Privacy policy
Your journey belongs to you.
Effective July 16, 2026
This Privacy Policy explains how Forty Together collects, uses, shares, and protects information when you use our website and mobile application. It also explains the choices you have about your information.
Information we collect
Account information. We collect your name, email address, optional profile photo, timezone, password credentials in protected form, age confirmation, coaching preferences, and account settings. If you sign in with Google or Apple, we also store the provider’s account identifier needed to recognize your account. Apple may provide a private relay email address when you choose to hide your email.
Challenge and community content. We store the challenges, plans, check-ins, rich-text reflections, photos, comments, reactions, reports, blocks, and accountability-circle choices you create or submit.
Device and service information. We may process push-notification tokens, notification preferences, IP addresses, browser or device details, timestamps, and diagnostic logs needed to secure, operate, and troubleshoot the service.
How we use information
- Provide accounts, challenges, check-ins, reminders, community features, exports, and customer support.
- Deliver content only to the audience you choose and enforce challenge permissions.
- Detect abuse, review reports, prevent fraud, protect accounts, and enforce our Terms.
- Generate optional challenge plans, coaching, and Scripture reflections when those features are enabled.
- Maintain, diagnose, and improve the reliability and accessibility of Forty Together.
AI features
Optional AI features send only the content needed for the requested feature to our AI service provider, OpenAI. Public posts and photos may also be checked for safety. We exclude passwords, access tokens, and unrelated account content from these requests, use a pseudonymous safety identifier, and request that model responses not be stored by the provider when supported. You can turn off optional coaching and Scripture features in your settings.
When information is shared
With people you choose. Challenge members can see content shared with the circle. Public content is visible only when you explicitly select a public audience and the challenge permits it.
With service providers. We use vendors that help provide hosting, private file storage, email, push notifications, security, and optional AI features. They may process information only to provide those services to us.
For safety or legal reasons. We may preserve or disclose information when reasonably necessary to comply with law, protect a person from harm, investigate abuse, or defend the rights and security of Forty Together and its users.
We do not sell your personal information or use your private challenge content for third-party advertising.
Photos and formatted content
Uploaded photos are kept in private storage and delivered through authorized requests. We strip image metadata before community processing or display. Rich text is sanitized on the server before it is shown to other people.
Retention and deletion
We keep information while your account is active and as needed to provide and secure the service. You can download a portable copy of your account data or permanently delete your account from Account & Privacy in the mobile or web app.
Deletion immediately revokes account access, removes identifying account information, hides personal activity, and schedules uploaded photos for deletion. Limited records may remain temporarily in encrypted backups, security logs, or where retention is required by law. They are not restored to the active service after deletion.
Your choices
- Choose whether a post is private, shared with challenge members, or public when public sharing is available.
- Change notification, coaching, and faith-feature preferences.
- Report content and block another member.
- Export your information or permanently delete your account from Account & Privacy.
Security
We use technical and organizational safeguards designed to protect information, including encrypted transport, protected credentials and tokens, authorization checks, private media storage, and access controls. No service can guarantee absolute security.
Adults only
Forty Together is for people age 18 and older. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy as the service changes. We will post the revised policy here, update its effective date, and provide additional notice when a change materially affects your rights or how we use information.
Contact us
Questions, privacy requests, and safety concerns can be sent to hello@fortytogether.com.