FORRESTPrivacy Policy
This Privacy Policy explains how Forrest Holdings LLC ("FORREST," "we," "us," or "our") collects, uses, shares, and protects personal information when you use the FORREST mobile app for iOS and Android, the FORREST web app, and the website at forrestthesocialapp.com (together, the "Service").
FORREST is a social app for adults 18 and older. It builds a "vibe" from a short set of inputs you give us, then helps you discover and connect with nearby people whose vibe fits yours. Because the Service uses your camera, microphone, and location, and because it helps strangers meet, we have written this policy to tell you plainly what we collect and why.
Summary
We collect what you give us (your phone number, profile, photos, vibe inputs, posts, and messages), what your device tells us (location while you use the app, device and app details), and what our partners tell us (identity verification results and store purchase records).
We use AI services to analyze your selfie and voice sample and produce your vibe. We ask for your explicit permission before any of your vibe inputs are sent to those services.
Other members see your profile, your published vibe post, your city and state, and an approximate distance. They never see your exact location.
We do not sell your personal information. We do not share it for targeted advertising. We do not run ads.
You can access, download, correct, and delete your information. You can delete your account inside the app or from our website.
1. Who is responsible for your information
Forrest Holdings LLC, an Arkansas limited liability company, is the business responsible for your personal information. Our address is 79 El Dorado Drive, Little Rock, AR 72212. You can reach our privacy team at privacy@forrestthesocialapp.com.
2. Information we collect
2.1 Information you give us
| Category | Examples | Required? |
|---|---|---|
| Account and contact details | Mobile phone number, a backup email address if you add one, account settings | Phone number is required |
| Profile information | First name, username, date of birth and age, gender, height, the genders and age range you want to meet, bio, profile attributes and interests, language, profile photos | Name, date of birth, gender, and height are required; the rest is optional |
| Optional sensitive profile details | Ethnicity, and any detail about your sexual orientation or relationship preferences that you choose to add | Optional. You decide whether to add them and whether to show them |
| Vibe inputs | A selfie, an activity photo, a "white space" entry (a short video, image, text, or doodle), and a 10 to 30 second voice sample | Required to create a vibe |
| Posts and social activity | Posts, photos, videos, comments, likes, shares, follows, vibe match requests, status posts | Optional |
| Messages | One-to-one messages, group chat messages, and paid Direct Vibe messages, including any photos, voice notes, or doodles you send | Optional |
| Safety and support | Reports you file, people you block or mute, appeals, and support requests | Optional |
| Identity verification | A photo of a government-issued ID and a live selfie, which you submit to our identity verification provider | Optional, but may be required before you can send messages |
| Consent records | The version of each consent you give or withdraw, with the date, time, and IP address | Created when you give or withdraw consent |
2.2 Information we collect automatically
Location. With your permission, we collect your device location while you are using the app. We use it to place you in nearby discovery and to calculate distance. We do not collect location in the background. See our Location Data Notice.
Device and app information. Device model, operating system and version, app version, a random device identifier created by the app, language, and time zone.
Login and security information. Sessions, sign-in times, devices signed in to your account, and IP addresses used to protect your account and prevent abuse.
Usage information. Features you use and actions you take in the app, such as screens viewed and buttons tapped. We strip names, phone numbers, email addresses, and message content from these events, and we shorten IP addresses before storing them.
Crash and performance information. Error reports and performance data. We configure our monitoring provider not to receive your name, phone number, email address, or the content of your requests.
Website storage. Our web app stores your sign-in token and a device identifier in your browser's local storage so you stay signed in. We do not use advertising cookies. See our Cookie and Tracking Policy.
2.3 Information from others
Identity verification provider. Whether your verification passed, the date, whether you are 18 or older, your date of birth, and your state of residence.
Apple and Google. Records of purchases and subscriptions you make through their stores, such as the product, transaction identifier, dates, and whether a subscription is active. We never receive your card number.
App store age signals. Where the law requires app stores to share an age range or age category with us, we receive that signal and use it to keep people under 18 off the Service.
