Privacy Policy

FORMA ("we", "us") operates the website and app at formabuild.net. This policy explains what information we collect, how it is used, and the third-party services we rely on.

Information we collect

When you create an account we store your name and email address via our authentication provider, Supabase. Your workout, nutrition, weight and progress data are saved to your account so they sync across devices; much of this is also kept locally on your device. We do not sell your personal information.

Camera & Form Check

The Form Check uses your device camera to analyse your exercise technique. All pose detection runs on your device, inside your browser, using an on-device model. Your camera video is never uploaded, recorded, or sent to us or any third party — it stays on your phone and is discarded as you use the feature. You can revoke camera permission at any time in your browser or device settings.

Location & Stride

The Stride run & walk tracker uses your device's location (with your permission) to trace your route while an activity is running. On solo activities, your position is processed on your device. If you save an activity to your account, we store only the shape of the route — relative distances from your starting point — together with distance, time and estimated calories. Absolute GPS coordinates from solo activities are never sent to or stored on our servers, so a saved activity cannot reveal where you were. You can revoke location permission at any time in your browser or device settings, and delete saved activities by deleting your account.

Live Runs are the one exception, and only if you choose to join one. While a Live Run is on, your current position is shared with the members of that run so everyone appears on a shared map. We relay only your single latest position— overwritten each time it updates, never a route history — and it is deleted the moment you finish, leave, or the run ends. Nothing about a Live Run's locations is retained afterwards; only distance, time and finishing order are kept for the results screen, and those are discarded when the room closes.

Food Scan

If you use the optional Food Scan in the nutrition tracker, the photo you take or upload is sent securely to our AI provider, Anthropic, to estimate its nutritional content, and the estimate is returned to you. We do not store your food photos, and Anthropic does not use data sent through its API to train its models. This feature only runs when you choose a photo.

Apple Health & Apple Watch

Connecting Apple Health is optional and off by default. If you choose to connect it, an Apple Shortcut that you set up and control on your own devicereads the Health metrics you include — such as body weight, steps, active energy, resting heart rate, sleep, and workout counts (this may include data your Apple Watch recorded) — and sends them to your FORMA account over a secure connection, authenticated by a private token unique to you. We store only the latest values you send, linked to your account, to power features like your weight chart, readiness score, and calorie targets. FORMA never reads Apple Health directly and has no access to any Health data you don't choose to send. You can reset your sync link at any time to stop further syncing, and deleting your account removes this data along with the rest (see below). We do not sell this data or use it for advertising.

Analytics & performance

To understand how the app is used and to fix problems, we use Vercel Analytics (privacy-friendly, aggregate traffic), Microsoft Clarity (usage analytics, heatmaps and session replays of on-page interactions — not your camera), and Sentry (error and crash diagnostics). These services may set cookies and collect device, browser and usage information to provide their features.

Notifications

If you opt in to workout reminders, we store a browser push-notification subscription so we can send you reminders. You can turn notifications off at any time in your browser or device settings.

Friends & community

If you use the Friends feature, people you connect with — using a code you choose to share — can see your completed workouts (exercises, sets and reps), your display name and your position on a weekly activity leaderboard. Your body weight and body measurements are never shared. You control who you connect with, and can remove friends or rotate your code at any time.

Posts, photos and video

Anything you post to your feed — a gym or meal photo, a short video, a caption, a comment — is stored on our servers and is visible to the friends you have connected with, and nobody else. There is no public feed and no way for a stranger to see it. Media is kept in private storage and served only through short-lived links that re-check, on every single request, that you are still allowed to see it — so unfriending or blocking someone cuts off their access to photos you posted before, not just future ones.

We remove location and camera metadata from photos and video before they leave your device, so a gym selfie or a lifting clip does not quietly carry the gym's coordinates. Photos are re-encoded in your browser, which drops their metadata, and the server strips it again on arrival rather than trusting that. Video files have the section that holds the recording location cleared in the browser, before upload. If a video is in a format we cannot read confidently we upload it unchanged rather than risk damaging it — so if this matters a great deal to you, turning off location for your camera app is still the certain answer.

Deleting a post removes it and its media for everyone. Deleting your account removes your posts, your profile picture and everything stored with them.

Messages

If you message someone you have connected with, what you send — text, photos and voice messages — is stored on our servers, so it can reach the other person and so the conversation is still there on your next device. Messages are not end-to-end encrypted. We hold them in a form we could technically read, and we will read specific messages if they are reported to us. Photos and voice messages are kept in private storage and served only through short-lived links that re-check, every single time, that you are still allowed to see them.

You can delete your own messages, block anyone, and report a conversation. Deleting a message removes it for both people. Reporting keeps a copy of the reported messages exactly as they were at that moment, so that a report cannot be erased by deleting the evidence. That copy is stored separately and outlives deletion of the conversation and of your account, because it is the only record of what was reported. Blocking takes effect immediately, ends any call in progress, and hides the two of you from each other across FORMA.

Voice calls are not recorded.Call audio travels directly between the two devices wherever the network allows, rather than through us; we pass along only the small amount of information the two devices need to find each other, and that is discarded when the call ends. As with any direct connection of this kind, the two devices learn each other's network addresses in the process. We use Google's public STUN servers to help establish the connection.

Cookies & advertising

We use cookies for sign-in and preferences. On the web we also display ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising by visiting Google Ads Settings. For more information about how Google uses data, see Google's policies.

Payments

Where paid plans are offered, payments are processed securely by Stripe on the web, or by Apple when you buy inside the iOS app. We never see or store your card details. From an Apple purchase we receive a signed receipt identifying what was bought and when, which we store so your Premium access works on every device you sign in on.

Children

FORMA is not for children. You must be at least 13 to use it, and at least 16 in the European Economic Area and the United Kingdom. We do not knowingly collect anything from anyone younger, and we do not direct FORMA at children. If we find out an account belongs to someone below the age for their country, we delete the account and the data stored with it. If you are a parent or guardian and believe your child has created an account, email support@formabuild.net and we will remove it.

Your choices & deleting your data

You can delete your account and its associated data yourself, at any time, from the Delete Account page — or by emailing us. You may also manage cookies through your browser settings. One narrow exception, described above: if someone has reported a message, the copy taken at the time of that report is kept so the report remains reviewable.

Contact

Questions about this policy? Email us at support@formabuild.net.