Energizer AI Privacy Policy

ForgeTech
Effective Date: June 1, 2026 | Last Updated: June 2, 2026

This Privacy Policy ("Policy") describes how ForgeTech ("Company," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the Energizer AI mobile application ("Application"). Please read this Policy carefully.

By downloading, installing, or using the Application, you acknowledge this Policy. Where we rely on your consent (for example, optional Google Calendar sync), you provide consent that is freely given, specific, informed, and unambiguous by enabling that feature or accepting this Policy at sign-in, as described below. You may withdraw consent at any time by disabling the relevant feature, signing out, or deleting your account, without affecting the lawfulness of processing before withdrawal.

SECTION 1: INFORMATION WE COLLECT

1.1 Information You Provide Directly

Account Information

When you sign in using Google Sign-In, we collect:

Full name
Email address
Google user identifier
Profile photo URL (if available from Google)

User-Generated Content

We collect information you provide through the Application, including:

Energy level ratings (1–10 scale) and timestamps
Survey responses (sleep patterns, wake times, energy preferences)
AI chat messages and prompts
Daily schedules, calendar notes, and planning content
App settings and preferences (theme, reminders, retention settings)

Google Calendar (Optional)

Calendar access is optional and only used if you turn on Google Calendar sync in Settings (Pro feature). We do not access your calendar until you connect and enable this feature.

When enabled, the Application uses the Google Calendar API to:

Create events in your primary Google Calendar from AI-generated daily schedules (event titles, start/end times, and descriptions derived from your schedule)
Read only today’s calendar events that match Energizer AI–created entries (filtered by an “Energiser:” title prefix) so we can update or replace them without creating duplicates
Delete previously created Energizer AI events for the current day before inserting an updated schedule

We do not read your entire calendar history, sell calendar data, or use calendar data for advertising. Calendar requests are made from your device to Google using your Google account authorization. You can disconnect Google Calendar sync at any time in Settings.

Subscription Information

If you purchase Energizer AI Pro, Google Play processes payment. We do not receive your payment card number. We receive subscription status through Google Play and RevenueCat.

1.2 Information Collected Automatically

Usage and Technical Data

Application open events and session activity (for example, survey scheduling)
Device type and operating system version (for compatibility)
Authentication session tokens
Service and error logs related to app functionality

We do not use third-party advertising analytics (such as Google Analytics or Facebook Pixel).

Some preferences are stored locally on your device (for example, via SharedPreferences).

1.4 Summary Notice of Personal Data Collected

The table below summarizes the main categories of personal data we collect, why we collect them, and the typical legal basis under the GDPR:

Category of personal data	Examples	Purpose of processing	Legal basis (GDPR)
Identity & contact	Name, email, Google user ID, profile photo URL	Account creation, authentication, support	Contract; legitimate interests
User-generated wellness & productivity data	Energy logs, surveys, schedules, notes, chat messages	Core app features, AI insights, charts	Contract; consent where applicable
Calendar data (optional)	Energizer AI–created events only, when sync is enabled	Schedule sync to Google Calendar	Consent
Subscription data	Pro status, purchase identifiers	Billing and entitlement management	Contract
Technical & usage data	Device type, OS version, session tokens, error logs	Security, compatibility, reliability	Legitimate interests; contract

1.5 Information We Do Not Collect

Precise or approximate geographic location data
Contacts or address book information
Photos, videos, or media files from your device
Payment card numbers or bank account details
Browsing history outside the Application
Microphone recordings or camera captures
Biometric data
Data from other applications installed on your device

SECTION 2: THIRD-PARTY SERVICES AND DATA PROCESSING

2.1 Google Sign-In and Supabase Authentication

The Application uses Google Sign-In for identity verification and Supabase for authentication, account management, and secure backend services. When you sign in, credentials and session tokens are processed through Google and Supabase infrastructure.

Google Terms of Service: policies.google.com/terms
Google Privacy Policy: policies.google.com/privacy
Supabase Privacy Policy: supabase.com/privacy

2.2 Google Gemini API

The Application uses Google Gemini API for AI chat and insights. When you use AI features:

Your prompts and relevant app context (energy patterns, schedules, calendar notes) are sent through our secure backend to Google for processing
AI processing is used only to provide Application features
Google's data processing is governed by Google's Privacy Policy: policies.google.com/privacy

2.4 Google Calendar API (Optional)

Google Calendar integration is optional and off by default. If you enable it (Pro feature), the Application uses the Google Calendar API to sync schedules you choose to export:

Create: Add schedule items as events in your primary Google Calendar
Read: List only today’s Energizer AI–created events (identified by an “Energiser:” title prefix) to avoid duplicates when updating
Delete: Remove previously created Energizer AI events for the current day before inserting an updated schedule

We do not access your full calendar, read unrelated events, or store your complete calendar on ForgeTech servers. Authorization is handled through Google Sign-In on your device. Disable sync anytime in Settings.

