Privacy Policy

1. Introduction

Forge Fundamentals ("we," "our," or "us") operates the Forge mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

When you create an account and use Forge, you may provide:

• Account Information: Email address, username, password, and invite code
• Profile Information: Profile picture, display name, and learning preferences (selected domains: Networking, Cloud, Security, Systems)
• Learning Data: Your answers to questions, quiz results, session completion data, streaks, XP, levels, prestige level, and progress statistics
• Privacy Preferences: Leaderboard visibility settings and other privacy-related choices
• Communications: Feedback, support requests, or other messages you send us

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage Data: Features used, time spent on questions, session duration, and interaction patterns
• Device Information: Device type, operating system, app version, and unique device identifiers
• Log Data: IP address, access times, and error logs

2.3 Information from Third Parties

We use Supabase for authentication and database services. When you sign up, Supabase processes your email and password according to their privacy policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Track your learning progress, streaks, prestige level, and achievements
• Personalize your experience with adaptive question selection
• Generate leaderboard rankings (displayed based on your privacy settings)
• Send you notifications about your progress or new features (with your consent)
• Respond to your support requests and communications
• Analyze usage patterns to improve content and features
• Detect and prevent fraud, abuse, or technical issues
• Comply with legal obligations

4. How We Share Your Information

4.1 Service Providers

We share your information with third-party service providers who help us operate the Service:

• Supabase: Database, authentication, and file storage (profile pictures)
• Cloud Infrastructure: Hosting and server infrastructure
• Analytics Services: Usage analytics and crash reporting (if implemented)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Public Leaderboards

If you opt in to appear on public leaderboards (via Settings → Privacy Settings), the following information may be visible to other Forge users:

• Your display name/username
• Your current level and prestige level
• Your XP totals (weekly and lifetime)
• Your current streak
• Your domain accuracy percentages
• Your rank position on various leaderboards

By default, leaderboard visibility is disabled and you appear anonymously (as "User #XXXX"). You can change this setting at any time. When you disable visibility, your username is hidden immediately from all leaderboards.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

If Forge is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law.

Specifically, upon account deletion:

• Your email, username, and profile picture are deleted
• Your learning progress, attempts, and sessions are deleted
• Aggregated, anonymized usage data may be retained for analytics

6. Your Rights and Choices

6.1 Access and Update

You can access and update your account information, profile, and preferences at any time through the app settings.

6.2 Leaderboard Privacy Controls

You can control your visibility on public leaderboards through Settings → Privacy Settings. By default, your username is hidden. You can toggle leaderboard visibility on or off at any time. Changes take effect immediately.

6.3 Delete Your Account

You can delete your account at any time through Settings → Account → Delete Account. This will permanently delete your personal information and learning data.

6.4 Opt Out of Communications

You can opt out of push notifications through your device settings or the app's notification preferences. You can opt out of promotional emails by following the unsubscribe link in those emails.

6.5 Data Portability

You can request a copy of your data by contacting us at privacy@forgefundamentals.com. We will provide your data in a structured, machine-readable format.

6.6 California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how we use it
• Right to request deletion of your personal information
• Right to opt out of the sale of your personal information (we do not sell)
• Right to non-discrimination for exercising your rights

7. Data Security

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure authentication with password hashing
• Row-level security policies in our database
• Regular security audits and updates

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Children's Privacy

Our Service is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete it.

If you are between 13 and 17, you should have your parent or guardian's permission to use the Service.

9. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

10. Cookies and Tracking Technologies

We use local storage and similar technologies to:

• Keep you logged in between sessions
• Remember your preferences and settings
• Analyze usage patterns and improve the Service

The mobile app uses local device storage (AsyncStorage) to cache your session and preferences. The website may use cookies for similar purposes. You can control cookie preferences through your browser settings.

11. Third-Party Links and Services

Our Service may contain links to third-party resources, documentation, or websites (such as AWS docs, RFCs, or vendor guides). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We will also notify you via email or in-app notification for significant changes.

Your continued use of the Service after changes become effective constitutes your acceptance of the updated policy.

13. Do Not Track Signals

Our Service does not currently respond to "Do Not Track" (DNT) signals from browsers. We may implement DNT support in the future.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@forgefundamentals.com
• Website: forgefundamentals.com

For GDPR-related requests (if applicable), please email gdpr@forgefundamentals.com.