Forged By AI
Privacy Policy
Effective August 4, 2026 · Last updated August 4, 2026
The short version
When you ask Forged By AI a question, that question is sent to three AI companies so they can answer it. That's the whole product — there's no way to do it without sending your words somewhere.
Nothing that identifies you goes with it. No name, no email, no account, no contacts, no location, no device ID. I never see your questions or the answers, and I don't keep a copy of either.
Where copies do exist: the three AI companies receive the text you sent and hold it briefly on their own systems, under their own policies, before deleting it. That's unavoidable — they can't answer a question they haven't received. More on that below.
Your history — the running list of questions and answers you scroll back through in the app — lives on your phone and nowhere else.
The one thing tied to your usage is a random ID your phone invents the first time you open the app. It sits next to a question counter and a subscription status, and that's the entire record. There's no user table, no name field, no email field — not because I'm being disciplined, but because I never built anything that could hold them.
There are no ads and no tracking, and I don't sell anything about you to anyone. Delete the app and everything it stored on your phone is gone.
Who's behind this
Forged By AI is made by GoldenApexApps LLC, a California limited liability company. It's a one-person shop — no team, no investors, no advertising business. When you email support, you're emailing the person who wrote the app.
What leaves your phone
Your question. That's it.
When you tap the hammer, the text you typed is sent to three AI providers — two answer it independently, and the third reads both answers and writes the final one you see.
Those providers are OpenAI, Google, and Anthropic. Which specific models I use can change as better ones come out, but the companies are these three, and I'll update this page if that list changes.
Your question is sent on its own. It isn't labeled with who you are, because I don't know who you are.
What those companies do with it
Each of them has their own privacy policy, and their handling of your text is governed by their terms, not mine.
As of the "Last updated" date above, all three companies' paid API terms state that data submitted through the API is not used to train their models, and is held briefly for abuse monitoring before being deleted. Forged By AI uses the paid API tier at all three providers. Those terms are theirs to change, and if they do, I'll update this page.
Practical advice: don't type anything into this app that you'd be upset to see leave your phone. That's true of every AI app, not just mine. Passwords, medical records, someone else's personal details — keep those out of it.
What stays on your phone
Everything else stays strictly local:
- Your question history and the answers you received
- Whether you've accepted this disclosure
- How many questions you have remaining
None of that is uploaded, synced, or backed up anywhere. You can wipe all of it in Settings → Clear history, or by deleting the app.
What the Cloudflare server stores
There's a small cloud server sitting between the app and the AI providers. It isn't a machine I own — it's Cloudflare's, running my code on their Workers platform with a Cloudflare D1 database, hosted in the United States. It exists so my API keys live on a locked-down cloud service instead of inside an app binary anyone can decompile, and so I can verify subscription limits.
Here is the complete list of what it holds:
| Stored | What it is |
|---|---|
| Install ID | A random string your phone generates the first time you open the app. It isn't derived from any hardware identifier, phone number, or account. Deleting the app destroys it permanently. |
| Questions left | A number. |
| Subscription state | Which plan is active and when the billing month ends. |
| Token counts | How much text went in and out for that Install ID, so I can see what the API costs me. |
What it does not store: your questions, the generated answers, your name, your email address, your phone number, your location, your contacts, or any device hardware identifier. My code writes no request logs and keeps no IP address records.
There is no user table, no account record, and no field anywhere in that database for a name, an email, or a phone number.
Your question passes through that Cloudflare server in memory on its way to the AI providers. It is not written to disk or recorded along the way.
Is the Install ID personal information?
I'd rather answer this plainly than hide behind a technicality. The Install ID contains nothing about you, and I have no way to connect it to a real person. But it does sit next to a record of how much you've used the app, and under California and European law that makes it a pseudonymous identifier — a category of personal information. So I treat it as personal information, and you have the same rights over it that you'd have over anything else. See the sections below.
One honest caveat about IP addresses
Cloudflare is the network your traffic crosses, and like every internet host, Cloudflare processes connection data — including your IP address — at their edge for security and abuse prevention. That's their infrastructure and their policy, not mine. I don't have access to it and can't turn it off. You can read how they handle it in the Cloudflare privacy policy.
