Privacy Policy

Last Updated: March 25, 2026

LabForge ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our iOS mobile application ("the App"), including how we use artificial intelligence to generate homelab configurations.

1. Information We Collect

Information You Provide

  • Account Information: Email address, username, and password when you create an account via email registration, or your name and email when you sign in with Apple (Apple may provide a private relay email address)
  • User Preferences: Preferred budget range, experience level, and interested use cases
  • Generation Inputs: Use cases, budget, experience level, platform selections, and custom parameters you enter when generating configurations (up to 100 characters)
  • Saved Content: Lab configurations you save to favorites and your generation history

Information Collected Automatically

  • Device Information: Device type, operating system version, and app version
  • Usage Analytics: Feature usage events (e.g., configurations generated, favorites saved, subscription views) collected via Firebase Analytics
  • Crash Data: Crash reports and error logs collected via Firebase Crashlytics, associated with a stable anonymous identifier
  • Subscription Status: Your current subscription tier and purchase history, managed through RevenueCat
  • Device Attestation: Apple DeviceCheck tokens used to verify requests come from genuine devices, via Firebase App Check

Information We Do Not Collect

  • We do not collect advertising identifiers (IDFA)
  • We do not use App Tracking Transparency or track you across other apps or websites
  • We do not collect location data
  • We do not collect contacts, photos, or other device content

2. How We Use Your Information

  • Provide and operate the App, including generating AI-powered homelab configurations
  • Process your configuration requests through our secure backend proxy
  • Sync your favorites, history, and preferences across sessions via Firebase
  • Manage your subscription and enforce generation limits (Free: 1/day, Pro: 10/day)
  • Diagnose and fix crashes and technical issues
  • Understand aggregate feature usage to improve the App
  • Communicate important service updates

3. AI-Powered Features

LabForge uses Claude, a large language model by Anthropic, to generate homelab configurations:

  • Data Sent to AI: Your selected use cases, budget range, experience level, platform, and custom parameters are included in the AI prompt. Your email, name, and other personal information are not sent to the AI.
  • Routing: All AI requests are routed through our secure backend proxy at api.labforge.ai. Your device never communicates directly with Anthropic.
  • Anthropic Data Retention: Anthropic may retain prompts for up to 30 days for safety and abuse monitoring, per their privacy policy.
  • No Model Training: Your data is not used to train AI models.

4. Data Storage and Security

  • Cloud Storage: Account data, favorites, and generation history are stored in Google Firebase Firestore, encrypted in transit and at rest
  • Authentication: Handled by Firebase Authentication (email/password or Apple Sign In)
  • Local Storage: Preferences and onboarding state stored in UserDefaults; credentials stored in iOS Keychain
  • API Security: All requests to our backend are authenticated with Firebase ID tokens and signed with HMAC-SHA256. Certificate pinning is enforced for the production backend.
  • Device Verification: Firebase App Check with Apple DeviceCheck verifies that requests originate from genuine instances of the App on real Apple devices

5. Third-Party Services

We share data with the following third-party services, each governed by their own privacy policies:

  • Firebase (Google): Authentication, cloud data storage (Firestore), crash reporting (Crashlytics), usage analytics (Analytics), remote configuration (Remote Config), and device verification (App Check)
  • RevenueCat: Subscription management and purchase validation. Receives your stable user identifier and subscription state.
  • Anthropic (Claude AI): Processes configuration generation requests. Receives your generation inputs (use cases, budget, platform, custom parameters) but not your personal information.
  • Apple: Processes all payments via the App Store. We never receive or store your payment card details.
  • Amazon Associates: Affiliate product links (see below)

6. Affiliate Links & Amazon Associates

LabForge participates in the Amazon Services LLC Associates Program:

  • When you tap a product link, your device opens Amazon.com with our affiliate tracking tag (labforge-20). We do not share your personal information with Amazon beyond this standard web interaction.
  • Product links are generated locally on your device. We do not track which products you click or purchase through Amazon.
  • Amazon may collect data and set cookies according to their own Privacy Policy when you visit through our links.
  • Our affiliate relationship does not influence the AI-generated recommendations.
  • You may choose not to use the affiliate links without affecting your use of the App.

7. Data Retention

  • Account Data: Retained until you delete your account
  • Generation History: The App stores up to 50 recent generations locally; cloud history is retained until account deletion
  • Crash Data: Retained by Firebase Crashlytics for approximately 90 days
  • Analytics Data: Retained by Firebase Analytics for up to 14 months
  • AI Prompts: May be retained by Anthropic for up to 30 days for safety monitoring
  • Daily Generation Counts: Reset daily by the server; not retained after reset

8. Data Sharing

We do not sell your personal information. We share data only:

  • With the third-party services listed above, solely to provide the App's functionality
  • To comply with legal obligations or valid legal process
  • To protect our rights, privacy, safety, or property
  • With your explicit consent

9. Your Rights and Choices

You have the right to:

  • Access Your Data: View your profile, favorites, and history within the App
  • Export Your Data: Use the data export feature in Settings to download your data as a JSON file
  • Delete Your Account: Delete your account from the Profile screen. This permanently removes your user profile, favorites, generation history, and configurations from our servers. Firebase Auth credentials are also deleted. Note: analytics and crash data retained by Google, and prompts retained by Anthropic, are subject to their respective retention policies.
  • Correct Your Data: Update your username and preferences within the App
  • Manage Subscriptions: Cancel or modify your subscription through your Apple ID account settings

To exercise any rights not available through the App, contact us at support@labforge.ai.

10. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the "Last Updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy:

Email: support@labforge.ai
Website: https://www.labforge.ai

By using LabForge, you acknowledge that you have read and understood this Privacy Policy.