Privacy Policy

ForgetME turns a spoken thought into a written note you can search and ask questions about. To do that, some of what you record has to leave your phone. This policy says exactly what leaves, who receives it, how long anyone keeps it, and how to get rid of it.

ForgetME (“we”, “us”) is the data controller for the information described here. If anything is unclear, email forgetme.hq@gmail.com.

Information you give us

• Account details — your email address, and a display name and username if you set one. Signing in with Google gives us your email address and basic profile information from Google.
• Profile photo — only if you upload one.
• Your notes — the voice recordings you choose to make, the transcripts produced from them, and the AI summaries generated from those transcripts.
• What you ask — the questions you type into Ask, which are answered using your own notes.
• Notes you share — if you connect with another user and send them a note, that note becomes visible to that person.

Information collected automatically

• Device and app information — device model, operating system version, app version, language.
• Diagnostics — crash reports and error logs.
• Usage counters — how many notes and AI requests you have made, used to apply the free-tier limits and to bill Pro correctly.
• Advertising identifier and approximate location — on the free tier only. Google AdMob receives your device advertising ID and infers an approximate location from your IP address. The app itself never requests location permission and cannot read your precise location.
• Push token — if you allow notifications, so reminders you set can be delivered.

We do not collect your contacts, calendar, messages, browsing history, health data, or precise location. We never see your card details — Google Play handles payment.

This is the part people most want to be clear, so it is set out on its own.

• You press record and speak. The audio is captured on your device.
• The audio is sent over an encrypted connection to our server, and on to Google Gemini, which converts it into text.
• The transcript comes back and becomes your note. A short AI summary may be generated from it.
• The recording is then deleted. We do not keep the audio after your note exists, and we do not store the audio file in your account.
• The note itself — the text — is stored on your device and synced to your account so it is there on your next sign-in.

Your recordings and notes are never used to serve or target advertising, and are never sold.

• Providing the app — storing your notes, syncing them, transcription, search, Ask.
• Your account — signing you in, keeping your profile, supporting you.
• Payments — managing Pro subscriptions and entitlements.
• Limits and abuse prevention — free-tier quotas, rate limiting, detecting misuse.
• Reliability — diagnosing crashes and errors.
• Advertising — showing ads on the free tier (see below).
• Legal obligations — where the law requires us to keep or produce records.

Where the UK GDPR or EU GDPR applies, our legal bases are: performance of a contract (running the app and your account), legitimate interests (security, abuse prevention, keeping the app working), consent (personalised advertising, notifications, microphone access), and legal obligation where applicable. You can withdraw consent at any time.

The free tier is supported by ads supplied by Google AdMob.

• AdMob receives your device advertising ID, technical device data, an approximate location derived from your IP address, and your interactions with ads.
• Where the law requires it, we ask for your consent through Google’s consent form before any ad is requested. You can decline. If you decline, or the consent form cannot be shown, you see non-personalised ads — ads that are not based on a profile of you — rather than no ads.
• You can change your choice later from the privacy options available in the app where that is offered in your region.
• Your notes, recordings, transcripts, and summaries are never shared with advertisers.
• Pro subscribers see no ads at all, and are never asked for ad consent.

You can also reset or delete your advertising ID in your Android settings.

We do not sell your data. We share only what each provider needs to do its job:

• Supabase — account details, notes, summaries, avatar, push token. Our database, authentication, and file storage.
• Google Gemini — voice recordings, note text, your Ask questions. Transcription and AI features.
• Google AdMob — advertising ID, IP-derived approximate location, device and app info, ad interactions. Serving ads on the free tier.
• RevenueCat — a pseudonymous user ID, purchase and entitlement state. Managing subscriptions.
• Google Play — purchase transactions. Taking payment.
• Expo push service — push token. Delivering your reminders.

We may also disclose information if we are legally required to, or to protect our rights or someone’s safety.

Some of these providers operate outside your country, so your information may be transferred internationally. Where that happens from the UK or EEA, transfers rely on the appropriate safeguards, such as the standard contractual clauses.

• Voice recordings — not retained; deleted once your note is created.
• Notes, summaries, profile, avatar — until you delete them, or until you delete your account.
• Deletion archive (email, note text, summaries) — up to 30 days after account deletion, then permanently erased. Restorable by you during that window — see below.
• Usage counters and diagnostics — kept only as long as needed for quotas, security and reliability.
• Billing records — as long as tax and accounting law requires.

You can delete your account at any time from Settings → Delete account in the app, or by emailing forgetme.hq@gmail.com from your account’s email address. You do not need the app installed — see our account deletion page.

Deleting your account immediately and permanently removes your login, profile, username, profile photo, every note and summary, your usage records, your connections, and anything you had shared with other users.

One exception, stated plainly: a restricted archive holding your email address and the text of your notes and summaries is kept for up to 30 days, then permanently erased. It exists so an accidental or fraudulent deletion can be undone and so we can investigate abuse. It is not used for anything else and no advertising or AI processing touches it. If you want it erased sooner, email us and we will do it.

Notes you had already shared with another user remain visible to that person unless you unshare them before deleting your account.

If you sign in again with the same Google account within 30 days of deleting, ForgetME offers to restore your notes. The offer appears immediately after sign-in and tells you how many notes are waiting and how many days remain.

• Restore brings back every archived note — its text, its summary, its category and its reminder — dated as originally captured, and empties the archive.
• Start fresh takes you into a clean, empty account. Your archive is left untouched, so you can still change your mind until the 30 days are up.
• Choosing neither changes nothing; the archive is erased on schedule either way.

What does not come back, because it was permanently deleted rather than archived: your profile photo, your connections and any notes shared with you, and the checklists inside a note. Notes restored from a deletion made before 18 August 2026 also come back without their category or reminder, which were not archived at the time.

Your Pro subscription is separate and is not affected either way — Google Play manages it, not us. Deleting your ForgetME account does not cancel it and does not refund it, and restoring your notes does not change it. If Pro does not show up on your restored account, use Restore Purchases in your profile. If you no longer want to be billed, cancel it in Google Play subscriptions.

After 30 days the archive is permanently erased and the offer stops appearing. There is no way for you or for us to recover the account after that point — the deadline is enforced by the database, not by the app.

We never ask for, and cannot look up, whether a particular email address has a deleted account. The restore offer is only ever shown to someone already signed in to that address.

Depending on where you live, you may have the right to:

• access the personal information we hold about you
• correct anything inaccurate
• delete your information
• export your notes
• object to or restrict certain processing
• withdraw consent you previously gave
• complain to your data protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk)

Most of these you can exercise yourself in the app. For anything else, email forgetme.hq@gmail.com. We aim to respond within 30 days.

Traffic between the app and our servers is encrypted with TLS. Your session token is held in the device’s encrypted secure store. Cloud data is protected with row-level security, so a signed-in account can only reach its own rows. Signing out erases the local copy of your notes from the device.

No system is perfectly secure, and we do not claim otherwise. If you believe your account has been compromised, contact us.

ForgetME is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has given us personal information, email us and we will delete it.

If we change this policy, we will update the date at the top and, for anything significant, tell you in the app before it takes effect.

forgetme.hq@gmail.com