ReForge Privacy Policy
ReForge ("we", "us") is a personal recovery and discipline app. Privacy is a core feature of the product: there are no public profiles and no feeds, and your recovery data is visible only to you. There is one exception, and you control it: if you connect Discord, your current streak (a number of days) can be shown on the ReForge Discord server. Section 2 explains exactly what is shown and how to turn it off.
1. Data we collect
| Data | Why we collect it | Where it is processed |
|---|---|---|
| Email address and a password (stored only as a secure hash) | Creating and signing in to your account | Supabase (authentication); account emails such as password resets are delivered via Resend |
| If you sign in with Google, Apple or Discord: the basic profile that service shares with us (your name or username, email address, a link to your profile picture, and your account ID with that service) | Creating and signing in to your account. We never see your password for that service. | Supabase (authentication) |
| Your app content: daily check-ins, urge logs, relapse logs, personal letter, habits, rituals and work orders, reading and quiz progress, and your settings | This is the product itself: your streak, progress, and history | Supabase (database), plus a local copy on your device so the app works offline |
| Messages you send with Contact Us: your message, the name you enter, and your account email | Reading and answering your question or feedback | Supabase (database), then delivered by email via Resend to our support inbox, support@reforgeapp.app, which runs on Google Workspace |
| Subscription and purchase state | Unlocking Premium after a purchase and restoring it on a new device | Google Play Billing (Android) or the Apple App Store (iOS), and RevenueCat. We never see your card details; payment is processed entirely by Google or Apple. |
| Crash and error reports: technical details such as the error message, where in the code it happened, and your device model and operating system | Fixing bugs | Sentry, EU data region (Germany). Reports never include your app content; web addresses are cut down to the server name and account identifiers are removed before a report is sent. |
| When you sign up, log in with email, reset a password or ask for a new code: a short automatic security check that tells people apart from bots (technical signals from your device and browser, such as the IP address) | Protecting accounts and our email sending from automated abuse | Cloudflare Turnstile. It does not use advertising cookies and is not used to track you across other sites. |
| If you connect Discord: your Discord user ID, linked to your account | Showing your streak and title on our Discord server (section 2) and crediting community challenge rewards to your account | Supabase (authentication); the streak and title are shown on Discord |
We do not collect your location, contacts, photos, or advertising identifiers, and we never log or upload the websites you visit (see the Shield below). The app contains no advertising and no third-party analytics or tracking SDKs.
The Shield (optional content filter)
On Android, the Shield is a content filter that runs on your phone, built on Android's VPN interface. It only handles DNS lookups, the step where your phone turns a website's name into an address. Lookups for blocked adult sites are stopped, supported search engines are switched to SafeSearch, and every other lookup is passed on to a public DNS resolver (Cloudflare 1.1.1.1 or Google 8.8.8.8) to be answered, much as your phone would do without the Shield. The rest of your traffic does not go through the Shield, and none of it passes through ReForge servers.
We do not log or upload the sites you visit or look up. The only thing the Shield keeps is a count of blocked lookups, stored on your phone. Whether you turned the Shield on is saved with your settings so it follows your account. The block list is updated from our server once a day, and that download sends nothing about your browsing. On iPhone, where the Shield is available, it uses Apple's Screen Time web filter, which runs entirely on the device.
2. How your data is used
Your data is used for exactly one purpose: making the app work for you. We do not sell your data, we do not share it with advertisers, and we do not use it for marketing. The services named above (Supabase, RevenueCat, Sentry, Resend, Cloudflare, Google Workspace, Google Play, the Apple App Store) process data only on our behalf to provide the app's functionality.
Discord (optional)
ReForge has a community server on Discord. If you sign in with Discord, or connect Discord in Settings, streak sharing is switched on for your account, and while you are a member of the server:
- you get a streak role that other members can see, such as "🔥 30+";
- members can look up your current streak (the number of days) with the /streak command;
- server admins can post a streak leaderboard in the server;
- the title you equip in the app's Archive is shown as a role.
Because a streak restarts after a relapse, others can see when your count starts again, but nothing else from your account is shown: no check-ins, urges, relapse details, letters or notes. To stop sharing your streak, turn off Settings > Streak on Discord: the /streak command and the leaderboard stop showing it right away, and your streak role is removed at the next daily update. To remove the title role, unequip your title in the Archive. Leaving the server ends both. If you take part in community challenges on Discord, approved entries add scrolls to your app account.
3. Where your data lives
Your content is stored in your account in our Supabase-hosted database and transmitted only over encrypted connections (HTTPS). A copy is kept on your own device so the app works without an internet connection.
Your recovery content and account data are stored inside the EU: our database and authentication run in Supabase's Ireland region (eu-west-1), crash reports are stored in Sentry's EU data region (Germany), and emails are sent through Resend's EU region (Ireland). Subscription and purchase state is processed by RevenueCat, which is based in the United States; this data is limited to purchase and entitlement records and never includes your recovery content. Support emails are kept in our Google Workspace inbox, and Google may process them outside the EU. If you connect Discord, the streak and title shown on our server are processed by Discord, which is based in the United States. The sign-up security check is run by Cloudflare, which is based in the United States. Where data is transferred outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses and/or the processor's certification under the EU-US Data Privacy Framework to safeguard it.
4. How long we keep it, and how to delete it
Your data is kept for as long as your account exists. You can delete your account at any time inside the app: Settings > Danger Zone > Delete Account. This permanently removes your account, your recovery content and the Contact Us messages stored in our database. If you cannot access the app, email us (address below) and we will delete it for you.
A few narrow exceptions apply. We may retain a limited set of records where the law requires it: for example, purchase and transaction records are kept for 7 years under applicable accounting law. Residual copies may also persist in encrypted backups for a short period until those backups are rotated (typically within 30 days). Crash reports in Sentry are retained for 90 days and then deleted automatically. Emails in our support inbox are deleted when you ask us to. Deleting your account also removes the streak and title roles the app gave you on the ReForge Discord server; if Discord is unavailable at that moment, email us and we will remove them by hand.
5. Legal basis and your rights
The legal basis for processing your account and technical data (email address, sign-in profile, subscription state, support messages, crash reports) is the performance of our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in keeping the app stable and secure (Art. 6(1)(f)).
Your recovery content (check-ins, urge logs, relapse logs, your personal letter, and your progress) is special-category data concerning your health and sex life. We process it only on the basis of your explicit consent (Art. 9(2)(a)), which you give in the app when you create your account and start logging. Showing your streak on Discord rests on the same consent, and you can stop it at any time with the Streak on Discord switch. You can withdraw your consent entirely at any time by deleting your account, which stops all further processing; withdrawal does not affect the lawfulness of processing that happened before it.
If you are in the EU/EEA, the GDPR also gives you the right to access, correct, export, or erase your personal data, the right to restrict processing, the right to object to processing based on legitimate interest, and the right to complain to your national data protection supervisory authority. Requests can be sent to the email address below and we will respond within 30 days.
6. Age
ReForge deals with a mature subject and is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a child is using the app, contact us and we will delete the account.
7. Changes to this policy
If we change this policy, the new version will be published at this address with an updated date. Material changes will also be announced inside the app.
8. Contact
The data controller for ReForge can be reached at:
Email: support@reforgeapp.app