Last updated: September 1, 2026
Effective date: August 31, 2026
The short version
ForwardWins™ collects only what it needs to run your account, process your subscription, and improve the app. We keep your information private and secure. We do not sell your personal information, and we do not use it for cross-context behavioral advertising. You can access, export, correct, or delete your data at any time. The full details are below.
1. Who we are and what this policy covers
ForwardWins™ (the “Service”) is a goal and habit app operated by Onramp Consulting LLC, a limited liability company organized in Colorado, United States (“ForwardWins™,” “we,” “our,” or “us”). You can reach us at info@forwardwins.com.
This Privacy Policy explains how we collect, use, share, and protect personal information when you visit forwardwins.com (our marketing site), use forwardwins.app (the app), create an account, subscribe to a paid plan, or contact us. It applies to people anywhere in the world who use the Service. Your use of the Service is also governed by our Terms of Service and our Cancellation Policy.
2. Information we collect
We collect the following categories of information.
Information you give us directly.
- Account details. When you sign up we ask for your first name and email address. On the paid plan you enter your email a second time so a typo cannot lock you out.
- Sign-in credentials. ForwardWins™ is passwordless. We generate single-use sign-in links and 6-digit codes tied to your email so we can verify it is you. We do not store a password because there is none.
- The content you create. The goals, “mountains,” “boulders,” “rocks,” and “pebbles,” habits, sidequests, notes, check-ins, streaks, and Summit Passport keepsakes you add to the app. This is your content and it belongs to you.
- Payment information. If you subscribe to Full Access, our payment processor (Stripe) collects your card number and billing details through its own secure fields. We do not see or store your full card number. We receive limited billing data such as your name, the last four digits of your card, card brand, expiration date, billing country and postal code, and the status of your payments.
- Communications. When you email us, request support, answer a survey, or leave feedback, we keep those messages and your contact details.
Information we collect automatically.
- Usage data. How you interact with the app, such as features used, pages viewed, actions taken, and session times, so we can understand what helps people and fix what does not.
- Device and technical data. IP address, browser type, device type, operating system, language, referring pages, and similar log data. We use some of this for security, fraud prevention, and to keep the app working across devices.
- Cookies and similar technologies. See Section 5.
We do not ask for and do not want special categories of sensitive data (for example government identifiers, health diagnoses, or financial account numbers) beyond what is described above. Please do not enter that kind of information into your goal content. ForwardWins™ is a productivity and habit tool, not a medical, therapeutic, or health-records service.
3. How we use your information
We use your information to:
- create your account, sign you in with a magic link or code, and keep you signed in across devices;
- store, sync, and display your content back to you;
- process your subscription, take payment through Stripe, apply the $1 first month and $12 per month renewal, and send receipts;
- send you service messages you need, such as sign-in links, receipts, renewal reminders, and important changes to the Service or these policies;
- send optional in-app reminders and, if you opt in, occasional product or marketing emails (you can unsubscribe at any time);
- provide customer support and respond to your requests;
- keep the Service secure, prevent fraud and abuse, and debug problems;
- understand and improve how the app works through privacy-respecting analytics; and
- comply with law and enforce our Terms of Service.
Which emails you can unsubscribe from. Marketing and update emails, including any broadcast we send and the occasional win-back note if your account goes quiet, carry a one-click unsubscribe link that we honor right away. Account and service messages do not carry one, because they are about your own account and we need to be able to reach you: your sign-in codes, payment receipts, renewal reminders, cancellation and Basecamp Rate confirmations, the onboarding help email, and the inactivity warnings described in Section 7.
Legal bases (for people in the EU, EEA, UK, and similar regimes). Where the law requires a legal basis, we rely on: performance of our contract with you (to run your account and subscription); your consent (for optional marketing and any non-essential cookies, which you can withdraw at any time); our legitimate interests (to secure, maintain, and improve the Service, in a way that does not override your rights); and compliance with legal obligations (such as tax and record-keeping).
4. We do not sell your personal information
We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising or targeted advertising, as those terms are defined under California and other US state privacy laws. We have not done so in the past 12 months. If this ever changes, we will update this policy and give you the opt-out choices the law requires before doing so.
5. Cookies and analytics
We use a small number of cookies and similar technologies. Strictly necessary cookies keep you signed in and keep the app secure. We also use Google Analytics (GA4) to understand aggregate usage and improve the Service.
Where required by law, we ask for your consent before setting non-essential cookies, and we honor recognized universal opt-out signals such as Global Privacy Control (GPC) for users in states that require it. Because Google Analytics sets non-essential cookies and sends data to Google, we load it only after consent where the law requires it, and you can control cookies through your browser settings.
6. Who we share your information with
We share personal information only in these situations.
