Privacy Policy

Effective October 27, 2026

Short version: Anvil doesn't send anything to us. There's no Anvil account, no analytics, no ads and no crash reporting. The app talks to one place: the Forgejo or Gitea server you sign in to.

Who we are

Anvil is made by ADK Interactive, LLC, a New York company. You can reach us at support@anvilforgejo.app.

What stays on your iPhone

• Your access token, kept in the iOS Keychain so you stay signed in.
• Copies of what you've opened, like repos, issues, pull requests and files, so screens open fast and still work offline. Signing out of an account removes its copies.
• Drafts of comments, issues and file edits you haven't sent yet.
• Your settings, like theme, accent color, muted repos, pinned repos and saved searches.
• Certificates you chose to trust, for servers with self-signed certificates.

Deleting the app removes all of it.

What leaves your iPhone, and when

• Requests to your server. Everything you do in Anvil, from loading your inbox to merging a pull request, is a request to the server address you entered. Your token signs those requests. It isn't sent anywhere else.
• Images in Markdown, which load from wherever their author linked them, like any web page.
• Background checks, only if you turn on Alerts When Away. Anvil asks your server for new notifications now and then and shows the alert itself. No push service sits in between.

That's the whole list. Nothing goes to ADK Interactive.

Every company involved

• Your Forgejo or Gitea host. That might be you, your company, or a service like Codeberg. Their own privacy policy covers what they keep.
• Apple, which runs the App Store, TestFlight and iOS. Widgets, Live Activities, Spotlight, Shortcuts and Handoff are iOS features. They show or index what you opened in Anvil on your own devices.

We don't use any other company.

Security

Your token lives in the Keychain, which iOS encrypts and keeps for Anvil and its widgets alone. You can lock the app behind Face ID, Touch ID or your passcode. A server with a self-signed certificate is only trusted after you check and accept its fingerprint. If the certificate changes, Anvil asks you again.

Where data is processed

On your iPhone, and on the server you sign in to, wherever that server is.

Permissions the app asks for

• Notifications, for Alerts When Away.
• Face ID, if you turn on the app lock.
• Photos: Anvil uses the system photo picker, so it only ever sees the photos you choose to attach.

You can turn any of these off in the Settings app.

This website

This site uses no cookies or analytics. The company that hosts it may keep standard server logs.

Selling or sharing

We don't sell or share personal information, use it for ads, or build profiles. We don't have it to begin with. Anvil isn't meant for children under 13, and we don't knowingly collect their information.

If we're asked, or sold

Since we hold nothing about you, there's little we could hand over. If the law requires us to disclose something we do have, or we need to protect someone's safety or our rights, we will. If ADK Interactive or Anvil is sold or merged, this policy goes with it.

Changes

If this policy changes, we'll update the date at the top and note what changed below. Big changes will also be announced in the app.

• October 27, 2026: First version.

Contact

Privacy questions: support@anvilforgejo.app