Your data, explained plainly

Privacy policy

Updated October 23, 2026.

IdentiForge is a community for learning, meditation, prayer, and whole-life care. This policy explains what information IdentiForge accesses, why it is needed, where it is kept, and the choices available to you. The Google Calendar connection is optional and read-only.

Who operates IdentiForge

Identiforge LLC, a Utah limited liability company, operates the IdentiForge website and mobile app. Contact us using the support address below for privacy questions or requests.

Information you provide

IdentiForge stores your account email and profile name, the identity and vision you enter, optional identity and profile photos, and your goals, projects, tasks, notes, schedules, focus history, and preferences. If you use community, circle, collaboration, or mentorship features, IdentiForge also stores the content and choices you submit there. The website and mobile app use the same account and plan.

How IdentiForge uses information

IdentiForge uses this information to authenticate you, save and synchronize your plan, operate the features you choose, calculate your progress reports, provide support, protect accounts, and maintain the service. IdentiForge does not sell personal information or use it for targeted advertising.

Owner-only service analytics and member administration

The verified site owner can review aggregate account growth, participation, returning-member cohorts, mentorship bookings, membership status, and recorded purchase totals to operate and improve the service. These reports use retained product records, not advertising tracking. They do not display private task titles, reflections, messages, health check-in scores, mentor notes, or calendar event contents. Aggregate CSV exports are restricted to the same owner account. Successful dashboard views and exports record the owner account identifier, action, report date range, and timestamp for accountability. The same verified owner can view a searchable member directory containing account names, emails, account identifiers, and first-app-visit dates for support and service administration. This directory is not public and does not expose private plans, reflections, messages, or online-status preferences. Directory views record only the owner identifier, action, and timestamp; search terms and member records are not retained in the dashboard access log.

Reflections, faith preferences, and community support

Your journal entries, practice observations, history, and optional onboarding faith preference start private to you. Facilitators and administrators do not have a journal-viewing tool. You can explicitly share one selected entry with an accepted circle; members can then read and respond to that entry. You can stop sharing with that circle or delete it. Reported shared entries and report reasons can be reviewed by the circle’s facilitators and community administrators. A circle’s published spiritual approach describes the group, not its individual members. You can export your full private practice and reflection records from Reflections.

Your Home profile and sharing choices

Home is your personal space. In Edit profile, you choose who can open your profile link and who can see each section: only you, your collaborators, people in your circles, the signed-in community, or the public. Public includes signed-out visitors. Your display name and handle identify the profile to its selected audience. Each personal detail has its visibility control beside it. Faith and personal practice preferences remain private. Older, differing profile and Identity details are preserved in a private download when you consolidate them.

Shared sections can include your Identity statement and values, saved meditation titles, enrolled journey titles and lesson counts, selected reflection text, and total practice counts and minutes. Reflections appear only when you select them individually for your profile. Circle posts, practice observations, reflection observation notes, your Identity image, My Plan data, and Google Calendar data are not included. Remove a selected reflection or narrow its section audience to stop sharing it through your profile. Saved changes apply to future profile requests; someone who has already viewed shared information may retain a copy.

Membership and live gatherings

When payments are connected, Stripe processes checkout and billing. IdentiForge stores your Stripe customer and subscription identifiers, subscription status, and billing period; it does not store your full card details. Hosts see the names of members who RSVP to their gatherings. Video meetings open in the provider’s own service, subject to that provider’s privacy policy. In-app reminders work while you use the site; browser reminders require permission. Calendar downloads place the selected gathering on your own calendar.

Coaching, recordings, and private check-ins

Accountability sharing is optional and separate from project collaboration. An invitation identifies one goal or project, the intended result, support requested, and check-in rhythm. Only after acceptance can the selected partner see that item’s current and future project titles and statuses, task titles, due dates, priorities, statuses, recurring-task indicators, completion dates and counts since acceptance, and the check-ins and conversation you share in that agreement. Current task statuses can reflect work completed before acceptance, but earlier completion history is not shared. Task descriptions, personal notes, reflections, identity details, Google Calendar data, and unrelated plan items are not included. Progress and completion are self-reported, not verified attendance or outcomes.

Partners can comment, encourage, ask questions, or propose tasks and dates. Only the plan owner can accept a suggestion or change their tasks. Pausing hides the shared plan, check-ins, and conversation from the partner until resumed; ending sharing stops access and requires a new invitation to start again. Pausing or ending one agreement does not revoke other separately granted permissions that may share overlapping tasks. Blocking a person ends these agreements, and unblocking does not restore them. Previously viewed content may have been retained by its recipient. Agreed reminders appear only within My Plan and Mentorship while you use the website; this feature does not send email or monitor activity. Your private practice export includes your owned agreements, authored check-ins, and authored accountability messages. Account deletion removes the associated agreements and their conversation from active storage.

