ForwardWins

Privacy Policy

Last updated: July 16, 2026 · Effective July 16, 2026

The short version: ForwardWins collects only what it needs to run your account, process your subscription, and improve the app. We keep your information private and secure. We do not sell your personal information, and we do not use it for cross-context behavioral advertising. You can access, export, correct, or delete your data at any time.

1. Who we are and what this policy covers

ForwardWins (the "Service") is a goal and habit app operated by Onramp Consulting LLC, a limited liability company organized in Colorado, United States ("ForwardWins," "we," "our," or "us"). You can reach us at info@forwardwins.com. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit forwardwins.com (our marketing site), use forwardwins.app (the app), create an account, subscribe to a paid plan, or contact us. It applies to people anywhere in the world who use the Service. Your use of the Service is also governed by our Terms of Service and our Cancellation Policy.

2. Information we collect

Information you give us directly.

  • Account details. When you sign up we ask for your first name and email address. On the paid plan you enter your email a second time so a typo cannot lock you out.
  • Sign-in credentials. ForwardWins is passwordless. We generate single-use sign-in links and 6-digit codes tied to your email so we can verify it is you. We do not store a password because there is none.
  • The content you create. The goals, mountains, boulders, rocks, and pebbles, habits, sidequests, notes, check-ins, streaks, and Summit Passport keepsakes you add to the app. This is your content and it belongs to you.
  • Payment information. If you subscribe to Full Access, our payment processor (Stripe) collects your card number and billing details through its own secure fields. We do not see or store your full card number. We receive limited billing data such as your name, the last four digits of your card, card brand, expiration date, billing country and postal code, and the status of your payments.
  • Communications. When you email us, request support, answer a survey, or leave feedback, we keep those messages and your contact details.

Information we collect automatically. Usage data (features used, pages viewed, actions taken, session times), device and technical data (IP address, browser type, device type, operating system, language, referring pages, and similar log data, used for security, fraud prevention, and to keep the app working across devices), and cookies and similar technologies (see Section 6).

We do not ask for and do not want special categories of sensitive data beyond what is described above. Please do not enter that kind of information into your goal content. ForwardWins is a productivity and habit tool, not a medical, therapeutic, or health-records service.

3. How we use your information

We use your information to: create your account, sign you in with a magic link or code, and keep you signed in across devices; store, sync, and display your content back to you; process your subscription, take payment through Stripe, apply the $1 first month and $12 per month renewal, and send receipts; send you service messages you need, such as sign-in links, receipts, renewal reminders, and important changes; send optional in-app reminders and, if you opt in, occasional product emails (you can unsubscribe at any time); power optional AI helper features (when you ask us to break a goal into steps, shrink a step, or name a sidequest, the text you submit is sent to our AI provider, Anthropic, through the Netlify AI Gateway, to generate that response; under Anthropic's commercial terms this content is not used to train its models, and Netlify states its AI Gateway does not store prompts or outputs; ForwardWins keeps a short-lived cache of AI results on our own systems to speed up repeat requests); provide customer support; keep the Service secure, prevent fraud and abuse, and debug problems; understand and improve how the app works through privacy-respecting analytics; and comply with law and enforce our Terms. Where the law requires a legal basis (EU, EEA, UK), we rely on performance of our contract with you, your consent (for optional marketing and non-essential cookies), our legitimate interests (to secure, maintain, and improve the Service), and compliance with legal obligations.

4. Optional research participation

ForwardWins is a tool for people who get overwhelmed by big goals. To learn what reduces that overwhelm, so we can build the right things, we study how the app is used. Taking part is optional, it is turned off unless you choose to turn it on in App Settings, and you can turn it off again at any time. It is separate from marketing emails and from the analytics described in Section 6.

What research does include. Only your activity patterns, tied to a random research code and never to your name or email:

  • Counts and timings of actions, such as pebbles completed, check-ins logged, habits tended, and boulders or mountains summited.
  • Your streak length and your plan tier (free or Full Access) at the time of each action.
  • The category of an action, never the words you typed for it.

What research never includes.