- Service providers (subprocessors). Companies that help us run ForwardWins™, under contracts that require them to protect your data and use it only to provide their service to us. Our main providers are:
| Provider | What they do | Data they handle |
|---|---|---|
| Stripe | Payment processing and subscription billing | Card and billing details, payment status |
| Resend (resend.com) | Sends sign-in links, codes, receipts, reminders | Email address, message content |
| Netlify (netlify.com) | Hosts the app and stores your data | Account and content data |
| Google Analytics (GA4) | Usage analytics | Usage and device data |
- Legal and safety. When we believe in good faith that disclosure is needed to comply with a law, regulation, legal process, or enforceable government request, to enforce our Terms, or to protect the rights, safety, or property of ForwardWins™, our users, or the public.
- Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that deal. We will notify you and honor this policy, or give you notice of any material change.
- With your direction or consent. Any other sharing you ask us to do or agree to.
7. How long we keep your information
We keep your personal information for as long as your account is active and for as long as we need it for the purposes in this policy. When you delete your account, we delete or de-identify your personal content within 30 days, except where we must keep certain records longer, for example billing and tax records (kept as long as the law requires, generally up to 7 years) and records we need to resolve disputes, prevent fraud, or comply with legal obligations. Backups are purged on a rolling schedule.
Inactive accounts. We also do not keep personal data from accounts that have gone quiet forever. If an account has no sign-in and no logged activity for 12 months, it is scheduled for de-identification: we remove the personal information and content (your goals, check-ins, yeti, passport, name, and email) and keep only anonymized records, along with the billing and tax records described above. Before that ever happens, we email you four times, at 60, 30, 14, and 7 days ahead, each with a one-tap way to sign back in and keep everything exactly as you left it. Signing in at any point resets the clock, and we will not mention it again. Cancelling a subscription by itself never deletes anything. An account with an active paid or complimentary subscription is never treated as inactive, no matter how long it has been since the last sign-in.
If you unsubscribe from our emails, or if your address bounces or is reported as spam, we keep a minimal record of that (your email address, the reason, and the date) so we do not email you again by mistake. We keep this record even if you delete your account, because it is the only way we can be sure not to start emailing you again.
8. How we protect your information
We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and the passwordless sign-in model that removes stored passwords as a target. Celebration photos you add are kept in private storage. They are shown only to you, through short-lived links created for your signed-in session, so a link cannot be reused later to reach your photo. The installed app keeps a copy of your recent pages so it works offline, and when you sign out that copy is cleared, so on a shared or borrowed device the next person cannot open your day. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we work hard to protect your data and to respond promptly if something goes wrong.
9. International data transfers
We are based in the United States and our providers may process data in the United States and other countries. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States and other locations that may have different data protection laws than your own. Where required, we use appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses and the UK equivalent.
10. Your privacy rights
Depending on where you live, you may have some or all of the following rights over your personal information:
- to know or access what we hold about you;
- to correct inaccurate information;
- to delete your information;
- to obtain a copy of your information in a portable format;
- to opt out of any sale, sharing for targeted advertising, or certain profiling (as noted, we do none of these);
- to withdraw consent you previously gave; and
- to be free from discrimination for exercising your rights.
US state privacy rights. If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws now in effect, you have the rights above under your state law. California residents also have the right to know the categories of personal information we collect, use, and disclose, and California, Colorado, Connecticut, and several other states honor universal opt-out signals such as Global Privacy Control.
EU, EEA, and UK rights. If you are in these regions, you have the rights above under the GDPR and UK GDPR, plus the right to lodge a complaint with your local supervisory authority.
How to exercise your rights. Email info@forwardwins.com or use the tools in App Settings. We will verify your request (usually by confirming control of your account email) and respond within the time the law allows, generally 45 days in the United States and one month in the EU and UK, with an extension where permitted. You may use an authorized agent where the law allows, and we will not charge you for a first request in most cases. If we deny a request, you may appeal by replying to our response, and we will tell you the outcome of your appeal.
11. Children and teens
ForwardWins™ is intended for people 13 years of age and older. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Service or send us any information. If we learn that we have collected personal information from a child under 13 without the verifiable parental consent that the Children’s Online Privacy Protection Act (COPPA) requires, we will delete it promptly. A parent or guardian who believes their child under 13 has given us information may contact us at info@forwardwins.com.
If you are between 13 and 18 (or the age of majority where you live), you may use ForwardWins™ only with the involvement and consent of a parent or guardian, and only they may agree to a paid subscription and enter payment information. We do not sell or share the personal information of users we know to be minors, and we do not use it for targeted advertising.
Users in the EU, EEA, and UK. The age of digital consent varies by country, from 13 to 16. If you are below the applicable age in your country, a parent or guardian must consent on your behalf.
12. Third-party links and services
The Service may link to third-party sites and services, such as Stripe’s checkout, our scheduling link at kabrinaashley.com, or content we reference. Their privacy practices are their own, and we are not responsible for them. Please read their policies.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date above and, for material changes, give you clearer notice such as an in-app message or email before the change takes effect. Your continued use of the Service after an update means you accept the revised policy, except where the law requires fresh consent.
14. How to contact us
Questions, requests, or complaints about privacy? Contact us at:
Onramp Consulting LLC
Email: info@forwardwins.com