Privacy Policy

Your code
stays on your device

PythonForge is a Python IDE that runs entirely on your device. We run no servers, ask for no account, and collect no personal information. This page explains when — and to whom — any data ever leaves your device.

Version 1.0 Effective October 15, 2026 Last updated October 15, 2026

Nothing collected

No accounts, no ads, no analytics or crash-reporting SDKs, and no advertising identifiers. We run no servers, so there is nowhere for data to be collected.

Stored on-device

Your scripts, installed packages, editor preferences, and AI settings live inside the app sandbox on your device. Nothing ever syncs to us.

Network on your terms

Only three actions make network requests: installing packages (PyPI), AI chat (your chosen provider), and Git push (your chosen remote). Each is triggered by you.

1. Information We Collect

We do not collect any information that identifies you. The only data that ever leaves your device falls into three cases, and every one of them is initiated by you:

  • Installing a package — the app requests package metadata and files from PyPI and its mirrors to complete the pip install you started.
  • Using AI chat — your prompt and any selected code are sent to the provider address you configured in settings (OpenAI, Anthropic, or any compatible endpoint).
  • Pushing with Git — your commits and access token are sent to the remote repository you configured.

In these cases the recipient acts as an independent data controller under its own privacy policy (see Third-Party Services). We cannot read, store, or resell any of it.

2. What We Do Not Collect

  • Name, email address, phone number, or contacts
  • Accounts and passwords (the app has no sign-in)
  • Precise or coarse location
  • Device identifiers, advertising identifiers (IDFA), or fingerprints
  • Crash logs, usage duration, page views, or any behavioral analytics
  • The content of your scripts, files, or run output

How is this possible? Everything — editing, running, debugging, package management, and the terminal — happens locally on your device. No server is involved, so there is nothing to collect.

3. Local Storage & Permissions

The app stores the following data locally to restore your working state. It never leaves your device:

DataPurposeStored in
Scripts & files Editing and running App sandbox or folders you grant
Installed Python packages Running scripts offline App sandbox
Editor & run preferences Remembering font size, settings, etc. App sandbox
AI endpoint, model name & API key Calling your chosen provider App sandbox
External folder bookmarks Revisiting folders you authorized App sandbox

About API keys: keys are stored on your device and are never accessible to us. If you enable iCloud or a full-device backup, they may be included in the encrypted backup under your own Apple account. Deleting the app or erasing its settings removes them.

System permissions are requested only for the purposes below, and you can revoke them at any time in Settings:

  • Files & folders — only when you pick files or folders to open, import, or save.
  • Clipboard — read only when you tap Paste or press ⌘V, to insert code.
  • Local network — only when a script you run listens on a port (for example, a local web server).

4. Third-Party Services

The app includes the network capabilities below. They are disabled by default and fire only when you perform the matching action; you can also choose never to use them.

ServiceWhen triggeredWhat is sentControlled by
PyPI & mirrors You install a package Package name, version, your network IP You (the mirror is configurable)
OpenAI / Anthropic / custom endpoints You send an AI message Your prompt, code snippets, API key You (address and key are yours)
Git remote repository You push commits Commit content, remote URL, access token You (remote and token are yours)
Apple (App Store, iCloud backup) Updates, device backup Handled under Apple's own policies You (via system settings)

Each of these services has its own privacy policy. Please review it before enabling them — we have no data-sharing relationship with any of them.

5. Storage & Retention

We hold no server-side data, so there is no server-side retention period. How long local data is kept is entirely up to you: deleting a script deletes its content, and uninstalling the app removes all local data. Content you send to third-party services is retained under their own policies.

6. Data Security

Because there is no server, your data is never exposed to server-side breaches or internal access by us. The app relies on the iOS sandbox to isolate data and follows these practices:

  • All network requests are made over HTTPS.
  • AI keys are stored locally and masked by default in the UI.
  • External folders are accessed through security-scoped bookmarks; the app does not retain access after it closes.

Please keep your API keys and repository tokens safe: once you enter them into the app, they are protected together with your device's security.

7. Children's Privacy

The app is aimed at users with programming experience and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information through this app, contact us at the email below and we will help you delete it.

8. Your Rights & Choices

  • View & delete — scripts and files can be viewed, renamed, and deleted directly in the app.
  • Revoke credentials — clearing the AI configuration or Git token in settings immediately stops the matching network requests; you can also revoke keys at the provider.
  • Fully offline — without package installs, AI chat, and Git push, the app works completely in Airplane Mode.
  • Erase everything — deleting the app removes all data in its sandbox.

9. Changes to This Policy

If this policy changes in a material way, we will update the "Last updated" date on this page and note the change in the app's release notes. Continued use means you have read the latest version; if you disagree with a change, please stop using the app and delete it.

10. Contact Us

If you have any questions about this policy or how data is handled, email us — we usually reply within 5 business days.