Legal

Last Updated: July 24, 2026

Forgetly is a text-first reminder and AI assistant service operated by Everwoven LLC ("Forgetly," "we," "us," or "our"). This Privacy Policy explains how we handle personal information when you use Forgetly by text message, on our websites and dashboard, or through the companion app.

• We collect the account, message, reminder, and technical information needed to provide and secure Forgetly.
• Optional features—such as location reminders, Gmail, and Google Calendar—use additional information only after you choose to enable or use them.
• We use service providers, including AI providers, to operate Forgetly. Our current provider list is available on the Subprocessors page.
• You can deactivate your account in the dashboard and contact support@everwovenstudios.com with a verified privacy request.

This policy applies to Forgetly's messaging service, websites, dashboard, companion app, and optional connected-account features that link to this policy. Everwoven LLC is responsible for the Forgetly service described here.

Third-party services you choose to use with Forgetly may also handle information under their own terms and privacy policies.

Account and identity information

We collect information such as your email address, phone number, nickname or profile details, password hash, authentication credentials, account status, and Google sign-in information when you choose Google authentication.

Messages, reminders, and preferences

We collect messages you send to Forgetly and responses sent back to you. We also collect reminder and task details, optional notes, dates, times, timezones, statuses, recurrence settings, follow-up outcomes, conversation history, and the preferences needed to deliver and personalize the service.

Companion app and device information

If you use the companion app, we may collect an app-generated device identifier, platform and app version, push-notification tokens, app messages, saved places, permission status needed to explain feature availability, and technical information sent with app requests.

Location information

Location features are optional. If you create a location reminder or saved place, we collect the place name, address, coordinates, radius, and arrival or departure trigger you select. The companion app may also use your device's current location to help you choose a place or register an operating-system geofence.

The device operating system evaluates companion-app geofence crossings. Forgetly does not receive a periodic trail of your device's live location for this feature. When a crossing occurs, the app may report the reminder identifier and crossing event to Forgetly so the reminder can be delivered. When server-side place lookup is enabled, a place description you provide may be sent to Google Maps services to find candidate coordinates.

Google connected-account information

If you connect Gmail or Google Calendar, we receive encrypted OAuth tokens and the Google data needed for the features you enable. Depending on those features, this can include:

• Gmail metadata such as sender, subject, date, labels, and a short message snippet;
• Calendar names and event details such as title, time, location, attendees, and description; and
• Draft recipient and subject metadata retained temporarily so Forgetly can identify a draft you later approve.

Connected accounts are optional. You can disconnect one from your account settings.

Payments

Stripe collects and processes payment-method information when you purchase a subscription. Forgetly receives related billing contact details, Stripe customer and subscription identifiers, plan information, payment status, and transaction metadata, but does not receive full payment-card numbers.

Technical, analytics, and support information

We may collect IP address, browser or device context, cookie and session identifiers, authentication and security events, request and error logs, analytics events, feature interactions, communications with support, and other information needed to prevent abuse, troubleshoot, and operate the service.

Sources of information

We receive information directly from you, automatically from your browser or app, from messaging and connected-account providers you choose to use, and from service providers that help us operate Forgetly.

We use personal information to:

• Create, authenticate, recover, and secure accounts;
• Process messages and provide AI-generated responses;
• Create, schedule, deliver, and manage reminders, tasks, and follow-ups;
• Provide optional location, Gmail, Calendar, and notification features;
• Process subscriptions and provide billing support;
• Send verification messages, service notices, and support responses;
• Detect abuse, enforce limits, investigate security events, and protect the service;
• Diagnose failures, maintain reliability, and understand how features are used;
• Comply with law and establish, exercise, or defend legal claims; and
• Develop and improve Forgetly.

Forgetly uses third-party AI providers to analyze requests and generate responses. Information sent for AI processing may include your current message, relevant recent conversation or reminder context, connected-account content needed for the feature you requested, and limited profile context such as your nickname or timezone.

The provider used for a request can depend on availability and the task. See our Subprocessors page for the AI providers currently enabled in production and links to their privacy information.

AI output can be inaccurate. Avoid sending information that is not needed for your request.

Google publishes requirements for how apps may use and transfer information received from Google APIs in the Google API Services User Data Policy, including its Limited Use requirements. The practices below describe how Forgetly uses this information.

Depending on the feature you enable, Forgetly may request these Google permissions:

• gmail.readonly to read Gmail data needed for email-connected features;
• gmail.compose to create, manage, and send drafts at your direction;
• calendar.readonly to read calendars and events; and
• calendar.events.owned or calendar.events to create or change events on calendars you authorize.

