Privacy Policy

What we collect

How your saves reach iForgot: when you connect a platform, you sign in to your own account and allow iForgot to access it. iForgot keeps that sign-in on its own systems, only for you, and uses it to save your likes and saves, with their images and video covers, into your library, as you choose. We never store your password, and iForgot isn’t affiliated with these platforms.

Only what iForgot needs to work:

• Your account. Your email address and how you sign in: Apple, Google or a code sent to your email.
• Your synced posts. The posts you like or save on the apps you connect: their text, photos, videos, links and when you saved them.
• Your tags. The tags you make, their descriptions and the posts they’re on.
• Your plan. Whether you’re on the free trial, Plus or Pro, and how many credits are left this month. Apple handles the payment; we never see your card.
• Agent connections. Which agents you’ve connected, and a short log of their use (see Agents).
• Diagnostics and usage. App version, device type, crash reports and which features you use, so we can fix problems and improve iForgot.

Connecting your apps

To connect X, Instagram, TikTok, RedNote or Douyin, you sign in to your account there and allow iForgot to access it. Your password is used only for that sign-in. iForgot never keeps it, and never fills in codes or puzzles for you.

Once you’re signed in, we keep the session the app gives back, so sync can run on its own. We use it only to read your likes and saves. iForgot never posts, likes, follows or sends messages for you.

You can disconnect an app at any time in Connected accounts. Its session is deleted right away, and you choose whether to keep or delete the posts already synced from it.

Your synced posts

iForgot keeps its own copy of each post you like or save, so it stays readable even if the original changes or is removed. Un-liking a post on the app doesn’t delete it from iForgot.

Your library is visible only to you. Deleting a post in iForgot removes it from iForgot only, not from the app it came from.

Tags

Your tags and their descriptions are visible only to you. If Auto-tag is on, iForgot uses your tag descriptions to tag new saves. You can turn it off at any time in Settings.

Agents

If you connect an agent, such as Claude or ChatGPT, it can use two read-only tools, search and fetch, on your own library only.

• What agents can see. The text, images and links of your posts, the app each came from, their dates and your tags.
• What they can’t. They can’t change anything, and they can’t see your email, your plan, your passwords, your sign-ins to other apps or anyone else’s library.
• What we receive. To answer, iForgot receives the search words or the post the agent asks for. We use them to answer and don’t store them. To search by meaning, the search words are also sent to OpenAI’s API to make a search vector; OpenAI doesn’t use API data to train its models.
• What we log. Which agent used your library, which tool, when, and how many posts were returned. We keep this log for up to 30 days, for security and support. It never holds search words or post content.
• Where results go. To the agent you connected and its provider. Their own terms and privacy policy cover what they do with them.
• What we never do. We never use agent requests or your library to train models, show ads, build profiles or sell data.
• How long access lasts. Until you disconnect. An access token lasts one hour and refreshes on its own. Disconnecting in Settings › Agents, in the app or on the web, or deleting your account ends access at once.
• If something goes wrong. If a security incident affects agent access, we tell affected users and the connected platforms within 48 hours of confirming it.

Questions about agents and your data? Write to support@iforgot.ai.

Where data is stored

Your account, synced posts and tags are stored by Supabase in the United States, encrypted in transit and at rest. Copies of the images and videos in your saved posts are stored by Cloudflare. Only a few people at iForgot can reach them, and only to keep the service running or to answer a request from you.

We don’t sell your data, and we don’t share it with advertisers.

Who processes your data

These companies process data for iForgot, each only for its own part:

• Supabase: your account, library and sign-in. United States.
• Vercel: hosting this website, the web app and the agent connection.
• Cloudflare: stores copies of the images and videos from your saved posts and serves them by link; email routing.
• OpenAI API: turns post text and search words into search vectors, and suggests tags for Auto-tag.
• Sentry: error reports.
• PostHog: app usage analytics.
• Resend: sign-in emails.
• Expo: push notifications.
• Apple: Sign in with Apple and App Store subscriptions.
• Google: Sign in with Google.

Agents you connect receive the results you ask for (see Agents).

Deleting your data

• A post: delete it in iForgot, on your iPhone or on the web.
• One app’s posts: disconnect the app and choose Delete synced posts.
• Everything: in Settings, open Account, then Delete account. This deletes your account and everything synced.

Copies in our backups are removed when those backups are deleted.

Contact

Questions about your privacy, or a request about your data? Write to support@iforgot.ai.