Privacy Policy

Version 1.5 — Effective Date: August 30, 2026

This Privacy Policy ("Policy") describes how JStar Tech LLC, a California limited liability company ("JStar Tech," "we," "our," or "us") collects, uses, stores, discloses, and otherwise processes information when you use IFORGETALOT and our related websites, applications, mobile applications, AI features, and other services that link to this Policy (collectively, the "Services").

For purposes of this Policy, "Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable person, as defined under applicable law.

By using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, do not use the Services.

1. Scope

This Policy applies to Personal Information we collect when you use the Services in your personal capacity.

If we later offer business, team, or organization-managed accounts, and you use the Services through an organization that controls your workspace or account, that organization may act as the controller of certain workspace data, and its policies may also apply.

2. Information We Collect

We collect the following categories of information.

2.1 Information You Provide to Us

Account and registration information. When you create an account, we may collect your name, email address, username, password, profile image, and other registration information.

Payment and subscription information. If you purchase paid features, we or our payment processors may collect billing information, transaction details, subscription status, tax-related information, billing address, and payment verification details. We generally do not store full payment card numbers.

Communications with us. If you contact us for support, send us emails, participate in surveys, respond to questionnaires, or otherwise communicate with us, we collect the information you choose to provide, including your contact information and the contents of your communications.

User content. We collect content you create, upload, store, or share through the Services, such as tasks, goals, notes, checklists, schedules, calendar items, reminders, comments, labels, tags, attachments, productivity records, activity history, and other materials you submit.

Shared and accountability content. If you use features that allow you to share progress or productivity information with other users, collaborators, or accountability partners, we collect the information you choose to share and the related interactions.

Telephone number and messaging information. If you choose to turn on text message or automated voice call reminders, we collect your mobile telephone number and the verification, consent, delivery, and acknowledgement records described in Section 4. These features are off by default.

2.2 Information Collected Automatically

Device and log information. We may automatically collect information such as your IP address, device ID, device type, operating system, browser type, app version, language settings, time zone, crash data, and diagnostic data.

Usage information. We collect information about how you use the Services, such as features used, pages or screens viewed, actions taken, dates and times of access, referring URLs, clicks, and other interaction data.

Reminder, notification, and settings data. We may collect information about reminders you create, notification preferences, whether notifications were sent or interacted with, and related settings data. All three importance levels are stored on your device; Must acknowledge and Can't miss may also be mirrored to our servers as a delivery copy. See Section 2.6.

Calendar and integration data. If you connect calendars or other third-party integrations, we may collect information necessary to provide those integrations, such as event metadata, sync status, or integration tokens, subject to the permissions you grant.

Location information. If you enable location-based features, we may collect precise or approximate location information, subject to device permissions and applicable law.

2.3 AI-Related Information

Prompts and inputs. If you use AI Features, we collect the prompts, text, documents, tasks, schedules, goals, notes, and other materials you submit to those features.

Outputs and AI interactions. We collect AI-generated outputs, your interactions with those outputs, feedback you provide, and related metadata to operate, secure, improve, and support the AI Features and the Services.

2.4 Information from Other Sources

Third-party sign-in providers. If you register or sign in through a third-party account, such as Google or Apple, we may receive information such as your name, email address, account identifier, and profile image, subject to that provider's settings and permissions.

Third-party integrations. If you connect the Services to third-party products or services, such as calendar, email, cloud storage, or productivity platforms, we may receive information from those services as necessary to provide the integration.

Contacts and invitations. If you invite others to use the Services or share content with them, we may collect the contact information you provide for that purpose.

2.5 Gmail Integration (Optional)

If you choose to connect a Gmail account to iForgetalot, the mobile app obtains an OAuth access token and refresh token directly from Google. Those credentials are stored only in the device's protected iOS Keychain or Android Keystore-backed storage. They are not transmitted to or stored by iForgetalot servers, OpenAI, Anthropic, or another AI provider.

What the app accesses. The mobile app connects directly to Google's Gmail API and accesses: (a) the email address of the connected account, (b) message metadata needed to identify recent emails, and (c) the body content of individual recent emails needed to detect actionable items. This Gmail data is processed locally on your device and is not sent to iForgetalot servers.

How it is used. The app uses its on-device AI model to extract a suggested task title, due date, category, and priority, then presents those suggestions for your confirmation. No task is created without your explicit confirmation. Gmail content is not sent to a cloud AI processor, used for advertising, used to train models, or shared with third parties during normal operation.

Retention. OAuth credentials remain in protected storage on your device while the account is connected. Email content is held in device memory only while it is analyzed and is not saved as a local email archive. Suggested-task drafts and minimal message identifiers used to avoid duplicate suggestions are stored in the app's local database. Disconnecting revokes the credential directly with Google and removes it from protected device storage; you may delete remaining local app data through the app or operating-system controls.

User control. You can disconnect any connected Gmail account at any time from the iForgetalot app under Settings → Gmail Tools. The device immediately requests revocation from Google and removes its locally stored credential. You can also revoke access at any time from your Google Account's security page at myaccount.google.com/permissions.