Other members. Content about you in reports, comments on your profile, and messages sent to you.
2.4 Information we create
Your vibe. A vibe label, a short description, and five scores (Energy, Warmth, Openness, Style, and Playfulness), plus your vibe history.
Compatibility and recommendations. Scores and rankings that decide which nearby people we show you and in what order.
Safety signals. Moderation outcomes, warnings, and restrictions on your account.
3. How we use your information
| Purpose | Information used |
|---|---|
| Create and run your account, sign you in with a one-time passcode, and keep you signed in | Phone number, device and login information |
| Build your profile and vibe | Profile information, vibe inputs, AI analysis results |
| Show you nearby people and recommend matches | Vibe, profile, preferences, location, activity |
| Let you post, comment, follow, match, and message | Posts, messages, social activity |
| Keep the community safe: age checks, identity verification, moderation, reports, blocks, fraud and spam prevention | Date of birth, age signals, verification results, content, reports, device and IP information |
| Process purchases and subscriptions | Store purchase records, entitlements |
| Send you passcodes, account notices, and service messages | Phone number, email address |
| Answer support requests and appeals | Support messages, account information |
| Fix bugs, measure performance, and improve the Service | Usage, crash, and performance information |
| Comply with law, enforce our terms, and protect rights and safety | Any information needed for that purpose |
We do not use your information to show you ads, and we do not build advertising profiles.
4. How your vibe is made: AI and automated processing
When you set up your vibe:
You give explicit permission first. Before any vibe input leaves your device, the app shows you what will be sent, who processes it, and why, and asks you to agree. If you say no, you can still use FORREST without a vibe, but vibe-based discovery and matching will not be available to you.
Your selfie is sent to a third-party AI model provider, which describes the mood, energy, expression, and overall visual style (such as colors and look) of the photo. It does not rate attractiveness, weight, or race.
Your voice sample is sent to a third-party speech-to-text provider, which turns it into text. That text is then sent to the AI model provider, which reads its tone.
Your activity photo and white space entry are not sent to AI providers. They are part of your vibe post.
The results become your vibe label, description, and five scores. If our AI services are unavailable, we may give you a temporary default vibe until you refresh.
What we do not do:
We do not use your selfie or voice to identify you or to recognize you later.
We do not create or store a face geometry template or a voiceprint.
We do not treat your vibe as a medical, psychological, or emotional diagnosis, and we do not use it to infer anything about your health.
Our AI providers process your inputs only to return results to us. Under the commercial terms we use, they may not use your inputs to train their models.
We use your vibe, your stated preferences, and distance to rank and recommend people automatically. No automated result on FORREST decides your access to credit, housing, jobs, insurance, education, or healthcare. You can change your discovery preferences, hide your location, refresh your vibe, or withdraw your consent at any time. Our AI and Vibe Analysis Notice and Biometric Data Policy give more detail.
5. What other members can see
Your profile: first name, username, age, gender, height, bio, attributes, profile photos, whether you have Premium, whether you are online, and any optional details you choose to display, such as ethnicity or the genders you want to meet.
Your vibe post: the selfie, activity photo, white space entry, and voice clip you publish, with your vibe label and description.
Your location: your city and state, and an approximate distance band such as "about 15 miles." Members never see your exact location. You can hide yourself from location-based discovery in Settings.
Your activity: posts, comments, likes, shares, and follows you make on public surfaces.
Your messages: the people you send them to.
Anything you share with other members can be saved or screenshotted by them. Please share with care.
6. How we share information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows:
With other members, as described in Section 5.
With service providers that work on our behalf under written contracts that limit their use of your information to serving us:
| Provider type | What they do | Information involved |
|---|---|---|
| SMS delivery | Sends sign-in passcodes | Phone number, passcode |
| Email delivery | Sends account and data request emails | Email address, message content |
| Cloud hosting, database, and storage | Runs the Service and stores data and media | All account data |
| Maps and places | Looks up cities and calculates distance | City text, place identifiers, coordinates for distance |
| AI model and speech-to-text, and the routing service that connects us to them | Produces your vibe | Selfie, voice sample, voice transcript |
| Identity verification | Checks your ID and selfie | ID image, selfie, date of birth |
| Content safety | Screens uploaded media for illegal and harmful content | Photos, videos, and related identifiers |
| Crash and performance monitoring | Helps us fix errors | Technical data, with personal details removed |
| App build and update delivery | Delivers app updates | Device and app version |
Each provider must protect your information at least as well as this policy does.
