Privacy Policy

This Privacy Policy explains how RLForge AI (“we”, “us”), operated by Mohammad Ehab Sh Qandil, collects, uses, and shares information when you use RLForge AI (the “Service”). We are not affiliated with Psyonix LLC or Epic Games, Inc.

1. Information we collect

• Account data: your email address, which you provide to sign in via a one-time “magic link.” Authentication is handled by Supabase.
• Subscription & billing data: when you subscribe to Pro, our payment processor Stripe collects and processes your payment details. We do not receive or store your full card number; we receive limited information such as your email, a Stripe customer ID, and your subscription status.
• Usage data: we store, per account, how many AI generations you have used in the current billing period and your plan tier, to enforce limits.
• Content you submit: the inputs you type — your rank, weaknesses, goals, and any match/replay descriptions or pasted stats — are sent to our AI provider (Anthropic) to generate your plan or analysis. Do not include sensitive personal information in these free-text fields.
• Data stored in your browser: we use your browser’s localStorage to save your preferences, saved plans, skill-tree progress, training streak, and any training-pack codes you customize. This stays on your device and is not sent to us except as part of a request you initiate.
• Technical data: our hosting/infrastructure provider (Cloudflare) may process standard request metadata (e.g., IP address) to deliver and secure the Service.

2. How we use information

To provide and operate the Service; generate your training plans and replay analyses; authenticate you; process subscriptions and enforce usage limits; provide support; prevent abuse and fraud; and comply with legal obligations.

3. How we share information (subprocessors)

We do not sell your personal information. We share it only with service providers that help us run the Service, under their own terms:

• Supabase — authentication and storage of your account/profile and usage data.
• Stripe — payment processing and subscription management.
• Anthropic — receives the prompts you submit (rank, weaknesses, goals, replay text) to generate AI responses.
• Cloudflare — hosting, the backend Worker, and security.

We may also disclose information if required by law or to protect our rights, users, or the Service.

4. AI processing

Your typed inputs are transmitted to Anthropic to produce results. We instruct our providers to process this data to deliver the Service. Review Anthropic’s policies for how they handle data submitted via their API.

5. Data retention

We keep your account and usage data while your account is active and as needed for legal, accounting, and fraud-prevention purposes. Billing records are retained by Stripe per their policies. You can clear locally stored data anytime by clearing your browser storage.

6. Your rights

Depending on where you live (e.g., EEA/UK under GDPR, California under CCPA/CPRA), you may have rights to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw consent. We do not sell or “share” personal information for cross-context behavioral advertising. To exercise any right, contact us.

7. Account deletion

To delete your account and associated personal data, email us and we will delete it within a reasonable time, except data we must retain for legal or accounting reasons (e.g., payment records held by Stripe). Cancelling your subscription does not by itself delete your account.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you are under 18, use the Service only with a parent or guardian’s permission. If you believe a child under 13 has provided us data, contact us and we will delete it.

9. International transfers

Our providers may process data in the United States and other countries. By using the Service, you understand your information may be transferred to and processed in countries with different data-protection laws than yours.

10. Security

We use reasonable technical and organizational measures (including a backend that keeps our AI key off your device, signed-in access, and HTTPS) to protect your data. No method of transmission or storage is 100% secure.

11. Changes

We may update this Policy; we will post the new “Last updated” date and, for material changes, provide additional notice where appropriate.

12. Contact

Questions or requests: mohammadqandil515@gmail.com.