Limited Use. iForgetalot's use of information received from Gmail APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. See Section 7.5 for the full disclosure.

2.6 Where reminders are stored

All three reminder levels — Remind Once, Must acknowledge, and Can't miss — are stored locally on your device. Your phone is the source of truth. That local record is what you see, edit, complete, and delete. Reminders are never stored only on the web.

Remind Once. Local only. We do not upload its title, time, destination, or other reminder content to our servers. In-app alerts and push notifications for these reminders are delivered from the device.

Must acknowledge and Can't miss. Also local, and also mirrored. In addition to the on-device reminder, we keep a delivery copy on our servers — a limited record (typically the reminder identifier, title, body, importance level, scheduled time, leave-by time, and time zone) used to send the text messages and automated voice calls you have opted into if you do not respond on the device. The delivery copy is not the reminder you edit in the app. When you complete, cancel, or otherwise settle the reminder on your device, we stop using that delivery copy for further escalation.

Encryption. We encrypt the delivery copy at rest (title, body, and your phone number) with AWS KMS so a stolen database dump is not readable as plain text. That is not end-to-end encryption and does not mean we cannot read the reminder. We decrypt the title to send you a text or place a call. If we could not read it, we could not deliver Must acknowledge or Can't miss over those channels.

Send Reminder. If you send a reminder to someone else, we store a temporary invite on our servers (title, time, destination if you included one, sender name, recipient phone number, and a claim code) for up to 30 days so the recipient can add it from the link. We also record whether the link was opened in the installed app and whether the reminder was added to the recipient's account, so the sender can see delivery status. We do not expose the recipient's other account activity. That invite is a delivery mechanism, not their reminder. After they claim it, their phone is the source of truth, under the same rules as a reminder they created themselves.

3. How We Use Information

We use Personal Information for the following purposes:

To provide and operate the Services. We use your information to create and maintain your account, authenticate you, provide the features you request, process subscriptions, send reminders and notifications, operate calendar and other integrations, and enable collaboration and accountability features.

To provide AI Features. We use prompts, inputs, outputs, and related data to operate AI Features, generate responses, prioritize tasks, provide productivity suggestions, troubleshoot issues, and improve the quality and safety of those features.

To maintain and improve the Services. We use information to analyze usage, debug, develop new features, improve performance, personalize experiences, and maintain functionality.

To communicate with you. We use information to send service-related announcements, reminders, updates, security notices, support responses, and, where permitted, marketing communications.

For safety, security, and abuse prevention. We use information to detect, investigate, prevent, and address fraud, abuse, harmful behavior, misuse of AI Features, security incidents, and violations of our Terms or policies.

To comply with legal obligations. We use information to comply with legal requirements, enforce our agreements, respond to lawful requests, and protect the rights, property, and safety of JStar Tech, our users, and others.

For research and analytics. We may use information to understand how users interact with the Services, create aggregated or de-identified analytics, and improve our products and operations.

For business operations. We use information for billing, accounting, audits, customer support, internal administration, and similar operational purposes.

4. Text Message and Voice Call Communications

IFORGETALOT offers optional reminder features that can reach you by text message (SMS) and by automated voice call when you have asked us to make sure you do not miss something. These channels are used for Must acknowledge and Can't miss reminders, not for Remind Once. This Section describes how those channels work and how we handle the related information. These channels are off by default and operate only after you provide a mobile telephone number, verify it, and expressly consent to the specific channel. Section 2.6 describes what reminder content is copied to our servers so these channels can operate.

Information we collect for these channels. To operate these features we collect your mobile telephone number, its verification status, the wireless carrier associated with it, the date, time, source, and policy version of the consent you provided, your opt-out and revocation history, delivery and acknowledgement records for each message or call, and the identifier of the reminder to which each message or call relates.

How we use it. We use this information solely to deliver the reminders and escalation you have requested, to confirm that you received them, to stop further attempts once you acknowledge a reminder, to honor opt-out requests, to verify your telephone number, to prevent abuse of the messaging channels, and to meet our record-keeping obligations under applicable telecommunications and consumer-protection rules. We do not use these channels to send you marketing or promotional messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We disclose your mobile telephone number only to the communications providers that transmit these messages and calls on our behalf, and only for that purpose.

Consent is separate and specific. Consent to receive text messages is separate from consent to receive automated voice calls, and both are separate from your agreement to this Policy or to our Terms of Service. Consenting to either channel is not a condition of creating an account, of purchasing anything, or of using any other part of the Services. You choose these channels when you set a reminder's importance level and in the notification settings within the app.

Message frequency and cost. Message frequency varies and depends on how many reminders you create and the importance level you assign to them. Message and data rates may apply. JStar Tech does not charge you for these messages; your wireless carrier may. Neither JStar Tech nor any wireless carrier is liable for delayed or undelivered messages or calls.

