Privacy Policy

1. Who we are

Lyforge ("we", "us") provides the Lyforge life-planning application at lyforge.app. We are the controller of the personal data described here. Contact: privacy@lyforge.app.

This policy explains what we collect, why, who processes it on our behalf, how long we keep it, and how you can export or delete it. We wrote it to match what the product actually does. If something here is unclear, email us.

2. What we collect

2.1 You give us

• Account: name, email address and password (stored only as a secure hash by our sign-in service).
• Your blueprint: your answers during setup — what would make your life feel complete, your ten-year vision, your 90-day goal, what has held you back before — and your birth date and chosen lifespan.
• Plans and progress: life areas, goals, deadlines, progress readings, checkpoints, your Protocol (routine) and the sessions you complete or miss, daily check-ins and reflections.
• Values and, if you choose, your spiritual tradition: used only to shape your own routine and advisors. Your tradition is religious information, a special category of personal data. We store it only after you give explicit consent, and you can remove it at any time on the Protocol page.
• Council: the decisions you bring, the options, any context you add, the advisors' responses, your choice, and how it turned out.
• Rituals: your monthly, quarterly and annual reviews and the one change you choose.
• My life right now (optional): a short note you write in Settings about your current circumstances, such as your work pattern or family commitments. It is sent to our AI provider only when it builds your goal ladders, your Protocol and suggestions for a goal (such as what could get in the way), so they fit your real life. You can change or clear it at any time.
• Optional reference inputs: a country and sex at birth, used only to show a statistical life-expectancy reference on your Life Clock.
• Payments: handled by Stripe. We store your Stripe customer ID and plan; we never see or store your card number.

2.2 Collected automatically

• Sign-in cookies that keep you logged in. We do not use advertising or tracking cookies.
• Your browser's local storage for small conveniences, such as remembering that you dismissed a card today.
• Server logs (IP address, request time, errors) kept for security and debugging.
• Calendar link: if you create one, we store only a fingerprint (a one-way hash) of it, never the link itself.

3. How we use it

• To run the service: your plans, routine, forecasts, reviews and reminders.
• To generate personalised content with AI (section 5).
• To send the emails you have switched on, which you can change in Settings.
• To take payment for paid plans.
• To keep the service secure, fix faults, and measure whether our forecasts are accurate. Forecast accuracy is measured in aggregate and never published about you as an individual.

We do not sell your data. We do not use it for advertising. We do not train AI models on it.

4. Legal bases

• Contract: processing needed to provide the service you signed up for.
• Explicit consent: your spiritual tradition, and any other information you choose to add beyond what the service needs. You can withdraw consent at any time.
• Legitimate interests: security, fraud prevention and improving forecast accuracy.
• Legal obligation: records we must keep, such as payment records.

5. AI processing

To write your blueprint, build your routine, run Council sessions and make some judgments, we send the relevant text you have written to AI providers. This includes what you have written, such as your setup answers, goals, values and Council questions. We do not send your name or email address with these requests.

• Anthropic (Claude): generates plans, routines and Council responses.
• TypeSafe (Jev): makes fast, structured judgments, such as a goal's starting estimate and the Council's "gut check".

These providers process the requests to answer them, under their commercial terms. We do not permit them to use your content to train their models. If we add or change an AI provider, we will update this page first.

AI output can be wrong. Forecasts ("Odds") are statistical estimates. Council advisors are simulations of documented ways of thinking. They are not the real people, and those people have not endorsed Lyforge. Nothing in Lyforge is financial, medical, legal or psychological advice.

6. Who processes your data for us

• Amazon Web Services: hosting and database, in London (eu-west-2). The database is encrypted at rest.
• Anthropic and TypeSafe: AI processing (section 5).
• Resend: sends our emails.
• Stripe: payments.
• Cloudflare: domain name service (DNS) only; your traffic does not pass through it.

Some of these providers process data outside your country, including in the United States. Where the law requires it, these transfers are covered by appropriate safeguards such as standard contractual clauses.

7. How long we keep it

• While your account is open, we keep your data so the service works.
• When you delete your account (Settings → Delete account), your data is removed from our live database immediately. Encrypted database backups expire within 7 days.
• Payment records are kept by Stripe as the law requires.

8. Your rights and controls

• Export: Settings → Your data → Download my data gives you everything we store about you, as a file.
• Delete: Settings → Delete account removes your account and all its data. Any paid subscription is cancelled first.
• Correct: edit your goals, settings and profile in the app, or email us.
• Withdraw consent: remove your spiritual tradition on the Protocol page; switch off emails in Settings.
• Object or ask questions: email privacy@lyforge.app. We reply within 30 days.
• Complain: you can contact your data-protection authority, for example Ghana's Data Protection Commission or, in the UK, the Information Commissioner's Office.

9. Security

Data is encrypted in transit (HTTPS) and at rest. Each user's rows are isolated in the database, and that isolation is tested automatically on every release. Passwords are stored only as hashes. No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority as the law requires.

10. Children

Lyforge is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has signed up, email us and we will delete the account.

11. Changes

We will update this page, and the date above, before any change takes effect. For material changes, we will email you.