ADHDFORGE

Privacy Policy

Version 1.0 — Last updated: June 18, 2026

1. Introduction

ADHDFORGE ("we", "our", "us") provides tools to support focus, routines, emotional regulation, and productivity.

We are committed to protecting your personal information in accordance with:

  • POPIA (South Africa)
  • GDPR (European Union)
  • Other applicable privacy laws

By using ADHDFORGE, you agree to the practices described in this Privacy Policy.

2. What Personal Information We Collect

We only collect the minimum data needed to provide the service.

2.1 Account Information

  • Name (optional)
  • Email address
  • Password (hashed, never stored in plain text)

2.2 App Usage Data

  • Tasks, routines, focus sessions
  • Mood logs and journal entries
  • App settings and preferences
  • Subscription status

2.3 Device & Technical Data

  • Device type
  • OS version
  • Crash logs (if consented)

2.4 Optional Data

Collected only if you explicitly opt in:

  • Analytics
  • Personalization insights
  • Research participation

3. How We Use Your Information

We use your data to:

  • Provide core app functionality
  • Sync your data across devices
  • Improve app performance
  • Generate insights (mood patterns, focus trends)
  • Process payments and subscriptions
  • Provide customer support

We never sell your data.

4. Legal Basis for Processing (GDPR)

We process your data under:

  • Contractual necessity — to provide the service
  • Legitimate interest — app improvement, security
  • Consent — analytics, research, personalization
  • Legal obligation — tax, fraud prevention

5. POPIA Justification

Under POPIA, we process your data because:

  • You have given consent
  • Processing is necessary to provide the service
  • Processing protects your legitimate interests

6. Data Storage & Security

Your data is stored securely using:

  • PostgreSQL with encryption at rest
  • HTTPS/TLS encryption in transit
  • Strict access control
  • Regular security audits

Sensitive fields (journal entries, mood logs) may be encrypted at the application layer.

7. Cross-Border Data Transfers

If your data is transferred outside your country:

  • GDPR: We use Standard Contractual Clauses (SCCs)
  • POPIA: Transfers occur only to countries with adequate protection or with your consent

Hosting regions: EU or South Africa.

8. Your Rights

You have the right to:

  • Access your data
  • Correct your data
  • Delete your data ("right to be forgotten")
  • Export your data (JSON/CSV)
  • Withdraw consent
  • Object to processing
  • Lodge a complaint with your local authority

You can exercise these rights in the app under Settings → Privacy & Data.

9. Data Retention

We retain your data only as long as necessary:

  • Active accounts: retained indefinitely
  • Deleted accounts: removed within 30 days
  • Backups: purged within 90 days

10. Third-Party Services

We may use:

  • Stripe (payments)
  • Sentry or AppCenter (crash reporting)
  • Mixpanel (analytics, optional)

Each provider is GDPR/POPIA compliant and covered by a Data Processing Agreement (DPA).

11. Children's Privacy

ADHDFORGE is not intended for users under 16 without parental consent.

12. Contact

For privacy requests:
📧 support@adhdforge.com

← Back to Home