Privacy Policy
Last updated: May 26, 2026 · Effective: May 26, 2026
This Privacy Policy explains how Game of Life ("we," "our," "the app") collects, uses, and protects your information when you use our application and website at forgepointrelay.com.
1. Who we are
Game of Life is operated by an individual developer ("the developer") based in the United States. For all privacy-related inquiries, contact forge.point.industries@gmail.com.
2. Information we collect
2.1 Account information
- Email address (for authentication, via Supabase Auth)
- Profile name and optional character name / class (set by you in the app)
- Time zone (for daily-reset bookkeeping)
2.2 Activity data you log
- Workouts (type, duration, calories, heart rate from optional Bluetooth pairing)
- Meals (description, calories, macros, optional photo you provide)
- Money transactions (amount, merchant, category)
- Daily check-ins (sleep score, body score, notes)
- Quests, bosses, XP, level, gold, stat progression
- Friend connections, profile share preferences, referral codes
2.3 Connected services (only if you opt in)
- Email (IMAP): If you connect an email account, we store your IMAP credentials encrypted at rest and read messages from your inbox to identify financial transactions and important emails. We do not read, store, or analyze emails that are not financial or relevance-triaged.
- Banks (Plaid): If you connect a bank, Plaid Inc. acts as our data-aggregation provider. Plaid receives your bank login credentials directly (we never see them). Plaid returns transaction, balance, and account-identification data to us, which we store on your behalf. You can review Plaid's End User Privacy Policy at plaid.com/legal.
- AI services (Anthropic): When you ask the app to parse a meal, workout, or generate side quests, we send only the relevant input (your text and/or photo) to Anthropic's Claude API. Anthropic's privacy policy applies to that data in transit.
- Payments (Stripe): If you subscribe, Stripe processes your payment. We never receive or store your card number. Stripe stores your billing details under their privacy policy.
2.4 Device and usage data
- App build version, platform (Android / iOS / PWA), basic device information you submit with a bug report
- Service-worker cache state for offline support
- We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers
3. How we use your information
- To operate the app: record your activity, compute XP/levels, surface dashboards
- To sync optional data sources (email, banks) you have chosen to connect
- To process subscription payments via Stripe
- To send transactional emails (account, billing) and optional push notifications you enable
- To debug issues you report via the in-app feedback form
- To enforce rate limits and security policies on AI features
We do not sell your data. We do not share your data with advertisers. We do not use your activity data to train AI models.
4. Data retention
We retain your data for as long as your account exists. If you delete your account, your character, activity logs, quests, bosses, transactions, and connected service tokens are deleted within 30 days. Anonymized aggregate counts (e.g., total active users) may be retained.
Bank data fetched via Plaid is also deleted when you disconnect the bank or delete your account. We will also call Plaid's API to revoke our access to your accounts at that time.
5. Security
- All data in transit uses TLS 1.2+
- Row-level security (RLS) on our database ensures users can only access their own records
- IMAP credentials and Plaid access tokens are stored encrypted at rest
- Authentication is handled by Supabase Auth (JWT-based)
6. Your rights
- Access / export: Email us to receive a JSON export of your data
- Correction: You can edit your profile, character, and logs in-app
- Deletion: Delete your account in-app or email us; we honor the request within 30 days
- Withdraw consent: Disconnect IMAP / Plaid / push notifications anytime in the Account screen
- California residents (CCPA): You have the right to know, delete, and opt-out of any sale of personal information. We do not sell personal information.
- EU / UK residents (GDPR / UK GDPR): You have rights of access, rectification, erasure, portability, and objection. Contact us to exercise them.
7. Children
Game of Life is not intended for users under 13. We do not knowingly collect data from anyone under 13. If we learn we have, we will delete it.
8. Changes to this policy
If we make material changes, we will notify you via in-app banner and / or email before the changes take effect. Continued use after the effective date constitutes acceptance.