FORGEDREAM.AI

PRIVACY POLICY

Last updated 1 November 2026

This says what Forgedream.AI keeps about you, why, where it is held, how long for, and how to take it back. It covers the website, the iPhone and Android apps and the API.

Forgedream.AI is made by ForgeOS Pty Ltd (ACN 697 659 902, ABN 33 697 659 902), Melbourne, Australia. In this policy “we” means ForgeOS Pty Ltd.

What we keep

  • Your account. The email address you sign in with, or the one Apple passes us when you use Sign in with Apple — including the relay address Apple gives if you choose to hide yours. We never see your Apple password.
  • What you ask and what you attach. Your messages, the pictures and files you attach, and the replies you are given. Chats are saved so the app can carry on a conversation, so you can find it again, and so our team can review answer quality and improve the service — which means a person here may read a saved chat, except the assistant’s (see Google Calendar, below). You can turn that off in Settings → Privacy, and what was already saved can be deleted.
  • Voice, if you use it. The phone's own speech recognition turns what you say into words, and those words are sent as a typed message would be. When a turn cannot be made out, or to work out which language you are speaking, a short recording of that turn is sent as well and deleted once it has been read. If you set up TALK, a description of your voice is kept with your account so it can tell you from someone else in the room; FORGET MY VOICE in Voice settings removes it.
  • What you have made. Images, designs, songs, voice lines, videos, games and builds, with the projects and files you put them in.
  • How you have set things up. Your plan, your preferences, and what each reply cost in credits, so your balance and your history are right.
  • Your FORGEIT searches, while saving is on. FORGEIT keeps the searches you make, the sites you open from its results (the site, never the page) and the sites you tell it to rank higher, lower or never show, so your results are ranked the way you search and what it suggests fits you; it uses what Forgedream knows about you for the same. From those, your memory and what you ask in your saved chats (your words, never the replies), it writes down what you are into and what your own words mean to you, so a search is made the way you mean it (“jaguar” as the car, for someone whose history is cars). All of it is under FOR YOU in FORGEIT, where you can delete any of it or all of it, stop your chats being read for it, or turn learning off. With saving off it keeps none of it, and a search made with SEARCH WITHOUT THESE is never kept.
  • Where you are, if you say. The place you save in Settings, or else the area your device’s time zone gives, so a local question is answered for your area.
  • An answer or a made thing you report. When you report an answer, the answer, the question before it and your reason are sent to us, read by our team and kept for review, even if chat saving is off. When you report a picture, video, song or voice line, the words it was made from and your reason are sent to us, and our team can open that file in your library for as long as you keep it there.
  • Notifications, if you turn them on. The token your phone gives us to deliver reminders and scheduled tasks, kept until you turn notifications off or delete your account.

Google Calendar, if you connect it

PLAN and the assistant can use your Google Calendar once you choose CONNECT GOOGLE CALENDAR and agree on Google’s own screen. With that permission we:

  • Read your calendars and their events (titles, times, places, attendees and descriptions) to show your day, write your morning brief and answer what you ask about your schedule.
  • Add events to your calendar, only ones you have asked for or confirmed. If an event has guests, Google emails them the invitation.
  • See the email address of the Google account you connected, to show which one it is.

We keep the connection itself (Google’s access tokens, encrypted) and your PLAN settings. Your events are read from Google when they are needed and are not copied into our database. To answer a question about your day, the events it needs are sent with your question to the AI model that answers it, to produce that answer and nothing else. We do not ask for access to your Gmail.

Which AI providers see it. A question that carries your Google Calendar data is answered only by a model from Anthropic, OpenAI or Google, used through their paid business APIs, whose terms do not allow them to train their models on what we send. If you picked a model from another provider, or a team of models, the assistant answers with one of these instead. If you have the assistant’s replies read aloud in the studio voice, the words go to ElevenLabs to be spoken, on settings that keep them out of its training. When the assistant searches the web for you, only Anthropic’s or OpenAI’s search is used, so the search words it writes stay under the same terms. We do not run these models ourselves: each request goes to the provider over an encrypted connection and is used by them only to produce the reply. Every request is checked against this list before it leaves our service, and one that is not allowed is stopped and logged.

The assistant’s chats stay yours. If chat saving is on, the assistant’s chats are saved so you can carry on and find them again, but nobody here reads, exports or summarises them, the assistant does not learn facts about you from them, and your other chats and suggestions are not written from them. The one exception is an answer you choose to report: sending a report lets our team read that answer and the question before it.

Disconnect any time in PLAN, or in your Google Account under Security → Third-party apps. Disconnecting deletes the tokens we hold.

Forgedream.AI’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. Data from your Google account is used only to provide the PLAN and assistant features you can see. It is never sold, never used for advertising, and never used to train or improve AI models, ours or anyone else’s, whether raw, aggregated, anonymised or derived. No person here reads it unless you ask us to, it is needed for security or to investigate abuse, or the law requires it.

How we protect your data

These safeguards apply to all personal and sensitive data we hold, including data received from your Google account (calendar events and access tokens).

