FORMA LABS LLC ("FORMA LABS", "we", "us", "our") operates the FORMA LABS mobile application (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have. If you do not agree with this Policy, please do not use the Service.
Account information. When you create an account we collect your email address, and (optionally) your display name, first name, and password. Passwords are managed by our authentication provider and are not stored in readable form.
Profile and fitness data. When you onboard and use the Service, you may provide age, sex, height, weight, body measurements, fitness goals, training experience, workout schedule preferences, and similar details. You may also log workouts, meals, recovery check-ins (sleep hours, energy levels), and progress photos.
Inspiration and goal photos. You may upload photos to personalize your coaching. These are stored in a dedicated storage bucket and are only accessible to you unless you explicitly share them.
Communications with Workout Genie. When you chat with our AI coach, we store your messages and the AI's responses to maintain conversation context across sessions.
Device and usage data. We automatically collect your device model, operating system version, app version, approximate location (country/region only, derived from IP), crash reports, and information about how you use the Service (tabs opened, workouts completed, features used). This data is used for analytics and to improve the Service.
Purchase data. When you subscribe, we collect your subscription tier, trial status, renewal date, and purchase receipt. Full payment-card details are handled by Apple; we never see or store them.
We do NOT collect. We do not collect your full physical address, Social Security number, driver's license number, government-issued ID, biometric identifiers, precise GPS location, or the content of other apps on your device.
If you choose to connect Apple Health, FORMA may read the following data types from HealthKit on your device:
FORMA may also write completed workout sessions (sport type, duration, estimated calories) back to HealthKit so they appear in your Apple Health history.
All HealthKit data stays on your device. FORMA does not transmit, upload, or store your Apple Health data on our servers or any third-party servers. It is read locally, displayed locally, and never leaves your iPhone. Your HealthKit data is never used for advertising, marketing, or data brokerage, and is never sold or shared with third parties.
Connecting Apple Health is entirely optional. You can disconnect at any time through your iPhone’s Settings → Health → Data Access & Devices → FORMA. Disconnecting does not affect any other FORMA features.
We use the information we collect to:
We do NOT sell your personal information to anyone. We do not use your photos, messages, or fitness data for advertising.
To operate the Service, we share data with the following third-party processors. Each is bound by contract to use your data only to provide services to FORMA LABS:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, file storage | All account, fitness, photo, and chat data |
| RevenueCat | Subscription and purchase management | Account ID, subscription status |
| PostHog | Product analytics | Anonymized usage events |
| Sentry | Crash and error reporting | Device info, error stack traces |
| OpenAI | AI coaching (Workout Genie) and workout/exercise image generation | Chat messages during a session; exercise, sport, and equipment descriptors used to generate illustrative images |
| Anthropic | AI coaching (fallback) | Chat messages during a session |
| Google Gemini | AI coaching (fallback) | Chat messages during a session |
| Apple App Store | App distribution and payments | Payment and subscription data |
| Resend | Transactional email | Email address and email content |
| Apple HealthKit | On-device health data integration | No data shared — all access is on-device only |
We have contractual agreements with AI providers that your content is not used to train their models.
We keep your account data while your account is active. When you delete your account:
We may retain certain information longer if required by law (for example, tax records typically for 7 years) or if needed to resolve disputes or enforce agreements.
You have the following rights over your personal data. We will respond to valid requests within 30 days.
To exercise any of these rights, email legal@formaapp.co from the address associated with your account, or contact us through in-app support.
If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended:
To exercise California privacy rights, email privacy@formaapp.co with the subject line "California Privacy Request."
If you are in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (or equivalent law) including the rights listed in Section 5 above. Additionally:
FORMA LABS is not available to children under 13. We do not knowingly collect personal information from children under 13, and any account that we identify as belonging to a child under 13 will be terminated and the associated data deleted. If you believe a child under 13 has provided us personal information, contact us at privacy@formaapp.co and we will delete it. Users under 18 (and at least 13) may access FORMA LABS only through a Family Plan supervised by a parent or legal guardian. Workout generation for minor users requires confirmed supervision; photo and video upload is disabled for accounts under 18.
We use industry-standard technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS) and at rest, role-based access controls, and regular security reviews of our providers. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security.
If a breach occurs that affects your personal data, we will notify you in accordance with applicable law.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, provide in-app notice or email notice at least 30 days in advance. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
Questions, concerns, or privacy requests should be sent to:
FORMA LABS LLC
Email: privacy@formaapp.co
In-app: through the FORMA app's in-app support
This Privacy Policy is drafted as a good-faith starting point for the launch of FORMA LABS and is not a substitute for legal advice.