Who else touches your data
That's the complete list. No analytics vendors, no ad networks, no crash reporting services, no marketing tools.
| Company | What they do | Where |
|---|---|---|
| OpenAI | Answers your question (worker model) | USA |
| Answers your question (worker model) | USA | |
| Anthropic | Reads both answers, writes the final one (judge model) | USA |
| Cloudflare | Provides the cloud server between the app and the providers | USA |
| Apple | Processes App Store subscriptions and issues receipts | USA |
| Google Play | Processes Play Store subscriptions and issues receipts | USA |
How long anything is kept
Records on the Cloudflare server — Install ID, question counter, subscription state, and token counts — are kept while your installation stays active, or until you ask me to delete them.
If an Install ID goes 12 months with no activity, it's deleted automatically along with its usage records. That isn't a good intention — it's a scheduled job that runs nightly on Cloudflare's platform.
Things this app doesn't do
| Ads | None. Not now, not later. |
| Analytics | No analytics SDK — no Firebase, no Mixpanel, nothing. I don't know which screens you open or how long you stay. |
| Tracking | Nothing follows you across apps or websites. No advertising identifier (IDFA/GAID). |
| Accounts | None. No signup, no email, no password. |
| Selling or sharing data | Never. There's nothing to sell, and I wouldn't sell it if there were. |
| Permissions | Location, contacts, photos, microphone and camera are never requested or accessed. |
Payments and subscriptions
Subscriptions run entirely through Apple's App Store or Google Play. They handle all financial transactions — I never see your card number, billing address, or name.
What reaches the Cloudflare server is an encrypted receipt token that verifies exactly one thing: this Install ID has an active subscription.
Cancel any time in your App Store or Google Play account settings. Cancelling stops future billing — it doesn't refund the current period, and unused questions don't roll over.
Restoring on another device
Because there are no accounts, nothing syncs between your devices. Your subscription is tied to your Apple ID or Google account, so tapping Restore on a new device brings the subscription across. Your question history does not — it lives only on the phone where you asked. A new device also gets a new Install ID and its own question counter.
Children
Forged By AI isn't built for or directed at children under 13, or under 16 in the European Union. I don't knowingly collect anything from a child. Because the app has no accounts, I have no way to verify anyone's age. If you're a parent or guardian and believe your child has used it, deleting the app removes all local storage — and you can email me to have the associated Install ID deleted from the Cloudflare database.
California residents (CCPA / CPRA)
California law gives you the right to know what personal information is collected about you, to have it deleted, to have it corrected, to opt out of its sale or sharing, and not to be treated differently for asking.
Categories collected in the past 12 months:
- Identifiers — a randomly generated Install ID.
- Commercial information — subscription status, remaining question count, token volume.
- Internet activity — your question passes through the Cloudflare server in memory. It is not logged or stored.
I do not sell personal information, and I do not share it for cross-context behavioral advertising. I never have.
To exercise any of these rights, email info@goldenapexapps.com. Since those records contain no name or email, you'll need to send your Install ID so I can find the right row — it's in the app under Settings.
EEA and UK users (GDPR)
Data controller: GoldenApexApps LLC, California, USA · info@goldenapexapps.com
Legal bases: processing your question is a contractual necessity — it's the service you asked for. Keeping a question counter and token totals rests on legitimate interests: preventing abuse and managing what the API costs me.
Transfers: your question is transferred to AI providers and infrastructure in the United States. Those transfers rely on the providers' data protection agreements and Standard Contractual Clauses.
Your rights: access, rectification, erasure, restriction of processing, and data portability — plus the right to complain to your local data protection authority.
Security
Traffic between the app, the Cloudflare server, and the AI providers is encrypted in transit with HTTPS/TLS. API keys are stored as encrypted secrets on Cloudflare and are never embedded in the app. Your history sits in your device's isolated app storage, which the operating system keeps separate from other apps.
I'm one person and I won't claim my setup is unbreakable — nobody honest does. What I can tell you is that the most valuable thing to steal here is the thing I chose never to keep. There is no database of anyone's questions to lose.
External links
This policy links to third-party privacy policies. GoldenApexApps LLC isn't responsible for the practices or content of those sites.
If this changes
If I change how any of this works, I'll update this page and change the date at the top. If a change is material — a new AI provider, or anything new leaving your phone — the app will show you the disclosure again and ask you to accept it before you can keep using it. You'll find out inside the app, not by checking a webpage.
Questions, or want something deleted?
Email info@goldenapexapps.com
GoldenApexApps LLC
9241 Old State Hwy, Unit 91
Newcastle, CA 95658
United States