Privacy Notice
Effective Date: October 8, 2026
Forge Accountability is operated by KH ESTATES LLC, an Illinois limited liability company (“Forge,” “we,” “us,” or “our”).
This Privacy Notice explains how we collect, use, disclose, store, and otherwise process personal information when you use the Forge mobile application, the website located at forgeaccountability.com, and related services (collectively, the “Services”).
It also explains the privacy choices and rights that may be available to you.
By using Forge, you acknowledge the practices described in this Privacy Notice.
1. Personal Information We Collect
We may collect personal information directly from you, automatically when you use Forge, and from third parties that help us provide the Services.
Information You Provide Directly
Account and Profile Information
When you create or maintain a Forge account, we may collect:
Email address
Display name
Profile photo, if you choose to provide one
Biography or profile information
Time zone
Account settings and preferences
We use this information to create and maintain your account, authenticate you, provide account recovery, personalize the Services, and communicate with you.
Challenge and Commitment Information
When you use Forge, you may provide or generate information including:
Challenges you create or join
Challenge names and descriptions
Goals and commitments
Challenge schedules
Commitment schedules
Check-ins
Completion history
Streaks
Consistency information
Points and progress
Milestones
Challenge memberships
Challenge invitations
Proof and Photos
Forge allows users to submit photos or other proof related to challenge activity.
This may include:
Photos captured using your device camera
Photos selected from your photo library
Profile images
Notes associated with proof
Metadata associated with uploaded files
Depending on the privacy setting you choose, proof may be:
Private, meaning visible only to you; or
Challenge Members, meaning visible to authorized members of the applicable challenge.
Forge does not make private proof publicly accessible.
Where technically practical, Forge may resize or optimize uploaded images and remove unnecessary metadata, including location metadata.
Social and Community Information
If you use Forge’s social features, we may collect:
Comments
Reactions
Challenge interactions
Invitations
Challenge activity
Member participation information
Other content you voluntarily submit
Communications With Us
If you contact us, we may collect:
Your name
Email address
The contents of your message
Support information
Product feedback
Information Collected Automatically
When you use the Services, we and our service providers may automatically receive limited technical information, such as:
Device type
Operating system
App version
IP address
Network or connectivity information
Authentication events
Error and crash information
Dates and times of activity
Basic application interaction information
We may use this information to operate and secure Forge, troubleshoot issues, prevent abuse, monitor performance, and improve the Services.
Camera and Photo Library Access
Forge may request permission to access your camera or photo library when you choose to use a feature that requires images.
Examples include:
Taking a proof photo
Uploading proof
Selecting an existing image
Adding or updating a profile photo
Forge does not continuously access your camera or photo library.
You may change or revoke these permissions at any time through your device settings.
Information Received From Third Parties
We may receive information from third parties that help us operate Forge.
These may include:
Supabase. Forge currently uses Supabase for services including authentication, database infrastructure, backend services, and secure file storage.
Application Marketplaces. If you purchase a Forge subscription through Apple or another application marketplace, that provider processes your payment. We may receive information about your purchase or subscription status but do not receive your full payment-card information from Apple.
Authentication Providers. If Forge later supports services such as Sign in with Apple or Google, we may receive information that you authorize the provider to share with us.
Other Service Providers. We may use providers for services such as analytics, crash reporting, notifications, customer support, security, hosting, and subscription management.
2. Aggregated and De-Identified Information
We may aggregate, anonymize, or de-identify information so that it can no longer reasonably be associated with an identifiable person.
We may use such information to:
Understand how Forge is used
Measure product performance
Improve features
Conduct internal analysis
Develop new features
We do not attempt to re-identify properly de-identified information except as permitted or required by law.
3. How We Use Personal Information
We may use personal information to:
Provide and Operate Forge
Including to:
Create and maintain accounts
Authenticate users
Operate challenges
Save commitments
Record check-ins
Store and display proof
Calculate streaks
Calculate consistency
Track challenge progress
Maintain challenge history
Manage challenge memberships
Process invitations
Provide social accountability features
Personalize the Services
We may use your activity, settings, and preferences to customize your experience, including progress displays, reminders, and recommendations.
Communicate With You
We may communicate with you about:
Your account
Support requests
Security matters
Important service changes
Challenge-related activity
Other operational matters
Provide Notifications
If enabled, Forge may send notifications concerning:
Commitments
Challenge activity
Invitations
Comments
Reactions
Streaks
Milestones
Progress
Account activity
Protect Forge and Its Users
We may use information to:
Detect suspicious activity
Prevent unauthorized access
Prevent fraud and abuse
Enforce our Terms of Service
Protect the safety and integrity of the Services
Improve Forge
We may use information to:
Diagnose technical issues
Improve performance
Improve user experience
Understand feature usage
Develop new functionality
Comply With Legal Obligations
We may process information where reasonably necessary to:
Comply with applicable law
Respond to lawful requests
Resolve disputes
Establish or defend legal claims
Enforce agreements
4. How We Disclose Personal Information
We may disclose personal information in the following circumstances.
Other Forge Users
Forge includes social features.
If you participate in a shared challenge, authorized participants may be able to see information such as:
Your display name
Profile photo
Challenge membership
Shared challenge activity
Check-ins
Progress
Comments
Reactions
Proof you designate as visible to challenge members
Information designated as private is not intended to be visible to other participants.
Service Providers
We may disclose personal information to vendors and service providers that perform services on our behalf.
These may include providers of:
Authentication
Cloud hosting
Database infrastructure
File storage
Notifications
Analytics
Crash reporting
Subscription management
Customer support
Security services
Professional services
These providers may process information only as necessary to provide services to us and subject to applicable law and contractual obligations.
