Privacy Policy

Last updated: August 22, 2026

ForzaCloudTech LLC ("we", "us", "our") operates the Forza Assistant mobile application. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Information you provide

• Name and email address (for account setup and PIN reset)
• Meeting recordings and transcripts
• Health and medication information (Medical Assistant feature)
• Financial watchlist and portfolio data (News + Finance feature)
• Voice diary entries

Automatically collected

• Device timezone and locale
• App usage and session data (for billing and tier enforcement)
• Crash reports (anonymized)

2. How We Use Your Information

• To provide and improve the App
• To send PIN reset emails when requested
• To enforce subscription tiers and usage limits
• To process payments via third-party processors
• To send service notifications

3. Data Storage and Security

Most user data is stored locally on your device and encrypted using AES-256-GCM. Data transmitted to our servers is encrypted in transit using TLS. We use AWS infrastructure in the United States.

4. Medical Assistant — Health Data

Health information including patient names, medication details, and medical conditions is stored exclusively on your device and encrypted with AES-256-GCM. It is never transmitted to our servers. When generating AI content, patient identifying information is removed before transmission. Only clinical context is sent to our AI provider under zero data retention terms.

Forza Assistant is not a HIPAA-covered entity and does not act as a business associate. Because health data never leaves your device, we do not create, receive, maintain, or transmit protected health information (PHI) as defined under 45 CFR Parts 160 and 164.

Under GDPR Article 9 and corresponding provisions in other jurisdictions, health data is classified as special-category personal data. We process this data on the basis of your explicit consent under Article 9(2)(a).

5. Third-Party Services

We use the following third-party services:

• Anthropic — AI processing (zero data retention)
• Deepgram — Speech-to-text transcription
• AssemblyAI — Enhanced audio transcription
• Amazon Web Services — Cloud infrastructure and email
• WeatherAPI — Weather data
• NewsAPI — News content
• Alpha Vantage — Financial market data (15-min delayed)
• TMDB — Movie and TV data
• TheSportsDB — sports scores, teams, and league data
• Foursquare — restaurant and place discovery data

6. Data Sharing

We do not sell your personal data. We do not share your data with third parties except as required to provide the service (listed above) or as required by law.

7. Analytics and Crash Reporting

Health data and any identifiers derived from it are excluded from all analytics, crash reporting, and diagnostic systems. No health-related information appears in application logs, error reports, or usage metrics.

8. Your Rights

Depending on your location, you may have the following rights:

• Access — Request a copy of your data
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your data
• Portability — Request export of your data
• Withdraw consent — Withdraw consent at any time through Settings → Delete All Data

To exercise these rights, contact us at privacy@forzacloudtech.com

9. GDPR (European Users)

For users in the European Economic Area, our legal basis for processing personal data is:

• Contract performance (account and subscription management)
• Explicit consent (health data under Article 9(2)(a))
• Legitimate interests (security, fraud prevention)

EU users may lodge complaints with their local data protection authority.

10. Children's Privacy

Forza Assistant is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately.

11. Data Retention

Account data is retained until you delete your account. Local device data is retained until you delete the App or use Settings → Delete All Data. Email and server logs are retained for up to 90 days.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through the App. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy questions or to exercise your rights:
privacy@forzacloudtech.com
ForzaCloudTech LLC
Washington, DC, United States