Privacy Policy

colt·forge ("we," "our," or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our family management platform. By using the Service, you agree to the practices described in this policy.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Personalize features such as AI meal suggestions and recipe recommendations
• Sync data with Google services you've authorized (Calendar, Drive, Sheets)
• Ensure the security of the Service and detect abuse
• Respond to support requests

We do not sell your personal information to third parties.

The Service uses Google OAuth 2.0 for authentication. When you sign in, we receive:

• Your Google profile: name, email address, and profile photo
• Google Drive access (if you choose to use the budget spreadsheet feature)
• Google Sheets access (for budget template import and sync)
• Google Calendar access (if you choose to connect it)

We store OAuth tokens securely to maintain your authorized connection. You can revoke this access at any time through your Google Account settings. Revoking access will prevent the Service from syncing with Google services.

Your data is stored in a Cloudflare D1 database hosted on Cloudflare's infrastructure. We implement reasonable technical and organizational measures to protect your information, including:

• HTTPS encryption for all data in transit
• Secure, httpOnly session cookies
• No storage of Google passwords — only OAuth tokens you explicitly authorize
• Access controls limiting data visibility to your household only

No system is completely secure, and we cannot guarantee absolute security of your data.

Some features use Anthropic's Claude AI to process your data (e.g., extracting recipes from URLs or photos, suggesting meals based on pantry contents). When AI features are used, relevant data (such as a recipe URL or pantry list) is sent to Anthropic's API. Anthropic's use of this data is governed by their privacy policy. We do not send sensitive personal or financial data to AI services.

We do not share your personal information with third parties except:

• Google: For authentication and authorized integrations (Calendar, Drive, Sheets)
• Anthropic: For AI-powered features, limited to the data needed for that specific feature
• Cloudflare: As our infrastructure provider, Cloudflare processes data to deliver the Service
• Legal requirements: If required by law or to protect the rights, property, or safety of users

When you join a household with other users, certain data is visible to all members of that household (shared recipes, pantry items, meal plans, trips, and budget data). Family member profiles within a household are shared among household members. You can manage household members through the Household settings.

We retain your data as long as your account is active. If you wish to delete your data, you can clear specific data through the application settings (e.g., "Clear All Data" in Budget Settings). For full account deletion, contact the administrator.

The Service is designed for household management and may contain profiles for children (family members). We do not knowingly collect personal information directly from children under 13. Parent or guardian accounts manage any data related to minors within a household.

Depending on your location, you may have rights regarding your personal data, including the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to certain processing of your data

To exercise these rights, contact us through the application.

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, or to exercise your data rights, please contact us through the application's feedback feature or by reaching out to the administrator directly.