  • Encrypted in transit. Everything between your device, our service, our database and the AI providers travels over TLS (HTTPS). Our service checks the database’s certificate before it connects.
  • Encrypted at rest. The database and file storage are encrypted on disk by our host. On top of that, the keys to services you connect, such as Google’s access tokens, are encrypted again with AES-256-GCM, each sealed to your account, under a key kept apart from the database.
  • Kept to what is needed. Your Google Calendar events are read when needed and not stored by us. The calendar permission is the smallest that lets PLAN show your day and add events you confirm.
  • Few people, with checks. Only our service opens connection tokens. Admin access needs multi-factor sign-in, and every admin action is recorded in an audit log. The assistant’s chats are closed even to admins.
  • Separated by account. Every request is checked against the signed-in account, and each account’s data is kept to that account.
  • Deleted when you say. Disconnecting Google deletes its tokens; deleting your account deletes everything kept with it.

The assistant on your phone

  • Your phone’s calendar. When you ask the assistant something, the titles, times and places of today’s events on your phone go with your message so it can answer about your day. Turn this off with READ MY PHONE’S CALENDAR in the assistant’s settings.
  • Your contacts are read on the phone only, to find the person you name (“call Sam”). They are never sent to us. Turn this off with USE MY CONTACTS.
  • Calls, texts and emails open in your phone’s own apps, ready for you to send. We do not send them.
  • The camera and your screen. With LIVE, SHARE SCREEN or ASK ABOUT SCREEN, a picture of what the camera or your screen shows goes with what you ask, and only then. It is sent to the AI model to answer and is not saved with your chat. The text of password fields is never read.
  • Over the lock screen, if you turn that on, the assistant answers without anything from your account and nothing said there is saved.

What we do not do

We do not track you across other companies’ apps or websites. We do not sell your data, and we do not use it for advertising. There is no advertising network in the apps. We do not use what you write to train our own models.

Who else handles it

Replies come from AI models licensed from their makers and run on our behalf: Anthropic, Google, OpenAI and xAI. We reach each of them directly, never through a reseller or aggregator. To answer you, your message is sent to whichever of them the router picks. They act as our processors under contract: they handle your message to produce a reply, not for their own purposes.

We also use Supabase (Sydney) for sign-in and the database, Fly.io (Sydney) to run the service, Vercel to serve the website, ElevenLabs for spoken replies, voices and sound effects, Sketchfab, Poly Haven and Poly Pizza for the 3D models a game in PLAY is built from, Tripo AI to model the ones no library has, Resend to send email, Expo to deliver notifications to your phone, and Stripe for payments. Stripe handles card details directly; we never see your card number. If you connect Google Calendar, Google handles it under its own privacy policy.

What you search in FORGEIT, and what you type into its box for suggestions, goes to Serper.dev, which gets the results and suggestions from Google, with nothing that says who you are; each handles it under its own privacy policy. When FORGEIT tailors a search to you, the facts from your memory it uses go to the AI models above with it. A page FORGEIT reads for you is fetched by our servers, so the site sees us, not you. A question you ask about a page goes to the AI models above with that page’s words, and the question is not kept. A picture you search with goes to the AI models above to be read, and is not kept. To write down what you are into, what you ask in your saved chats goes to those models with your searches, while FORGEIT learns.

When PLAY makes a new game, its designer may name a few 3D models the game needs (a boss, a ship, a landmark). Those names and descriptions come from what you asked for but carry nothing that says who you are. The names are searched for in the free asset libraries of Sketchfab, Poly Haven and Poly Pizza, each under its own privacy policy, and a model found there is copied to your game with its maker’s name and licence in the game’s credits. The descriptions of those no library has go to Tripo AI to be modelled. The models are kept with your game, and anyone who plays the game loads them. The designer may also describe the game’s theme music and a few of its sounds (a coin, a blast, a roar): those descriptions go to Google and ElevenLabs to be made, the same way music and sound effects are made in CREATE, and the sounds are kept with your game in the same way.

Where it is held

In Australia. The database and the service run in Sydney. The model providers above may process a request outside Australia; nothing is stored with them beyond answering it.

How long we keep it

Saved chats are deleted automatically after 365 days. FORGEIT keeps your searches for a year (the newest 500) and the sites you open from it for six months. Everything else is kept while your account exists. When you delete your account, it and everything kept with it goes.

What you can do

  • Stop chats being saved — Settings → Privacy. You can delete what was already saved at the same time.
  • Remove your voiceprint — Voice settings → FORGET MY VOICE.
  • See and delete what FORGEIT learned — FORGEIT → FOR YOU: delete a search, a site, something it thinks you are into, what it takes a word of yours to mean, or everything at once; turn LEARN FROM MY CHATS or LEARN FROM MY SEARCHES off.
  • Disconnect Google Calendar — in PLAN, or in your Google Account. The tokens we hold are deleted.
  • Delete your account — Settings → Account → Delete my account, in the app and on the website. It removes the account and everything kept with it, and cannot be undone.
  • Ask for a copy, a correction, or deletion of something in particular — write to us and we will do it.

Age

Forgedream.AI is for people aged 18 and over. We ask for a date of birth when you join and refuse anyone under 18. We do not knowingly keep anything about a child. If you believe a child has made an account, write to us and we will remove it.

What other people can see

Your chats, files and projects are yours and are not shown to anyone else. A game you publish to the PLAY reel is public: its title, its description, the game itself and the name you publish under can be seen by anyone, along with likes and comments on it. Keep it private, or delete it, and it leaves the reel. You can report anything you see there and block the person who posted it.

Changes

If this changes in a way that matters, we will say so in the app before it takes effect.

Contact

Write to support@forgedream.ai. If you are in Australia and are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.