Security

Last updated September 26, 2026

Your trust matters. Here's how we protect your account and your information, and how the text messages work. For the full details of what we collect and why, see our Privacy Policy.

Protecting your data

  • Your data is stored with Supabase and served through Vercel, both of which run SOC 2 Type 2 audited infrastructure.
  • Data is encrypted in transit (HTTPS) and at rest.
  • Passwords are stored hashed, never in plain text.
  • Access tokens for connected services such as Google Calendar stay on our servers and never reach your browser.
  • Sign-up requires a code texted to your phone, and repeated attempts are rate-limited.

Texting opt-in

When you sign up, you choose to receive texts from Forgetless:

  • You enter your phone number and we text a code to confirm it's yours.
  • We send a welcome text once your account is created.
  • After that, you only get the texts you set up: reminders, birthday and anniversary alerts, and optional summaries, plus replies when you text us.

Opting out

  • Reply STOP to any Forgetless text to stop all messages. Reply START to resume.
  • Turn summary texts off from your dashboard, and delete any reminder or birthday you no longer want.
  • To delete your account and everything in it, email willjoneswjj@gmail.com.

Reporting a problem

If you think you've found a security issue, please email willjoneswjj@gmail.com and we'll look into it right away.