Forty legal

Privacy Policy

Effective August 26, 2026

How Forty keeps sensitive program information on your iPhone and limits the technical data used to operate and improve the app.

Scope and effective date

This Privacy Policy explains how Forty handles information when you use the Forty iOS app or this website. It applies from August 26, 2026. Forty is offered to adults in the United States.

This policy describes the product available today. Forty does not operate a web account system, community, cloud backup, or browser-based recovery tool.

Who operates Forty

Forty is operated by Marcus CADASSE, Entrepreneur individuel established in France. Questions and privacy requests may be sent to marcuscadasse@gmail.com.

Information stored on your device

Forty stores sensitive program information locally on your iPhone using Apple's SwiftData technology. This can include onboarding answers, check-ins and urge levels, setback details and optional notes, emergency-session details, program progress, history, reflections, reminder preferences, and local workflow state.

These records are not intentionally sent as analytics. There is no Forty account, no public profile, no community feed, no cloud sync, and no server backup or cross-device progress sync operated by Forty.

Information processed by service providers

Apple App Store and StoreKit

Apple processes payments, subscriptions, trial eligibility, receipts, refunds, transaction history, and storefront operations under Apple's policies.

RevenueCat

RevenueCat processes an anonymous purchase identifier, entitlement and transaction status, and limited device and operating-system information to provide purchases, restoration, and purchase support. Forty also passes RevenueCat the PostHog installation identifier and, when available, the Meta anonymous attribution identifier. RevenueCat uses these identifiers to connect purchase outcomes with the same anonymous attribution and product-measurement journey without receiving your sensitive answers or notes. Read the RevenueCat Privacy Policy and RevenueCat Data Processing Addendum.

PostHog

PostHog receives a random installation identifier and a closed list of non-textual product events used to understand onboarding, paywall, and feature use. Autocapture, session replay, and person profiles are disabled. Sensitive answers, free-text notes, faith content, and recovery details are not intentionally included. Read the PostHog Privacy Policy.

Meta

When you tap the purchase button, Forty may ask for Apple's App Tracking Transparency permission before showing checkout. If you allow tracking, Meta may receive device and advertising identifiers used to attribute installs and purchases, and RevenueCat may receive Meta's anonymous attribution identifier. If you decline, checkout still works and Forty does not enable consent-dependent identifier collection. Automatic client-side purchase logging is disabled. Forty does not send onboarding answers, notes, religious content, or recovery content to Meta. Read the Meta Privacy Policy.

Apple MetricKit

Apple may provide Forty with aggregate performance and diagnostic information through MetricKit and other platform mechanisms so technical problems can be understood.

This website

Forty adds no website analytics, advertising SDK, contact form, or cookies intentionally set by Forty. The hosting provider may process basic request logs needed for security, abuse prevention, and delivery of the pages.

Why we process information

Limited technical information is processed to:

  • deliver, restore, and support Apple purchases;
  • measure whether onboarding and key product features work as intended;
  • attribute paid acquisition without intentionally sending sensitive program content;
  • diagnose crashes, performance problems, fraud, or abuse; and
  • meet legal, accounting, tax, and consumer-protection obligations.

Depending on the context, processing is based on providing the requested service, legitimate interests in operating and improving Forty, consent or user choice where required, and compliance with legal obligations.

Sharing and no sale

Forty shares limited information only with the processors described above, when needed to operate the app, comply with law, protect rights and safety, or complete a business reorganization subject to appropriate safeguards. We do not sell your personal information. Forty does not use sensitive recovery content for advertising.

Retention and deletion

Local program records remain on your iPhone until you delete them in Forty Settings or delete the app and its data. Apple's offloading feature may preserve app data, so offloading may preserve data that deletion would remove. Deleting local data removes Forty's local program records but does not cancel an Apple subscription.

Apple purchase history and RevenueCat purchase records may remain for transactions, fraud prevention, tax, legal compliance, restoration, and support according to their policies and applicable law. Previously processed aggregate analytics are not rewritten when you later opt out.

For data controlled by Forty, the retention period depends on the purpose for which the information was processed, whether it remains necessary for operation or support, and applicable legal, accounting, security, and dispute-resolution obligations. PostHog events, Meta attribution information, MetricKit diagnostics, and hosting logs are retained under the applicable provider's settings, policies, and legal requirements. Forty reviews these relationships and does not intentionally retain a separate copy of those provider logs.

Analytics choice

You can opt out of future optional PostHog product analytics in Forty Settings. This stops future optional product events from that installation. It does not affect purchase records, essential entitlement checks, Apple platform diagnostics, or data already processed in aggregate form. Deleting local data resets your analytics choice to enabled by default as part of the new local journey; you can opt out again in Settings before continuing to use optional features.

International processing

Forty is operated from France and offered in the United States. Apple, RevenueCat, PostHog, Meta, and hosting providers may process technical information in the United States or other countries. Their privacy terms, contractual safeguards, and applicable data-transfer laws govern that processing.

Security

Forty uses platform protections and limits the information sent to service providers, but no device, transmission, or storage method is completely secure. Protect your iPhone and Apple account with a passcode, current software, and appropriate account security.

Age restriction

Forty is intended only for people 18 or older in the United States. It is not directed to children, and we do not knowingly design the service to collect information from children.

Your privacy rights and contact

Depending on applicable law, you may request access, correction, deletion, restriction, data portability, or information about data controlled by Marcus CADASSE. You may also have the right to object to processing, withdraw consent where processing relies on consent, and make a complaint with the CNIL, the French data protection authority. See the French data protection authority, the CNIL. Email marcuscadasse@gmail.com with a concise request.

Because Forty has no account, a request about anonymous purchase information may require the RevenueCat support identifier displayed in Forty Settings. Never send recovery notes, onboarding answers, sexual content, passwords, payment-card information, or Apple account credentials by email.

Changes to this policy

This policy may change when Forty's features, vendors, or legal obligations change. The updated page will show a new effective date. Material changes will be communicated through an appropriate in-app or public notice when required.

Forty prepared this policy with reference to Apple App Review Guidelines 5.1.1.