Privacy Policy
In short
- You can use Forma without an account: your workouts, progress and meals are stored on your iPhone.
- If you sign in (Sign in with Apple or email), your data is backed up and synced through our server.
- AI features are optional and work only after you agree. Your request and the context it needs are processed by OpenAI through our server — not used to train models and kept by OpenAI for up to 30 days for abuse monitoring.
- No ads, no analytics or tracking SDKs, no selling of your data.
- You can delete your account and all server data at any time in the app.
1. Who we are
Forma (“Forma”, “we”, “us”) is an AI workout coach app for iPhone and the server that powers its account, sync and AI features. Forma is developed and published by the developer named as the seller of Forma on its App Store page, who is the controller of the personal data described here. This policy explains what data we process, why, who helps us process it, how long we keep it and the choices you have. Questions and requests: support@forma-coach.space.
2. Data stored on your device
To build your workouts the app stores on your iPhone: your profile (name, birth year, sex, height, weight, goal, experience level, equipment, injuries and limitations, training preferences), workouts and logged sets, how you feel (check-ins), body weight entries, meals, calories, macros and water, and app settings. This data stays on the device unless you sign in. A random installation identifier is kept in the iOS Keychain to create an anonymous guest session with our server (used for AI limits and purchases without an account). We do not use the advertising identifier.
3. Data we process on our server
3.1 Account and sync (only if you sign in)
- Account: account ID, email address (the one you sign in with, or the email shared by Sign in with Apple, including a private relay address), display name, language, sign-up and update times.
- Sign in with Apple: your Apple user identifier and an Apple refresh token, which we keep only to revoke Sign in with Apple when you delete your account.
- Synced data: copies of your profile, workouts, body measurements, meals and water, so you can restore them on another device.
3.2 Email sign-in
When you sign in with email, we send a one-time 6-digit code through our email provider. We store only a keyed hash of the code; a code expires after 10 minutes, allows up to 5 attempts and is deleted within a day. Session tokens are stored as hashes.
3.3 AI features (only with your consent)
The AI coach, AI workouts, meal scan and form check send your request (your message or wishes), the context needed for the answer — profile details such as age, height, weight, goal and injuries, how you feel, recent workouts and today’s plan — and the photos you attach to our server, which passes them to OpenAI to generate the reply. Our server does not store the text of your requests or your photos; it keeps usage records (feature, model, token counts, cost and date) to apply your plan’s limits. Messages to the coach are checked by OpenAI’s moderation model to detect self-harm risk. OpenAI receives a hashed identifier for prompt caching — not your account ID or email.
3.4 Purchases
Subscriptions are sold and charged by Apple. We receive transaction information from Apple (product, purchase and expiry dates, renewal status, transaction IDs and environment) to unlock your plan, linked to your account ID. We never see your payment details.
3.5 Technical logs
Our server keeps technical logs (time, request path, response status, IP address and request ID) for security, rate limiting and troubleshooting. Tokens, secrets and images are redacted from logs, which are rotated automatically.
3.6 What we don’t collect
Location, contacts, advertising identifiers, browsing or search history, analytics or crash-reporting SDK data, audio and financial information.
4. Why we use your data
- To provide the app (performance of our agreement with you): workout plans, progress, nutrition targets, backup and sync, subscriptions.
- AI features (your consent): you can withdraw consent at any time in Profile → AI coach → AI features.
- Health information such as weight, injuries and how you feel (your explicit consent): you choose to enter it, to sync it by signing in and to share it with the AI by turning AI features on.
- Security and abuse prevention (our legitimate interests): rate limits, logs, moderation.
- Legal obligations, for example tax and consumer rules for purchases (handled mostly by Apple).
We do not sell your data, do not use it for advertising and do not use it to train AI models.
5. Who processes data for us
- OpenAI (USA) generates AI answers. Data sent through the API is not used to train models; requests are sent with storage turned off and OpenAI keeps them for up to 30 days for abuse monitoring, then deletes them.
- Resend delivers email sign-in codes.
- Apple provides Sign in with Apple, App Store payments and subscription status notifications.
- Our hosting provider runs our server and database.
We may disclose data if required by law or to protect the rights and safety of users.
6. How long we keep data
- Data on your device: until you erase it (Profile → Erase data on this device) or delete the app.
- Account and synced data, usage records and purchase records: until you delete your account.
- Email codes: up to 1 day. Expired sessions: deleted within 7 days of expiry.
- AI requests at OpenAI: up to 30 days.
- Technical logs: a short period; they are rotated automatically.
7. Your rights and choices
- Access and export: Profile → Export my data creates a file with your data from the device. Write to us from your account email for a copy of the data on our server.
- Correction: edit your profile in the app at any time.
- Deletion: Profile → Account → Delete account permanently deletes your account and all server data and revokes Sign in with Apple. Without an account, use Profile → Erase data on this device.
- Withdraw AI consent: Profile → AI coach → AI features.
- Depending on where you live (for example under the GDPR, UK GDPR or the CCPA), you may also have the right to object to or restrict processing, to data portability and to complain to your data protection authority. We do not sell or share personal information for cross-context behavioral advertising.
- Subscriptions are managed in Settings → [your name] → Subscriptions; deleting your account does not cancel a subscription.
8. Security
All traffic uses HTTPS (TLS) with HSTS. Sign-in codes and session tokens are stored as hashes, the database is not reachable from the internet and access is limited. No method of transmission or storage is completely secure, but we work to protect your data.
9. Children
Forma is intended for people aged 13 and older; the app does not accept a birth year below that age. We do not knowingly collect data from children under 13. If you believe a child has given us data, contact us and we will delete it. If the law where you live requires parental consent for teenagers, use Forma only with that consent.
10. International transfers
Our server and our providers may be located outside your country, including the United States (OpenAI). Where required, we rely on appropriate safeguards such as the standard contractual clauses offered by our providers.
11. Changes to this policy
We will update this page and its effective date when this policy changes, and tell you in the app about significant changes.