How to stop messages. Reply STOP to any text message from IFORGETALOT to cancel text messages at any time. We will send a single confirmation and then send no further text messages unless you opt in again. Reply HELP to any text message for help, or contact us using the details in the Contact Us section. You can also turn text messages and voice calls off individually, at any time, in the app's notification settings. Turning off a channel takes effect immediately, including for reminders that have already been scheduled. Opting out of these channels does not delete your account and does not stop in-app or push notifications, which you control separately in your device and app settings.

Not an emergency service. These channels are a convenience feature and depend on your wireless carrier, network conditions, and device settings. Do not rely on IFORGETALOT text messages or voice calls in an emergency or in any situation where failure to receive a message could result in harm.

5. Cookies and Similar Technologies

We and our service providers may use cookies, SDKs, pixels, local storage, and similar technologies to collect information about your interactions with the Services. We may use these technologies for authentication and security, remembering preferences and settings, analytics and performance measurement, improving functionality, and marketing and communications where permitted. You can control certain cookies and similar technologies through your browser or device settings. Disabling certain technologies may affect the functionality of the Services.

6. How We Share Information

We may share Personal Information in the following circumstances: with other users you authorize; with service providers and vendors that help us provide the Services; with third-party integrations you choose to connect; with business or organizational account administrators if applicable; for legal and safety reasons; in connection with a business transaction; and with your consent. We do not sell your Personal Information. As described in Section 4, we do not share mobile telephone numbers or text-messaging consent with third parties for their own marketing or promotional purposes.

7. AI Service Providers and Automated Processing

Some AI Features may rely on third-party service providers or model providers. To operate those features, we may transmit prompts, inputs, and related information to those providers. We may also use automated systems to generate AI outputs, prioritize or organize tasks, deliver suggestions or reminders, detect misuse or suspicious activity, and improve feature performance and safety. AI-generated outputs may be based on patterns in data and may be inaccurate, incomplete, or inappropriate.

7.5 Google API Services User Data Policy & Limited Use

iForgetalot's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

Limited purpose. We use Gmail data only to provide the user-facing email-to-task feature described in Section 2.5. We do not use Gmail data for any other purpose.

No transfer in normal operation. Gmail credentials and Gmail message content are exchanged only between your device and Google for this feature. Task extraction runs on your device, so iForgetalot does not transfer Gmail data to OpenAI, Anthropic, another AI provider, or an iForgetalot server during normal operation. We may disclose information only when required by applicable law or when you explicitly direct a separate sharing action.

No use for advertising. We do not use Gmail data to serve advertisements, including remarketing, targeted, or interest-based advertisements.

No human reading. Gmail content is not available to employees or contractors of JStar Tech through this device-only integration. If you separately choose to share specific content with support, that content is handled under the other terms of this Policy.

8. Data Retention

We retain Personal Information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. We may retain de-identified or aggregated information for longer periods. We retain text message and voice call consent, opt-out, and delivery records for as long as required to demonstrate compliance with applicable telecommunications rules, even after you opt out of those channels. Delivery copies of Must acknowledge and Can't miss reminders are kept only while they may still need to escalate; the reminder itself remains on your device until you delete it. Send Reminder invites expire after 30 days.

9. Your Choices and Controls

Depending on the Services and your jurisdiction, you may be able to: access and update certain account information in your settings; manage notification preferences; manage sharing and accountability permissions; disconnect integrations; opt out of promotional emails; and request deletion of your account. You may stop text messages at any time by replying STOP to any message from us, and you may turn text messages and automated voice calls off individually in the app's notification settings.

10. Privacy Rights

Depending on your location, you may have rights regarding your Personal Information, including the right to know what information we collect, access a copy of your information, request deletion, request correction, request portability, object to or restrict certain processing, and withdraw consent where processing is based on consent.

11. California Privacy Notice

If you are a California resident, California law may provide you with additional rights regarding your Personal Information. We do not sell Personal Information in the traditional sense for money. We also do not knowingly sell or share the Personal Information of minors under 16. We use sensitive personal information only for purposes permitted by law. We will not discriminate against you for exercising your privacy rights.

12. EEA, UK, and Similar Jurisdictions

If you are in the EEA, UK, or another jurisdiction with similar laws, you may have rights under applicable data protection law. Where required, we process Personal Information on legal bases including performance of a contract, legitimate interests, compliance with legal obligations, and consent. Your information may be transferred to and processed in the United States and other countries where privacy laws may differ.

13. Security

We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect Personal Information from anyone under 13. Consistent with the Children's Online Privacy Protection Act (COPPA) and applicable state laws, users between 13 and 17 require verifiable parental or guardian consent before signing up. If you are a parent or guardian and believe your child has provided us with Personal Information without your consent, contact us and we will delete the information.

15. Third-Party Services

The Services may link to or integrate with third-party services. We are not responsible for the privacy practices of third parties.

16. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will post the updated Policy and revise the Effective Date above.

17. Contact Us

If you have questions or requests regarding this Policy, you may contact us at:

JStar Tech LLC
a California limited liability company