the cloud backup feature, a snapshot of your habit data is stored securely on our servers (Supabase) to enable restore on a new device. This data is encrypted in transit and at rest.
• XP and league data — your XP earned, league position, and battle results used to power the competitive features.

c) Data we do not collect:

• We do not collect your real name
• We do not collect payment information — all payments are processed by Apple and governed by Apple's privacy policy
• We do not collect location data
• We do not collect contact lists or social media profiles
• We do not serve advertising and do not share data with advertisers

3. How we use your data

• To provide and improve the app and its features
• To send you a launch notification if you joined our waitlist (one email only, unless you opt in to further communications)
• To enable cloud backup and restore of your habit data across devices
• To power the league and competitive features using your XP and completion data
• To respond to support requests

We do not use your data for advertising, profiling, or sell it to any third party under any circumstances.

4. Legal basis for processing (GDPR)

Under GDPR, we process your personal data on the following legal bases:

• Contract performance — processing necessary to provide the app service you have signed up for
• Legitimate interests — improving app performance and security
• Consent — for waitlist email communications, which you can withdraw at any time

5. Data storage and security

Your habit data is stored primarily on your own device using local storage. Cloud backup data is stored on Supabase, a secure cloud database provider, with servers located within the European Union. Data is encrypted in transit (TLS) and at rest.

We retain cloud backup data for as long as your account is active. You can delete your account and all associated data at any time from within the app settings.

6. Third party services

We use a minimal set of third party services:

• Supabase — cloud database for account data and optional habit backup. Supabase Privacy Policy
• Apple App Store — handles all payments for Forge Pro. We never receive or store your payment details. Apple Privacy Policy

We do not use Google Analytics, Facebook Pixel, or any advertising or tracking services.

7. Your rights under GDPR

As a user in the European Union, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can correct inaccurate data at any time within the app
• Right to erasure — you can delete your account and all data from within the app settings
• Right to data portability — you can export your habit data from within the app
• Right to object — you can opt out of any non-essential communications at any time
• Right to withdraw consent — for waitlist emails, simply reply to any email with "unsubscribe"

To exercise any of these rights, contact us at hello@forgehabits.app and we will respond within 30 days.

8. Children's privacy

FORGE: Habits is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it immediately.

9. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. For significant changes, we will notify you via email if you have an account with us.

10. Contact

If you have any questions about this privacy policy or how we handle your data, please contact us:

---

This privacy policy was written in plain language intentionally. We believe you deserve to understand exactly how your data is used without having to read legal jargon.