With Apple and Google, to process in-app purchases and subscriptions.
For safety and legal reasons. We share information when we believe in good faith it is needed to comply with law or legal process, to respond to lawful requests from authorities, to protect anyone from death or serious harm, to investigate fraud or abuse, or to enforce our terms. We report apparent child sexual abuse material to the National Center for Missing and Exploited Children (NCMEC) as federal law requires.
In a business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that deal, and it will stay subject to this policy's promises unless you agree otherwise. Biometric-related information will never be transferred in a way that breaks our Biometric Data Policy.
With your direction or consent. For example, when you share a profile link.
7. Sensitive personal information
Some information we handle is "sensitive" under state privacy laws: precise geolocation, your selfie and voice sample as used for vibe analysis, government ID images, ethnicity or sexual orientation details you choose to add, account sign-in credentials, and the content of your messages. We:
collect it only with your consent where the law requires consent;
use it only to provide the Service you asked for, to keep it safe and secure, and for the other purposes allowed by law;
never sell it and never use it for advertising.
Your vibe is an inference drawn from your selfie and voice sample. You can limit our use of your vibe selfie and voice sample at any time in Settings, Privacy, Your Privacy Choices, which withdraws your vibe consent. Our Your Privacy Choices page explains this in more detail.
8. How long we keep information
We keep information only as long as we need it for the purposes in this policy. The main periods are:
| Information | How long we keep it |
|---|---|
| Account and profile | While your account is open, then deleted as described in Section 10 |
| Vibe input copies used only for analysis | Deleted within 30 days after your vibe is processed, and usually within 24 hours |
| Your published vibe post (photos and voice clip) | While that vibe is active, then deleted within 30 days after it expires or you replace it |
| Vibe label, description, and scores | While your account is open |
| Location | Your latest location, stored rounded to about 1 kilometer, while your account is open. The rounded location saved with a vibe is deleted when that vibe expires or you replace it |
| Sign-in sessions and devices | While your account is open |
| Posts, comments, and messages | While your account is open, unless you delete them sooner |
| One-time passcodes | 10 minutes |
| Usage events | Up to 400 days |
| Crash and performance data | 90 days |
| Server logs, with personal details removed | 30 days |
| Support requests | 2 years after the request is closed, or until your account is deleted if sooner |
| Data export files | 14 days |
| Backups | Overwritten within 90 days |
| Identity verification result | While your account is open. The ID images stay with our provider under its retention rules, and we do not store them |
| Consent records | 5 years after your account closes, to prove what you agreed to |
| Safety records (reports, bans, and a one-way hash of banned phone numbers) | Up to 5 years, to keep banned or underage users off the Service |
| Purchase records | 7 years, for tax and accounting |
| Reports to NCMEC and related preserved content | As long as federal law requires |
9. How we protect information
We use encryption in transit (TLS) for all traffic between your device and our servers, server-side encryption for stored media, encryption of certain account fields, access controls that limit staff access to people who need it, logging that removes personal details from error logs, and secure storage of sign-in tokens on your device. Messages on FORREST are encrypted in transit and at rest on our servers, but they are not end-to-end encrypted, so our trust and safety team can review messages when they are reported or when we need to investigate a safety issue. No system is perfectly secure. If a breach affects your information, we will notify you and regulators as the law requires.
10. Your choices and controls
Edit your profile at any time in the app.
Location. Turn off location access in your device settings, or hide yourself from discovery in Settings. See our Location Data Notice.
Vibe and AI consent. Withdraw your consent in Settings, Privacy, Biometric Consent. Withdrawal removes your vibe from discovery right away and deletes your vibe media within 60 minutes. You keep your account, but vibe-based discovery and matching stop until you consent again.