Energizer AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google Calendar API Terms: policies.google.com/terms
Google Privacy Policy: policies.google.com/privacy

2.5 Data Processing by Third Parties

Service Provider	Data Processed	Purpose	Privacy Policy
Google Sign-In	Account credentials, profile information	User authentication	Google
Supabase	Account data, energy logs, schedules, notes, auth tokens	Backend, database, secure functions	Supabase
Google Gemini API	Chat messages, energy context, schedules	AI-powered features	Google
Google Calendar API	Calendar events (if connected)	Optional schedule sync	Google
Google Play	Subscription and purchase status	In-app billing	Google
RevenueCat	Subscription status, purchase identifiers	Pro subscription management	RevenueCat

SECTION 3: HOW WE USE YOUR INFORMATION

3.1 Primary Purposes

Authentication and Account Management

Verify your identity and maintain secure access to your account
Manage your user session and authentication state

Core Application Functionality

Store and display your energy log entries and charts
Provide AI-powered chat, insights, and recommendations
Create and sync daily schedules (including optional Google Calendar sync)
Manage Pro subscriptions and restore purchases
Send local notifications you enable

Application Improvement

Personalize your experience based on your preferences
Determine when to display periodic context surveys
Maintain reliability, security, and performance

3.2 Purposes of Processing

We process personal data only for specified, explicit, and legitimate purposes. We do not use your data for incompatible purposes without notice and, where required, consent. Our purposes include:

Providing the Application: authentication, storing energy logs, schedules, chat, charts, and settings
AI features: sending prompts and relevant context to Google Gemini to generate responses and schedules
Optional calendar sync: creating, reading, and deleting Energizer AI–tagged events when you enable sync
Subscriptions: verifying Pro status and processing restores through Google Play and RevenueCat
Notifications: local reminders you enable on your device
Security & operations: preventing abuse, maintaining performance, and fixing errors
Legal compliance: responding to lawful requests and meeting regulatory obligations

3.3 Legal Bases for Processing (GDPR Article 6)

Consent: Where required, such as optional integrations.
Contractual Necessity: To provide the Application and your account.
Legitimate Interests: Security, fraud prevention, and service improvement.
Legal Obligations: Where applicable law requires processing or retention.

SECTION 4: DATA STORAGE AND SECURITY

4.1 Cloud and Local Storage

Your account and core app data (energy logs, schedules, notes, and related records) are stored in Supabase cloud infrastructure linked to your user account.

Some settings and cached preferences may be stored locally on your device using SharedPreferences until you clear app data or uninstall.

4.2 Security Measures

Encrypted Communication: HTTPS/TLS for data in transit
Access Controls: Row-level security and authenticated access on backend data
Secure Authentication: Industry-standard OAuth via Google Sign-In
No Plain-Text Credentials: Passwords are not stored; Google handles sign-in

4.3 Security Limitations

No method of electronic storage or transmission is completely secure. We cannot guarantee absolute security.

SECTION 5: DATA RETENTION

5.1 Energy and App Data

Retained while your account is active and as needed to provide the Application
You may adjust some retention preferences in Application settings where available

5.2 Account Data

Your session persists until you sign out
Account-related cloud data is retained while your account exists

5.3 Deletion

You may delete your data through:

Settings → Delete Account: Permanently deletes your account and associated cloud data
Settings → Clear Data: Removes local data and preferences where available
Sign Out: Ends your session on the device
Uninstallation: Removes local Application data from your device
Email Request: Contact us at support.forgetech@gmail.com

SECTION 6: DATA SHARING AND DISCLOSURE

6.1 No Sale of Personal Information

We do not sell, rent, or trade your personal information for monetary or other valuable consideration. We do not share personal information for cross-context behavioral advertising.

6.2 Limited Sharing

Circumstance	Information Shared	Purpose
Service Providers	Data listed in Section 2	Operate authentication, storage, AI, calendar sync, and billing
AI Processing	Chat prompts and relevant context	Google Gemini API features
Legal Compliance	As required by law	Legal process, court orders, or government requests
Business Protection	As necessary	Protect rights, safety, and security

6.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice where required by law.

SECTION 7: YOUR RIGHTS AND CHOICES

7.1 Access and Portability

You may access much of your information through the Application. Contact us to request additional access where applicable under law.

7.2 Correction

Update your information through surveys, app settings, and by logging new energy data.

7.3 Deletion

Delete your account in Settings or email support.forgetech@gmail.com.

