Privacy Policy

Last updated: 22 June 2026

Forged Apps ("we", "us", "our") operates the Graft mobile application and the forgedapps.com.au website. This Privacy Policy explains how we collect, use and protect your information when you use our products.

1. Information We Collect

When you use Graft, we may collect the following:

• Account information — email address and password used to create your account
• Receipt and expense data — photos, amounts, vendors, dates and categories you enter
• Invoice data — invoice details, client information and payment records you create
• Vehicle trip data — kilometres and trip details you log
• Device information — device type, operating system and app version
• Usage data — how you interact with the app

2. How We Use Your Information

• To provide and maintain the Graft service
• To process receipts using AI (powered by Anthropic Claude)
• To generate BAS reports and expense summaries
• To manage your subscription via RevenueCat
• To send important account and service notifications
• To improve our products and fix bugs

3. Third-Party Services

We use the following third-party services to operate Graft:

• Supabase — database and authentication. Your data is stored securely on Supabase servers.
• Anthropic (Claude AI) — receipt image processing. Receipt images are sent to Anthropic's API to extract vendor, amount and GST information.
• RevenueCat — subscription and payment management. We do not store your payment details directly.
• Apple App Store / Google Play — app distribution and in-app purchases.

4. Data Storage and Security

Your data is stored securely using Supabase with row-level security. We use industry-standard encryption for data in transit and at rest. We do not sell your data to third parties.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data will be permanently removed from our systems within 30 days.

6. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data
• Opt out of non-essential communications

7. Children's Privacy

Graft is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of Graft after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@forgedapps.com.au.

Forged Apps · forgedapps.com.au · Australia