Privacy Policy

Forma ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with our mobile application (the "App") and related services.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, password, and profile data
• Fitness & Health Data: Workouts, exercises, sets/reps, weight, duration, nutrition logs, meals, ingredients, and health metrics synced from HealthKit (iOS) or Health Connect (Android)
• Subscription Data: Billing information processed through RevenueCat and payment providers
• Support Communications: Messages sent to support@trainwithforma.app

Information We Collect Automatically

• Device Information: Device type, OS version, app version, locale, and preferences
• Usage Data: Features used, screens opened, session duration, errors, and crash logs
• Screen Recordings: Recordings of app screens that help us fix problems and improve the app. Recordings hide what you type into text fields and never include your photos. Other information shown on screen, such as workouts or food entries, may appear in them.
• Network Information: IP address (for authentication, abuse prevention, and app analytics) and the approximate location it indicates, such as your city or country

Google Sign-In Data

When you choose to sign in with Google, we access the following information from your Google account:

• Name: Used to personalize your Forma profile
• Email address: Used as your account identifier and for service communications
• Google Account ID: Used solely to authenticate your identity
• Profile picture (optional): Displayed in your profile if available

We access this data only for authentication purposes. We do not use Google user data for advertising, profiling, or any purpose beyond creating and managing your Forma account. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Advertising Identifier (Android)

On Android, we access the Advertising ID (GAID) solely through our subscription provider RevenueCat to detect and prevent fraudulent subscription activity and for attribution of app installs. We do not use the Advertising ID to build user profiles or serve targeted advertising. You can reset or opt out of personalized ads at any time via your device's Google Settings → Ads.

AI Coach Data

When you use the AI Coach feature (available to Pro subscribers), we process the following data to generate your personalized coaching brief and respond to your messages:

• Your profile data (age, weight, goal, activity level)
• Recent workout history (up to 60 sessions)
• Recent nutrition logs (up to 30 days)
• Bodyweight history
• Step count data (if health permissions are granted)
• Messages you send to the coach
• Photos of nutrition labels you choose to send to the coach, and the serving size you enter

This data is sent to Google's Gemini AI service to generate responses. It is processed solely to provide you with coaching output and is not used to train AI models or for any other purpose. See Section 4 for details on Google as a data processor.

Health & Fitness Data Permissions

When you grant permission, we access:

• iOS (HealthKit): Steps, workouts, and health metrics you explicitly authorize
• Android (Health Connect): Steps and health data through Google's Health Connect API

You control these permissions via your device settings and can revoke access at any time. We only sync data you explicitly permit.

2. How We Use Your Information

• Provide, maintain, and improve the App and services
• Understand how the app is used and fix crashes and errors
• Track workouts, nutrition, and progress
• Sync data across devices via Supabase backend
• Generate AI-powered coaching briefs and responses using your fitness and nutrition data (Pro subscribers only)
• Process subscriptions through RevenueCat
• Authenticate your identity securely
• Send service notifications (account alerts, technical issues)
• Respond to support requests
• Comply with legal obligations
• Detect and prevent abuse or fraud

3. Data Storage & Security

• Backend: User data stored in Supabase (PostgreSQL database with encryption)
• Local Storage: Cached data stored on your device using encrypted AsyncStorage
• Health Data: HealthKit and Health Connect data stored locally on your device; we only access synced copies you've authorized
• Encryption: Data in transit uses HTTPS; authentication uses secure token storage

We implement industry-standard security measures, but no system is 100% secure. We cannot guarantee absolute security of your data.

4. Data Sharing & Third Parties

We share your information with:

• RevenueCat: Subscription and billing processing (see their privacy policy)
• Supabase: Backend data storage and authentication (servers located in the United States)
• Google Gemini (AI): When you use the AI Coach feature, relevant fitness and nutrition data, including nutrition label photos you choose to send, is sent to Google's Gemini AI service to generate coaching responses. This data is processed as described in Google's Gemini API Terms of Service and Privacy Policy. Google does not use this data to train its models per the API terms.
• OpenAI: Processes selected photos and preferences only when you consent to optional physique photo analysis. See Section 7 for details.
• PostHog (product analytics): Helps us understand how the app is used so we can improve it. Receives an account ID (not your name or email), device information, your IP address and the approximate location it indicates (such as city or country), usage information (including subscription status), and screen recordings, with text-field input hidden and photos excluded. Not used for advertising. See their privacy policy.
• Sentry (error reporting): Receives crash and error reports, which include device information and what the app was doing when the problem happened, so we can fix problems. Not used for advertising. See their privacy policy.
• Google (OAuth): Authentication for sign-in only. Data received via Google Sign-In is not shared with any other third party and is used solely for account authentication per Google's Limited Use Policy.
• YouTube: External search result links for exercise form tutorials. These links open outside Forma; YouTube may process your activity under its own policies.
• Health APIs: HealthKit and Health Connect (accessed locally on your device)

Service providers listed above that receive your data from us may use it only to provide their services to Forma and must protect it at least as well as this Privacy Policy describes.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Exercise Tutorial Links

Forma may provide external links to YouTube search results to help users find exercise form tutorials. These links open outside the Forma app. Forma does not host, download, embed, reproduce, or control any YouTube videos or third-party exercise content.

All videos, thumbnails, titles, channels, comments, recommendations, and related content shown on YouTube are provided by YouTube and/or their respective creators. Forma is not responsible for the availability, accuracy, safety, legality, quality, or content of third-party videos.

Users are responsible for evaluating whether any exercise tutorial is appropriate for their fitness level, health condition, and goals. Exercise involves risk of injury. Users should stop if they feel pain or discomfort and consult a qualified professional when needed.