Block, mute, and report other members from their profile or any content.
Notifications. Change notification preferences in Settings or on your device.
Download your data. Request a copy in Settings, Privacy, Download My Data.
Delete your account. In the app go to Settings, Account, Delete Account. You can also request deletion at https://forrestthesocialapp.com/legal/delete-account without reinstalling the app. You have 14 days to change your mind by signing back in. After that, we delete your account, profile, vibe, media, posts, comments, and the messages you sent, within 30 days. Copies in backups are overwritten within 90 days. We keep only the limited records listed in Section 8 that the law or safety requires. See our Account Deletion and Data Rights page.
11. Your privacy rights
Depending on where you live, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with privacy laws, you may have the right to:
Know and access the personal information we have about you, including the categories, sources, purposes, and the categories of recipients;
Get a copy in a portable format;
Correct inaccurate information;
Delete your information;
Opt out of the sale of personal information, sharing for targeted advertising, and profiling that produces legal or similarly significant effects. We do none of these, but you may still send us a request;
Withdraw consent to processing of sensitive information;
Appeal a decision we make on your request; and
Not be discriminated against for using these rights.
How to make a request. Use Settings, Privacy in the app, visit https://forrestthesocialapp.com/legal/delete-account, or email privacy@forrestthesocialapp.com. We will verify your request by confirming control of the phone number on your account. An authorized agent may submit a request for you with your signed permission, and we may ask you to confirm your identity directly. We respond within 45 days, and we may extend that once by 45 more days if we tell you why.
Appeals. If we deny your request, you may appeal by replying to our decision or emailing privacy@forrestthesocialapp.com with the subject "Privacy Appeal." We will respond within 60 days (45 days where state law requires). If you disagree with the outcome, you may contact your state attorney general.
Global Privacy Control. We honor Global Privacy Control browser signals as a request to opt out of sale and sharing. Because we do not sell or share, the signal does not change how we process your data.
12. State-specific notices
California. In the last 12 months we collected the following categories of personal information as defined by the California Consumer Privacy Act: identifiers; customer records; characteristics of protected classifications (age, gender, and optional ethnicity); commercial information (purchases); biometric information as described in our Biometric Data Policy; internet or other electronic network activity; geolocation data; audio, electronic, and visual information; inferences (your vibe and compatibility); and sensitive personal information as listed in Section 7. We collect them from the sources in Section 2, for the purposes in Section 3, and disclose them for business purposes to the recipients in Section 6. We have not sold or shared personal information, and we do not knowingly sell or share the personal information of anyone under 16. California's "Shine the Light" law lets you ask about disclosures for direct marketing; we make no such disclosures.
Illinois, Texas, Washington, Colorado, and other states with biometric laws. Our Biometric Data Policy is our written policy for biometric information, including our retention schedule and destruction guidelines. We obtain your written release through the in-app consent before collection.
Washington and Nevada consumer health data. We treat vibe selfies and voice samples as biometric data under Washington's My Health My Data Act and Nevada law, collect them only with the consent in our Biometric Data Policy, and do not use them to infer physical or mental health. Our Consumer Health Data Privacy Policy gives the notice those laws require.
Nevada. We do not sell covered information. You may still email privacy@forrestthesocialapp.com to submit an opt-out request.
13. Children
FORREST is only for people 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that someone under 18 has an account, we close it and delete their information, keeping only what we need to stop them from signing up again. If you believe a minor is using FORREST, report it in the app or email safety@forrestthesocialapp.com. See our Age Requirements Policy.
14. Where we process information
FORREST is offered only in the United States. We store and process your information in the United States.
15. Changes to this policy
We may update this policy as the Service or the law changes. If we make a material change, we will tell you in the app or by another reasonable method before the change takes effect, and where the law requires it we will ask for your consent again. The "Last updated" date at the top shows when this policy last changed.
16. Contact us
Forrest Holdings LLC Attn: Privacy 79 El Dorado Drive, Little Rock, AR 72212 Email: privacy@forrestthesocialapp.com