Forge is designed to keep your data on your device. The App does not require an account, does not collect your email, does not use advertising, and does not sell your data. The only data that leaves your device is sent to AI providers that you choose and authenticate with your own API key (for example, when you ask Forge to generate or run a mini-app that uses AI). Camera, microphone, and location data are only accessed when you, through a mini-app, actively use those features.
| Data | Permission | Purpose | Leaves the device? |
|---|---|---|---|
| Photos & videos (camera capture, gallery pick) | Camera, Read media images | Only when a mini-app you run uses the camera or picks an image (e.g. a menu translator). | Only if you send it to an AI provider for processing. |
| Audio / voice recordings (microphone) | Record audio | Only when a mini-app uses speech-to-text or live translation. | Only if you send it to an AI provider for transcription/translation. |
| Approximate / precise location | Access coarse / fine location | Only when a mini-app requests location (e.g. a maps mini-app). | Only if you send it to an AI provider or map service. |
| Mini-app content & your AI settings (providers, models, API keys) | On-device storage | Stored locally so Forge works offline and remembers your setup. | No, unless you enable optional backup (see §4). |
| Notifications | Post notifications | To show status/progress for background mini-apps you run. | No. |
| Bluetooth connections | Bluetooth connect | Optional audio routing (e.g. to a Bluetooth speaker/earpiece) for mini-apps that use audio. | No. |
Forge is BYO-AI: you provide your own API key for a provider of your choice. When you use an AI feature, Forge sends the relevant text, images, or audio over HTTPS to that provider. Forge does not operate these providers and has no access to the data once it leaves your device. Each provider's privacy policy governs your data there.
Providers you can configure include, for example:
Your API keys are stored only on your device (and in your optional backup, see §5). They are never sent to Forge's developer or any party other than the provider they belong to.
Forge can back up your mini-app library and AI settings to a folder you choose using Android's Storage Access Framework (e.g. a folder in your own Google Drive). Forge only reads/writes inside the folder you pick; it never has access to the rest of your Drive. The backup contains your API keys — do not share the backup folder with anyone. Disconnecting backup removes Forge's access to that folder.
Forge is a general-purpose developer tool and is not directed at children under 13 (or the applicable age in your country). Forge does not knowingly collect data from children. If you believe a child has provided data, contact us so it can be removed.
Because Forge keeps your data on your device and with providers you control, you exercise your rights directly: review or delete mini-apps in the App, clear app data in Android Settings, disconnect or delete your backup folder, and manage your data in your AI provider accounts.
For transparency, the Google Play build requests:
Internet, Camera, Record audio, Access fine location, Access coarse location, Post notifications, Bluetooth connect, Foreground service (data sync), Wake lock, Vibrate, Receive boot completed, Read media images, Modify audio settings, Access network state, Access Wi-Fi state, Change Wi-Fi state, Nearby Wi-Fi devices, Schedule / use exact alarm.
The Google Play build does not request SMS, call-log, contacts, phone-state, or query-all-packages permissions.
If this policy changes, the updated version will be posted at this same URL with a new effective date. Material changes will be noted in the App's release notes.
For privacy questions or requests, contact the developer:
Email: luiski007@proton.me
GitHub: https://github.com/lirunki/forge