  • Your name, email address, or account id.
  • Anything you wrote, including goal, mountain, boulder, rock, pebble, habit, and sidequest names, notes, reflections, and mood entries. Free text you enter is never placed into research data.

Research data is de-identified: it is separated from the information that could identify you and keyed to a random code, so a researcher working with it cannot tell it is you. If you turn research off, you are removed from all future research exports right away. We never sell your data, research or otherwise.

5. We do not sell your personal information

We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising or targeted advertising, as those terms are defined under California and other US state privacy laws. We have not done so in the past 12 months. If this ever changes, we will update this policy and give you the opt-out choices the law requires before doing so.

6. Cookies and analytics

We use a small number of cookies and similar technologies. Strictly necessary cookies keep you signed in and keep the app secure. We also use Google Analytics (GA4) to understand aggregate usage and improve the Service. Where required by law, we ask for your consent before setting non-essential cookies, and we honor recognized universal opt-out signals such as Global Privacy Control (GPC) where required. Because Google Analytics sets non-essential cookies and sends data to Google, we load it only after consent where the law requires it, and you can control cookies through your browser settings.

7. Who we share your information with

We share personal information only with the service providers that help us run ForwardWins, under contracts that require them to protect your data and use it only to provide their service to us:

ProviderWhat they doData they handle
StripePayment processing and subscription billingCard and billing details, payment status
ResendSends sign-in links, codes, receipts, remindersEmail address, message content
NetlifyHosts the app and stores your dataAccount and content data
Anthropic (via Netlify AI Gateway)Powers the AI helper: turning goals in plain words into steps, shrinking a step, naming sidequestsThe goal or task text you submit to those features
Google Analytics (GA4)Usage analyticsUsage and device data

We also disclose information for legal and safety reasons when we believe in good faith it is needed, as part of a business transfer (merger, acquisition, financing, or sale of assets, with notice to you), and with your direction or consent. We do not sell your personal data.

8. How long we keep your information

We keep your personal information for as long as your account is active and for as long as we need it for the purposes in this policy. When you delete your account, we delete or de-identify your personal content within 30 days, except where we must keep certain records longer, for example billing and tax records (kept as long as the law requires, generally up to 7 years) and records we need to resolve disputes, prevent fraud, or comply with legal obligations. Backups are purged on a rolling schedule.

9. How we protect your information

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and the passwordless sign-in model that removes stored passwords as a target. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we work hard to protect your data and to respond promptly if something goes wrong.

10. International data transfers

We are based in the United States and our providers may process data in the United States and other countries. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States and other locations that may have different data protection laws than your own. Where required, we use appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and the UK equivalent.

11. Your privacy rights

Depending on where you live, you may have rights to know or access what we hold about you, to correct inaccurate information, to delete your information, to obtain a copy in a portable format, to opt out of any sale or sharing for targeted advertising (we do none of these), to withdraw consent, and to be free from discrimination for exercising your rights. Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws now in effect have these rights under state law. People in the EU, EEA, and UK have these rights under the GDPR and UK GDPR, plus the right to lodge a complaint with a supervisory authority. To exercise your rights, email info@forwardwins.com or use the tools in App Settings. We verify requests by confirming control of your account email and respond within the time the law allows.

12. Children and teens

ForwardWins is intended for people 13 years of age and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without the verifiable parental consent COPPA requires, we will delete it promptly. If you are between 13 and 18 (or the age of majority where you live), you may use ForwardWins only with the involvement and consent of a parent or guardian, and only they may agree to a paid subscription and enter payment information. In the EU, EEA, and UK the age of digital consent varies by country, from 13 to 16; below that age, a parent or guardian must consent on your behalf.

13. Third-party links and services

The Service may link to third-party sites and services, such as Stripe's checkout, our scheduling link at kabrinaashley.com, or content we reference. Their privacy practices are their own, and we are not responsible for them. Please read their policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when we post the updated policy and change the "Last updated" date above. For material changes we will make reasonable efforts to let you know, such as an in-app message or email, but your continued use of the Service after an update means you accept the updated policy.

15. How to contact us

Onramp Consulting LLC. Email: info@forwardwins.com.

We use privacy-friendly analytics to see what helps and improve ForwardWins. May we? You can change this anytime.