7.4 Opt-Out Options

Reminders: Disable in Application settings
Google Calendar: Disconnect calendar sync in settings
Subscription: Cancel via Google Play → Subscriptions

7.5 California Privacy Rights (CCPA/CPRA)

California residents may request information about data collected, request deletion, and opt out of sale/sharing. We do not sell or share personal information for cross-context behavioral advertising. Contact support.forgetech@gmail.com.

7.6 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the rights described below. To exercise them, contact support.forgetech@gmail.com. We respond within one month, or inform you if an extension is required.

Access (Art. 15): Request confirmation and a copy of personal data we process
Rectification (Art. 16): Request correction of inaccurate data
Erasure (Art. 17): Request deletion (also via Settings → Delete Account)
Restriction (Art. 18): Request limited processing in certain circumstances
Portability (Art. 20): Receive data you provided in a structured, commonly used format where applicable
Objection (Art. 21): Object to processing based on legitimate interests
Withdraw consent (Art. 7(3)): Withdraw consent at any time for consent-based processing
Complaint (Art. 77): Lodge a complaint with your local supervisory authority

7.7 GDPR Article 5 — Processing Principles

We process personal data in accordance with GDPR Article 5. Personal data is:

Processed lawfully, fairly, and transparently — this Policy explains what we collect and why
Collected for specified, explicit, and legitimate purposes — see Sections 1 and 3
Adequate, relevant, and limited to what is necessary — we do not collect data unrelated to app functionality
Accurate and kept up to date — you may update data through the app or by contacting us
Kept no longer than necessary — see Section 5 (Retention)
Processed with appropriate security — see Section 4 (Security)
Handled accountably — we maintain measures to demonstrate compliance with these principles

7.8 GDPR Article 7 — Conditions for Consent

Where we rely on consent, we ensure that:

Consent is freely given — optional features (such as Google Calendar sync) are off by default
Consent is specific and informed — we describe each integration before you enable it
Consent is unambiguous — you take a clear action (sign-in, toggle, or permission prompt)
Withdrawal is as easy as giving consent — disable sync in Settings, sign out, or delete your account

When you first use the Application, you are asked to agree to our Terms of Service and this Privacy Policy before continuing.

7.9 GDPR Article 9 — Special Categories of Personal Data

We do not intentionally collect or process special categories of personal data under GDPR Article 9, such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for unique identification, data concerning health for medical diagnosis or treatment, data concerning sex life, or sexual orientation.

Energy ratings and wellness-related inputs you voluntarily provide are self-reported productivity and wellness notes used solely to operate app features. They are not clinical records, medical diagnoses, or professional health assessments. If you choose not to provide this information, core sign-in remains available but energy-tracking and AI personalization features will not function as intended.

SECTION 7A: PERSONAL DATA BREACH NOTIFICATION (GDPR ARTICLES 33 & 34)

We maintain procedures to detect, respond to, and document personal data breaches.

Internal response: If we become aware of a personal data breach, we will investigate promptly, take steps to contain it, and assess the risk to your rights and freedoms.
Supervisory authority (Art. 33): Where required by GDPR, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of a breach, unless the breach is unlikely to result in a risk to your rights and freedoms.
Individuals (Art. 34): If a breach is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in clear language, describing the nature of the breach, likely consequences, measures taken, and contact details for more information.
Contact: If you believe your account or data has been compromised, email support.forgetech@gmail.com immediately.

SECTION 8: INTERNATIONAL DATA TRANSFERS

Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate (including Google and Supabase). Where personal data is transferred from the EEA, UK, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms provided by our processors, where required by law.

SECTION 9: CHILDREN'S PRIVACY

The Application is not intended for children under thirteen (13). We do not knowingly collect personal information from children under 13. Contact support.forgetech@gmail.com if you believe a child has provided information.

SECTION 10: CHANGES TO THIS PRIVACY POLICY

We may update this Policy from time to time. Material changes will be reflected by updating the "Last Updated" date. Continued use after changes constitutes acceptance.

SECTION 11: CONTACT INFORMATION

If you have questions or requests regarding this Policy:

Company Name: ForgeTech
Application: Energizer AI
Address: Shahrah-e-Liaquat, Karachi, Pakistan
Email: support.forgetech@gmail.com

SECTION 12: GOOGLE PLAY DATA SAFETY SUMMARY

Data Collected:

Name, email address, and user identifiers (account functionality)
Self-reported energy/wellness data (app functionality)
User-generated content including chat and schedules (app functionality)
App activity (app functionality, not third-party advertising analytics)
Subscription status (if applicable)

Data Security: Encrypted in transit. Account deletion available in-app and by email.

Data Sharing: No sale of personal data for advertising. Shared only with service providers listed in Section 2.

CONSENT

By using Energizer AI, you acknowledge that you have read and understood this Privacy Policy.