A mentor may publish a service page with the name, introduction, approach, availability, and indicative rate they choose to publish. This does not publish their private Home profile, Identity, or notes. Reviews submitted after a completed booking appear publicly on the mentor’s page without the reviewer’s name or account identifier. A completed booking does not verify attendance or any particular outcome. Published rates are estimates until hourly checkout and mentor payouts are configured; existing session-credit terms are displayed separately.

Adapt to My Plan creates your own editable task from a suggestion you are allowed to read. It does not give its author access to your task or progress. Ask my mentor sends a private question and, only if you select them, a linked card containing your task’s title, description, or both. Selected fields reflect the current task until you stop sharing, remove the task, or the connection no longer permits access. The rest of your plan stays private. Removing the card’s sharing does not erase messages you wrote or copies someone already read. Your private practice export includes your adapted-suggestion links, selected-task sharing records, and reviews you submitted.

Coaching stores your bookings, preparation, session-credit balance, purchase references, messages, agreed next steps, and session notes. Conversations are private to the selected member and coach. Coach-only notes are visible only to that coach; shared summaries are visible to both participants. Coaches cannot browse your private plan or journal. You may explicitly share individual goals, tasks, or reflections and revoke that access in Community → Mentorship. Revocation stops future access but cannot remove information a recipient has already read or copied.

Playback position, favorites, program progress, starting-path choices, and optional calm/energy check-ins are saved to your account. Check-ins start private and can be deleted in Reports. The private practice export includes these records and your participant-visible coaching records. Administrators see membership, staff, booking, and aggregate participation statistics, not a journal or private-message viewer. Authorized infrastructure operators may access stored data when necessary for support, security, or legal obligations.

Joining a live session records that you opened the external meeting; it does not track your time in the call. When a host marks a session for recording, a notice and acknowledgement appear before joining. IdentiForge does not embed or automatically record live meetings. The host and external meeting provider control any recording and must obtain any additional consent required. You may decline to join.

Circle online status

While you use the signed-in website with a visible browser tab, IdentiForge refreshes a recent-activity timestamp to show your online status to accepted members of your circles. Your status expires about a minute after those updates stop. It is not shown in the public people directory, and blocked people cannot see it. You can turn off “Show when I’m online” in Settings. This choice applies across your devices, clears that timestamp, and also hides your live presence in practice rooms. Other members can still see the participation and content you have chosen to share.

Service providers and disclosure

Supabase provides account authentication. The hosted app uses Cloudflare database, file storage, and request processing through Sites. These providers process information only as needed to operate and protect IdentiForge. Information may also be disclosed when required by law or when reasonably necessary to protect users or the service. Google Calendar information is handled separately as described below and is not shared with community members or collaborators.

Information on your phone

The mobile app keeps an account-specific copy of your plan and pending edits on your device. It stores sign-in credentials using the phone’s secure storage. Appearance preferences, reminder settings, and optional reflections are stored locally. Local reflections are not included in the website’s reports.

Cookies and device storage

IdentiForge uses an authentication cookie to keep you signed in. It also uses browser or device storage for preferences and active-session details such as theme, Present Moment state, and selected feed views. These technologies are used to provide the service, not for targeted advertising.

Community safety

Shared text is checked for a limited set of abusive content patterns. This filter is not applied to your private journal. You can report shared content or profiles for human review, block a member, or contact support. Moderators see the reported shared content and report details; they do not receive access to your private journal.

Notifications and photos

Notifications are optional and can be changed in Settings. Scheduled task reminders may display task titles on your lock screen. You choose whether to select and upload a profile photo.

Security

IdentiForge uses access controls, encrypted transport, and provider security features intended to protect information. Google OAuth tokens are encrypted before storage. No online service can guarantee absolute security, so please use a strong password and protect access to your email and devices.

Retention and deletion

Application data is kept while your account is active so IdentiForge can provide the service. You may edit or archive plan information from the app. To request permanent account deletion, contact sarah@identiforge.app. Account deletion removes your application records, uploaded identity and profile images, saved Google Calendar connection, and IdentiForge login record from active systems. Infrastructure backups and security logs may persist for a limited period under the providers’ retention and recovery processes.

Your choices

You may decline to connect Google Calendar, disconnect it later, choose which calendars IdentiForge reads, edit your plan and profile, control mobile notifications, and request access, correction, or deletion by contacting support. Disconnecting Google Calendar does not delete events from Google because IdentiForge has read-only access.

Children

IdentiForge is not directed to children under 13, and it does not knowingly collect their personal information. If you believe a child has provided information, contact us so it can be reviewed and removed.

Changes to this policy

This policy may be updated as IdentiForge changes. The updated date will be revised here. If a material change affects how Google user data is used, IdentiForge will provide notice and request any consent required before using that data for a new purpose.

Contact and privacy requests

For privacy questions, email sarah@identiforge.app.