Privacy Policy
Last updated: March 30, 2026
Forge AI Coach ("Forge," "we," "us," or "our") is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our AI coaching platform at forge-coach.lovable.app.
What We Collect
Account Information: Email address and display name provided at signup.
Coaching Conversations: Messages you exchange with the AI coach, including text input and session metadata.
Memories & Insights: Patterns, goals, and progress notes generated during coaching sessions.
Usage Data: Session timestamps, feature usage, and interaction patterns to improve your experience.
Payment Information: Processed securely by Stripe. We never store credit card numbers.
How We Use Your Data
Your data is used exclusively to provide and improve your personal coaching experience:
- Maintaining persistent memory across coaching sessions
- Generating personalized insights and progress tracking
- Sending proactive check-in notifications (with your consent)
- Crisis detection to ensure user safety
Your Data Is Never Used for AI Training
We do not use your conversations, memories, or any personal data to train, fine-tune, or improve any AI model - ours or anyone else's.
Your coaching sessions are private. They are stored solely to serve you and are never aggregated, anonymized, or repurposed for model development.
Data Isolation & Institutional Use
Forge uses Row-Level Security (RLS) enforced at the database level. This means:
- Each user can only access their own data - this is enforced by the database, not just the application
- Institutional deployments (schools, organizations) have org-scoped data isolation - an administrator at one institution cannot access data from another institution
- Administrative access is role-based and scoped to the relevant organization
FERPA & Educational Compliance
Forge's architecture is designed to support compliance with the Family Educational Rights and Privacy Act (FERPA) and state student privacy laws:
- Database-level data isolation between institutions
- No cross-institutional data access
- No use of student data for AI model training
- User data export capability for right-to-access requests
- Email-verified authentication for auditability
Institutional partners may request a Data Processing Agreement (DPA) prior to deployment. Contact us at the email below to initiate this process.
Crisis Detection & Safety
Forge includes automated detection of language indicating potential self-harm or crisis situations. When detected:
- The AI immediately provides crisis resources (988 Suicide & Crisis Lifeline, Crisis Text Line)
- The conversation is flagged for human review by a designated administrator
- For institutional deployments, only the designated org administrator for that specific institution receives the flag
This feature exists as a duty-of-care safeguard. Forge is not a substitute for professional mental health services.
Your Right to Your Data
You own your coaching data. At any time, you can:
- Export your complete coaching history (conversations, memories, insights) in Markdown and JSON formats from your Dashboard
- Delete your account and all associated data by contacting us
Data Retention
Your data is retained for as long as your account is active. Upon account deletion or deactivation:
- All personal data, conversations, memories, and insights are permanently deleted within 30 days
- Anonymized, aggregated usage statistics (e.g., total session counts) may be retained for platform improvement
Third-Party Services
We use the following third-party services:
- Stripe - Payment processing
- Resend - Transactional email delivery
- AI Model Providers - To generate coaching responses (your data is not used for their model training)
We do not sell, rent, or share your personal data with any third party for marketing or advertising purposes.
Security & Infrastructure
- All data is encrypted in transit (TLS) and at rest
- Database access is controlled by Row-Level Security policies
- Authentication requires email verification
- No anonymous accounts are permitted
- Infrastructure is built on SOC 2-compliant cloud providers
Contact Us
For privacy questions, data requests, or to request a Data Processing Agreement:
Email: privacy@forgeaicoach.com