Privacy Policy
Before the legal language
Your check-ins and Vault entries are end-to-end encrypted and live in your own private cloud account, not on our servers — we hold no keys and cannot read them under any circumstance. Your identity statement is even simpler than that: it stays on your device and is never sent to us in any form, encrypted or otherwise. We do not sell your data, show you ads, or track you across other apps. This policy is the complete, precise version of that promise, written to apply to you wherever you use FORGE.
1. Who operates FORGE
FORGE is developed and published by Rabindra Mahato, an individual based in Jamshedpur, Jharkhand, India, operating under the name HomoLLabs. Throughout this Privacy Policy, “HomoLLabs,” “we,” “us,” and “our” refer to Rabindra Mahato operating under this name. HomoLLabs is not, at this time, a separately incorporated legal entity.
This Privacy Policy applies to all users of FORGE worldwide, regardless of where you are located.
Contact: support-forge@homollabs.org
2. What we collect — summary
| Category | What it is | Where it lives | Who can read it |
|---|---|---|---|
| Account identifier | Sign in with Apple/Google ID | Apple/Google’s systems | Not HomoLLabs |
| Check-in history | Not Yet / Half Forge / Full Forge entries | Your device and private cloud account, end-to-end encrypted | Not HomoLLabs |
| Identity statement | Your self-written statement | Your device only — not synced to our servers; may sync directly to a device you own, such as a paired Apple Watch | Not HomoLLabs — never transmitted to us in any form |
| Vault entries | Text, voice transcripts, photos | Your device and private cloud account, end-to-end encrypted | Not HomoLLabs |
| Voice audio | Streamed for on-device transcription only — never saved as a file | Your device only | Not HomoLLabs — never recorded to disk or transmitted |
| Subscription status | Active/inactive, tier | RevenueCat | RevenueCat and HomoLLabs, status only |
| Payment details | Card numbers, billing address | Apple App Store / Google Play | Apple/Google only |
| Anonymous usage events | App opens, feature usage, no content | Self-hosted analytics infrastructure | HomoLLabs, in aggregate only |
| Forge Partner data | Your Momentum score and a yes/no check-in status only | Shared only with your chosen partner | Your chosen partner only |
3. Information you provide directly
3.1 Account information
We receive a unique identifier from Sign in with Apple or Sign in with Google. We never receive your Apple or Google password.
3.2 Your identity statement
The statement you write during onboarding is stored only on your device. It is not transmitted to FORGE’s servers in any form — encrypted or otherwise — because it never leaves your device toward us at all. If you use FORGE with a paired Apple Watch or equivalent companion device, it may sync directly between devices you own over a local device-to-device connection, such as Bluetooth or Wi-Fi. That connection does not pass through, or get read by, a FORGE-operated server.
Please note: because the identity statement currently has no cloud backup, it will be lost if you uninstall the app, lose your device, or switch devices without first exporting your data. We recommend using the in-app export feature regularly if this matters to you. We are working on optional encrypted cloud backup for the identity statement and will update this policy when that becomes available.
3.3 Your check-in history
Your behavioral history is append-only — we never modify or delete it on your behalf. It is stored on your device and synced, end-to-end encrypted, to your private cloud account. HomoLLabs cannot read this history, because it never reaches us in a decryptable form.
3.4 Vault entries — text, voice, photos, and numbers
Text and photo entries are stored on-device and synced end-to-end encrypted. Voice input is streamed directly to your device’s on-device speech recognizer in small audio buffers for transcription — no audio file is created, saved, or transmitted. Once transcription completes, only the resulting text, which you can review and discard, is retained; the underlying audio buffers are never written to disk.
3.5 Forge Partner and Forge Circles
If you connect with a Forge Partner or join a Forge Circle, only your Momentum score and check-in status (yes/no) are shared, and only with the specific people you explicitly choose. No identity statement and no Vault content is ever transmitted to a partner or Circle member. HomoLLabs does not retain or analyze this shared data beyond what is technically necessary to relay it between devices.
4. Information collected automatically
4.1 Anonymous analytics. Self-hosted analytics record app opens, feature usage, and onboarding completion. These events contain no identity statement text, no Vault content, no check-in details, and no information that identifies you personally.
4.2 Diagnostic and crash data. Technical information, including device model, OS version, and error stack traces, is collected only to fix bugs. It contains no behavioral content.
4.3 Subscription data via RevenueCat. RevenueCat receives a randomly generated app user identifier and your purchase/subscription status from Apple or Google. RevenueCat never receives your payment card details, which are handled entirely by Apple or Google.
