Privacy policy

Last updated: 2026-08-10.

Summary

ForgeGo is a client for Forgejo, a Git forge that you or someone else hosts. It has no account system and no server of its own. It talks only to the Forgejo servers that you add, and everything it stores stays on your device.

Who is responsible

devXY, contactable at support@devxy.io, publishes ForgeGo.

What ForgeGo stores on your device

• The address of every Forgejo server you add, together with the personal access token for it, whether signing in created that token on the server or you pasted one yourself. Tokens are stored in the iOS keychain or the Android keystore, not in ordinary app storage.
• A local cache of the data fetched from those servers, such as repositories, issues, pull requests, notifications, and user profiles.
• Your app preferences, such as theme, accent colour, syntax highlighting theme, favourites, recent searches, and notification settings.

You can delete all of this at any time. Removing a server in the app deletes its token, its cached data, and its favourites from the device. Uninstalling the app removes everything.

Signing in

Signing in opens the server’s own login page in a browser view embedded in the app, so the methods that server supports, including an external identity provider, work as they do in a browser. While that view is open it holds the cookies and local storage those pages set, exactly as a browser would. ForgeGo clears both when the view opens and again when it closes, and reads nothing out of the page except the access token the server displays, or the error message the server shows in its place. Your password, and anything else you type on those pages, goes to the server or the identity provider that asked for it; ForgeGo does not read it and does not store it.

What ForgeGo sends where

• Requests to the Forgejo servers you added, authenticated with the token you provided for that server. What those servers log is governed by their own operators and their own privacy policies.
• Purchase and subscription requests, handled by the App Store or the Play Store and by RevenueCat, our subscription infrastructure provider.

ForgeGo does not send your repository content, your issues, your tokens, or your server addresses to devXY or to any third party.

Analytics and tracking

ForgeGo contains no analytics SDK, no advertising SDK, and no cross-app or cross-site tracking. It does not use the Advertising Identifier and does not ask for App Tracking Transparency permission. Nothing you do in the app is reported anywhere, with the single exception described under Subscriptions: which screen sent you to the subscription screen.

Notifications

Notifications are produced on your device. When you enable them, the app periodically asks your Forgejo servers for new notifications in the background and raises a local notification if there are any. No push service and no third-party notification server is involved, so notification content never leaves your device. Because the app has to poll rather than receive a push, your device decides when those checks run in the background, and notifications can be delayed or skipped.

Subscriptions

ForgeGo Pro is an auto-renewing subscription sold through the App Store and the Play Store. Payment is processed by Apple or Google, who do not share your payment details with us. RevenueCat processes the purchase receipt and an anonymous subscriber identifier on our behalf so the app can tell whether your subscription is active. No name, email address, or Forgejo identity is attached to that identifier.

Opening the subscription screen also records which screen you opened it from, such as the unified mode toggle or the favourites limit, against that same anonymous identifier. That tells us which features people actually subscribe for. It is the name of a place in the app and nothing else: no Forgejo server, repository, or account of yours is part of it, and it is recorded only when you open the subscription screen yourself.

See the RevenueCat privacy policy at https://www.revenuecat.com/privacy for their handling of this data.

Children

ForgeGo is a developer tool and is not directed at children.

Your rights

Because devXY holds no personal data about you, there is nothing for us to export or erase on request. The data ForgeGo holds is on your device and under your control, and the data on a Forgejo server is under the control of that server’s operator. For questions about this policy, write to support@devxy.io.

Changes

Material changes to this policy will be published on this page with an updated date and, where they affect what ForgeGo stores or sends, noted in the release notes.