Legal and Safety Reasons
We may disclose information when we reasonably believe doing so is necessary to:
Comply with applicable law
Comply with legal process
Respond to lawful government requests
Protect our rights
Protect users or others
Investigate suspected illegal activity
Prevent fraud or abuse
Enforce our agreements
Business Transactions
If KH ESTATES LLC or Forge is involved in a financing, acquisition, merger, restructuring, sale of assets, bankruptcy, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.
At Your Direction
We may disclose information when you request or authorize us to do so.
5. Sale and Targeted Advertising
Forge does not currently sell personal information.
Forge does not currently use private challenge information or private proof content for targeted advertising.
If these practices materially change, we will update this Privacy Notice and provide any notices or choices required by applicable law.
6. User Content and Privacy
You are responsible for deciding what information you submit to Forge.
Please avoid including highly sensitive personal information in:
Challenge descriptions
Comments
Notes
Reflections
Proof
Other user-generated content
unless doing so is necessary for your use of the Services.
Content shared with challenge members may be viewed by those authorized members.
Although Forge provides privacy controls, you should not upload content you would not want viewed by the audience you select.
7. Photos and Biometric Information
Forge currently treats uploaded photographs as ordinary user-generated content.
Forge does not currently use photographs to identify users through facial recognition, face geometry, fingerprint scanning, voiceprints, iris scanning, or similar biometric-identification technology.
Forge does not currently create biometric identifiers from ordinary proof or profile photographs.
If Forge introduces biometric-identification functionality in the future, we will review applicable legal requirements and update our notices, consent processes, retention practices, and other safeguards before launching that functionality.
8. Data Security
We use reasonable administrative, organizational, and technical safeguards designed to protect personal information.
Our safeguards may include:
User authentication
Database access controls
Row-level security
User-specific authorization
Private file storage
Server-side permission checks
Restricted administrative credentials
Encrypted network connections
Security testing and monitoring
No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
We intend to maintain security measures consistent with applicable Illinois requirements regarding the protection of personal information.
9. Security Incidents and Data Breaches
If we experience a security incident involving personal information and applicable law requires notification, we will provide legally required notices.
Where Illinois law applies, KH ESTATES LLC intends to comply with applicable requirements concerning investigation and notification of qualifying personal-information breaches.
10. Data Retention
We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:
Provide the Services
Maintain your account
Preserve challenge and progress history
Maintain security
Prevent fraud and abuse
Resolve disputes
Enforce agreements
Meet legal requirements
Retention periods may vary depending on the category of information and the reason it is retained.
When information is no longer reasonably necessary, we may delete, de-identify, or securely dispose of it, subject to applicable legal obligations.
11. Account and Data Deletion
You may request deletion of your Forge account.
Where available, deletion may be initiated through:
Profile → Account Actions → Delete Account
You may also contact us at:
Deleting your account may result in deletion or de-identification of information including:
Profile information
Personal challenge information
Check-ins
Uploaded proof
Account settings
Other user-generated information
Certain information may be retained where reasonably necessary for:
Legal compliance
Security
Fraud prevention
Dispute resolution
Enforcement of agreements
Protecting other users
Preserving limited shared records in de-identified or restricted form
Deleting the Forge application from your device does not itself delete your account.
12. Your Privacy Choices and Rights
Depending on where you live and applicable law, you may have the right to request that we:
Provide access to certain personal information
Correct inaccurate personal information
Delete certain personal information
Provide certain information in portable form
Explain how information is processed
Restrict or object to certain processing where required by law
You may also:
Update certain profile information
Change privacy settings
Delete certain uploaded content
Revoke camera access
Revoke photo-library access
Change notification permissions
Request account deletion
Privacy requests may be submitted to:
We may need to verify your identity before processing certain requests.
13. Children’s Privacy
Forge is not directed to children under 13 years of age.
If you are under 13, you should not create a Forge account.
We do not knowingly collect personal information from children under 13 without legally sufficient authorization.
If we learn that we have collected personal information from a child under 13 in violation of applicable law, we will take reasonable steps to delete it.
Parents or guardians may contact us at:
Users who are under the age of majority where they live should use Forge only with parental or guardian permission where required by law.
14. Fitness and Wellness Information
Forge may be used to create challenges involving:
Exercise
Nutrition
Weight-related goals
Habits
Personal development
Spiritual practices
Studying
Other forms of self-improvement
Forge is an accountability and progress-tracking platform.
Forge is not a healthcare provider and does not provide medical diagnosis, treatment, or professional medical advice.
You should consult an appropriately qualified professional regarding health, exercise, nutrition, or medical concerns when appropriate.
15. International Processing
Forge and its service providers may process or store information in jurisdictions other than where you live.
Where required by applicable law, we will take appropriate measures concerning international transfers of personal information.
16. Illinois Residents
KH ESTATES LLC is an Illinois limited liability company.
Forge is intended to comply with applicable Illinois privacy and information-security requirements.
Illinois law may impose requirements concerning:
Protection of certain personal information
Secure disposal
Security safeguards
Notification following certain security breaches
Forge does not currently collect or derive biometric identifiers for identity-verification purposes.
If our practices change, we will review applicable Illinois requirements before implementing those changes.
17. Changes to This Privacy Notice
We may update this Privacy Notice from time to time.
If we make material changes, we may provide notice through:
The Forge application
Our website
Email
Another appropriate method
The Effective Date at the top of this Privacy Notice indicates when the current version became effective.
18. Contact Us
If you have questions, concerns, or privacy requests, contact:
KH ESTATES LLC
6956 N Keystone Ave
Lincolnwood, IL 60712
United States
FORGE
© 2026 KH ESTATES LLC. All rights reserved.