5. What we do not do
- Sell, rent, or license your data to anyone, for any purpose
- Show you advertisements or allow advertisers to target you
- Track your activity across other apps or websites
- Use your behavioral data, identity statement, or Vault content to train any machine learning model
- Share your check-in history, Momentum score, or Vault content beyond the Forge Partner/Circles sharing described above
- Read your check-in history or Vault entries — they are end-to-end encrypted and we do not hold the keys to decrypt them
- Read your identity statement — not because of encryption, but because it is never transmitted to us in the first place
6. How long we keep information
| Data type | Retention |
|---|---|
| Check-in history, Vault entries | Retained in your encrypted cloud storage for as long as your account exists, or until deleted |
| Identity statement | Retained only on your device while the app remains installed. Not currently backed up off-device — see Section 3.2 |
| Voice audio buffers | Never persisted; exist only transiently during transcription and are not retained in any form |
| Anonymous analytics events | Retained 12 months, then deleted |
| Diagnostic/crash logs | Retained 90 days, then deleted |
| Subscription records (RevenueCat) | Per RevenueCat’s own retention policy |
7. International data transfers
FORGE is used globally. Your check-in history and Vault entries are stored, end-to-end encrypted, within Apple’s iCloud or Google’s cloud infrastructure, depending on your platform, which may store data in regions outside your country of residence. Because this content is end-to-end encrypted before it leaves your device, it cannot be read in transit or at rest by any party other than you — including the cloud infrastructure provider itself. Your identity statement does not sync to any cloud infrastructure and remains only on the device(s) you own. Anonymous analytics and diagnostic data may be processed on infrastructure operated by or for HomoLLabs, which may be located in India or other jurisdictions.
If you are located in the European Economic Area, United Kingdom, or Switzerland, transfers of personal data outside those regions are made on a basis consistent with applicable law, including reliance on Standard Contractual Clauses where required. Contact us for more detail on applicable safeguards.
8. Your rights — wherever you are
- Access: a complete copy of your data, exportable as a document directly from the app
- Correct: your identity statement, Full Forge/Half Forge definitions, and account settings at any time
- Delete: your account and all associated data at any time
- Withdraw consent: for any optional feature, such as voice input, at any time without affecting the rest of the Service
While you may delete your entire account and history at once, individual check-in entries cannot be selectively edited or deleted while your account remains active. This is intentional: it is what makes your Arc an honest record rather than an editable one.
9. Region-specific rights
9.1 European Economic Area, United Kingdom, and Switzerland
We process account and subscription data on the basis of contractual necessity; optional features, such as Vault voice input, on the basis of consent; and anonymous diagnostic and analytics data on the basis of legitimate interest in maintaining and improving the Service.
Your rights include access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interest. You may also lodge a complaint with your local data protection supervisory authority. HomoLLabs does not currently have a separately appointed representative in the EEA or UK. Contact us directly for GDPR-related requests.
9.2 California and the United States
If you are a California resident, you have the right to know what personal information is collected, request its deletion, and opt out of the sale or sharing of personal information. We do not sell or share your personal information, as those terms are defined under the CCPA/CPRA.
9.3 India
HomoLLabs acts as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023, for users located in India. We process personal data only for the purpose you consented to; allow access, correction, erasure, and withdrawal of consent; notify you and the Data Protection Board of India of a significant breach where required; and implement reasonable safeguards.
Grievance Officer: Rabindra Mahato, support-forge@homollabs.org.
9.4 All other jurisdictions
The baseline rights in Section 8 apply in full. If your local law grants additional rights, we will honor them upon request.
10. Children’s privacy
FORGE is rated for users aged 17 and older on app store listings, and our Terms require users to be at least 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently done so, we will delete it.
11. Security
FORGE’s security architecture is split precisely between two categories of data because they are protected by genuinely different mechanisms.
Check-ins and Vault entries are end-to-end encrypted and synced to your private cloud account. HomoLLabs does not hold the decryption keys and cannot read this content under any circumstance — including in response to a request directed at us, a court order, or a breach of our infrastructure — because it never exists on our infrastructure in readable form.
Your identity statement is protected differently: it is never transmitted to our servers. There is no encryption key in play because there is no transmission to encrypt. It exists only on the device(s) you own, protected by your device’s platform-level security, such as iOS Data Protection or Android’s equivalent. This means HomoLLabs cannot read it, but it also means its security depends on your device. If your device is compromised or unlocked by someone else, locally stored content, including your identity statement, could potentially be accessed there.
All data in transit, where applicable, uses TLS 1.3.
No system is perfectly secure. If we become aware of a security incident affecting your data, we will notify you and relevant authorities as required by applicable law.
12. If HomoLLabs ceases operations
If HomoLLabs discontinues FORGE, we commit to notifying users in advance, providing a window to export complete data as a document, and not selling or transferring user data to any third party as part of discontinuation.
This is a personal commitment by Rabindra Mahato. It is not currently backed by an escrow arrangement, third-party enforcement mechanism, or corporate governance structure. If one is established, this policy will be updated accordingly.
13. Changes to this policy
We will notify you within the app before any material change to this policy takes effect. Continued use of FORGE after that notice constitutes acceptance of the updated policy.
14. Contact
Rabindra Mahato, operating as HomoLLabs
Jamshedpur, Jharkhand, India