Forgetly uses Google data to provide the connected feature you request—for example, finding relevant email context, preparing a draft, or reading and managing calendar events. Relevant Google-derived content may be sent to an enabled AI provider when AI processing is needed to perform that feature.

Forgetly sends an email only when your current request explicitly instructs it to send, or when you later approve a Forgetly-created draft with a SEND command. A draft-only request is not sent automatically. Forgetly may keep encrypted recipient and subject metadata for up to 30 days to identify a draft you approve later; it does not duplicate the draft body outside Gmail for this draft-tracking purpose.

When you disconnect Google, Forgetly deletes the locally stored connected-account record and dependent sync data and attempts to revoke the associated Google token. Disconnecting does not delete information from your Google account or information already incorporated into other Forgetly records, such as a reminder you created from an email.

Forgetly uses required cookies for authentication, session continuity, security, preferences, and account access. If you disable required cookies, parts of the website or dashboard may not work.

We also use Google Analytics across our web properties to measure page views, product interactions, browser and device context, and similar usage signals. Google Analytics may use cookies or similar identifiers.

Browser privacy controls may let you limit cookies. Forgetly does not currently represent that every browser preference signal is treated as a verified privacy request.

We may disclose information:

• To service providers that process it for the purposes described in this policy;
• To providers you direct us to connect with or use;
• To protect users, Forgetly, or others; investigate abuse; or enforce our agreements;
• When required by law or a valid legal process;
• As part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards; or
• With your direction or permission.

Our Subprocessors page identifies the providers currently used to operate Forgetly and the categories of information involved.

We keep information for as long as reasonably needed for the service, account history, security, legal compliance, dispute resolution, and legitimate operational records. Retention depends on the type of information, why it was collected, whether the account or connected feature remains active, and whether law or a security need requires a longer period.

In general:

• Account, message, reminder, task, preference, and saved-place records may remain while your account is active;
• Connected-account tokens and sync records generally remain until you disconnect the provider or the connection is otherwise removed. They may remain after account deactivation until the associated account information is deleted through the applicable deletion process;
• Push tokens generally remain until the device is deregistered or the token is invalidated. They may remain after account deactivation until the associated account information is deleted through the applicable deletion process;
• Draft recipient and subject tracking records are kept for up to 30 days;
• Billing, security, audit, support, and operational records may be retained after deactivation where needed for their purpose; and
• Recovery copies may remain in backups until they are deleted or overwritten through the backup lifecycle.

We do not currently promise that every category will be deleted on one fixed schedule.

Deactivating your account through the dashboard immediately marks the account as deactivated, blocks new sign-ins and session refreshes, and begins the subscription-cancellation and secure-sign-out process. An access token issued before deactivation may remain usable until it expires, for up to 15 minutes. Deactivation does not mean that every stored record is erased immediately.

To request deletion of personal information associated with your account, email support@everwovenstudios.com from your account email address. We may ask for additional information to verify that the request concerns your account. We will evaluate and fulfill verified requests as required by applicable law, subject to information we may retain for billing, security, fraud prevention, legal compliance, dispute resolution, backups, or other legitimate recordkeeping.

We do not currently promise completion on an exact number of days. If we establish a fixed deletion schedule or self-service deletion workflow, we will update this policy and the affected product surfaces to match it.

We use administrative, technical, and organizational safeguards designed to protect information. These include transport encryption, per-user encryption for stored message content in the reminders service, encryption for stored connected-account tokens, password hashing, short-lived access tokens, access controls, rate limiting, account lockout controls, and logging designed to redact sensitive fields.

No system is completely secure. Protect your credentials and contact us if you believe your account or information may have been compromised.

Depending on where you live and the law that applies, you may have rights to request access to, correction of, or deletion of personal information, or information about how it is used and disclosed. You may also have the right to appeal or complain to a regulator.

You can manage some profile settings in the dashboard, control app permissions through your device, disconnect Google from account settings, and deactivate your Forgetly account in the dashboard. For other verified privacy requests, email support@everwovenstudios.com. We may verify your identity before acting so we do not disclose, change, or delete the wrong person's information.

Forgetly is operated from the United States. We and our providers may process information in the United States and other countries where they operate. Those countries may have privacy laws different from the laws where you live. Where applicable law requires a transfer safeguard, we will use an appropriate mechanism.

Forgetly is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If we learn that we have done so, we will take appropriate steps to delete it.

We may update this policy as Forgetly, our providers, or legal requirements change. We will update the date at the top and provide additional notice when appropriate.

For privacy questions or verified privacy requests, contact:

Everwoven LLC support@everwovenstudios.com