YouTube and related trademarks belong to their respective owners. Forma is not affiliated with, endorsed by, or sponsored by YouTube or Google.

6. AI Coach Feature

The AI Coach is a Pro-only feature that uses artificial intelligence to provide personalized fitness and nutrition insights.

• How it works: Your fitness history, nutrition logs, and coach messages are processed server-side and sent to Google Gemini to generate a response. No data is processed on your device for this feature.
• Nutrition label photos: If you photograph a nutrition label for the coach, the image and the serving size you enter are sent through our servers to Google Gemini to read the nutrition values. These photos are processed only to provide coaching output, are not used to train AI models, and are not used for advertising, sold, or used to identify you. Forma does not store the photo; only the nutrition values you confirm are saved to your food log.
• Caching: Weekly coaching briefs are cached on our servers (keyed by a hash of your data snapshot) to reduce redundant processing. Cached briefs are stored for up to 7 days.
• Usage limits: The AI Coach is subject to fair-use limits (currently 50 messages per week per user). These limits exist to manage costs and ensure fair access.
• Not medical advice: AI Coach responses are informational only. See Section 3 of our Terms of Service for the full disclaimer.
• AI-generated content: Responses are generated by an AI model and may occasionally be inaccurate, incomplete, or not applicable to your specific situation. Always use your own judgment.
• No automated decisions: We do not make legally significant automated decisions about you based on AI outputs. The coach is an informational tool only.

7. Optional Physique Photo Analysis

Adults aged 18 and over can choose AI-assisted physique photo analysis. It checks whether selected photos are suitable, suggests tentative upper-body training priorities, and may provide an approximate visual body-fat range. Results are fitness suggestions, not medical advice, a diagnosis, or a measurement of body composition.

Choice and data shared: Only after you explicitly consent and start an analysis, prepared copies of your selected front, side, and back photos are sent through Forma's backend to OpenAI. The request also includes the selected photo views, your chosen body-reference category, training goal, experience, and focus preferences. It does not include your account email, workout history, or nutrition logs. Camera or photo-picker permission alone does not authorize AI processing. You can skip photos and choose training priorities manually.

Forma retention: Selected photos are held temporarily in memory during setup and are not saved in Forma's account database, cloud photo storage, or resumable setup draft. Temporary scan findings and account-scoped image fingerprints expire after 24 hours and are normally removed within 25 hours. Consent and scan-allowance records are kept until account deletion to manage permissions and usage. After account deletion, operational cost records may remain with account and scan-job links removed.

OpenAI retention: Forma requests processing without persistent response storage. This does not mean OpenAI retains nothing. OpenAI says API data is not used to train its models by default, but abuse-monitoring records may retain content for up to 30 days, or longer when required for legal or safety reasons. Images flagged for safety review may also be retained. See OpenAI's data controls.

Withdrawal and deletion: You can withdraw consent and remove scan results through the scan flow. Once the server confirms withdrawal, Forma removes its retained findings and will not process more photos under that consent. Withdrawal cannot undo processing already sent to OpenAI; its retention rules still apply. Removing a photo from Forma does not delete the original from your device's photo library. Account deletion removes Forma's account-linked scan records, subject to the backup period described in Section 9. For privacy or deletion requests, contact support@trainwithforma.app.

Forma does not use scan photos for advertising, sell them, or use them to identify you.

8. Your Rights & Controls

Access & Deletion

• You can delete your account and all associated data via Settings → Account & Data → Delete Account
• Deletion is permanent and cannot be undone
• For data access requests, contact support@trainwithforma.app

Health Data

• Revoke HealthKit/Health Connect access through your device settings anytime
• We will not access new health data after revocation
• Previously synced health data remains in your Forma account until deletion

Device Permissions

• You can manage app permissions (health, location, camera) via device Settings
• We respect device-level permission decisions

9. Data Retention

• Account Data: Stored while your account is active; deleted when you delete your account
• AI Coach Briefs: Cached coaching summaries retained for up to 7 days, then purged
• Nutrition Label Photos: Not stored by Forma; only the nutrition values you confirm are saved to your food log
• Physique Photo Analysis: Photos, temporary results, image fingerprints, and consent records are handled as described in Section 7
• Backups: Deleted account data may persist in backups for up to 30 days
• Analytics Data: Kept while your account is active; deleted within 5 days after you delete your account
• Screen Recordings: Deleted after 30 days, or within 5 days after you delete your account, whichever comes first
• Crash Reports: Deleted within 90 days of the crash or error
• Logs: Server logs retained for 90 days for security and debugging
• Local Cache: Cleared from your device when you sign out or delete the app

10. Children's Privacy

Forma is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If we become aware of such collection, we will delete the data promptly. Parents or guardians concerned about their child's use should contact support@trainwithforma.app.

11. International Data Transfers

Your data may be processed and stored in the United States (Supabase, Google Gemini, OpenAI for optional photo analysis, PostHog for analytics, and Sentry for crash reports) and other countries. By using Forma, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

12. GDPR & Regional Privacy Rights

If you reside in the EU, UK, or other jurisdictions with privacy regulations:

• Access: Right to request a copy of your data
• Rectification: Right to correct inaccurate data
• Deletion: Right to delete your account and data (via app settings)
• Objection: Right to object to data processing
• Data Portability: Right to receive data in machine-readable format
• AI decisions: The AI Coach does not make automated decisions with legal or significant effects. You may contact us to discuss how AI-generated content is used in the service.

To exercise these rights, contact support@trainwithforma.app with your request and account details.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. Your continued use of Forma indicates acceptance of the updated Privacy Policy.

14. Contact Us

This Privacy Policy is effective as of October 19, 2026 and applies to all users of the Forma application across iOS and Android platforms.