Form — Privacy Policy

Last updated: 2026-05-19

Form is a calm, honest fitness tracker. This document explains what data we collect, why, and how you control it.

TL;DR

We collect what you log: food, weight, water, workouts, exercise notes, and the email you sign up with.
We never sell your data and we never run ads.
You can export everything as CSV and delete your account from inside the app at any time.
AI features send your meal text/photo or your form-check photos to Anthropic for processing. We do not store the raw photos beyond what's needed to render history.

What we collect

Account. Your email address and a hashed password. Created at sign-up.

Food log. Each item you log: name, quantity, unit, kcal, protein, carbs, fat, optional micronutrients, the AI model's reasoning string (when applicable), and the timestamp. Stored under your account.

Training log. Workouts, sets, reps, weight, RPE, exercise notes, routines, and form-check observations you've run. Stored under your account.

Profile. Your goals (kcal, macros, water), diet style preference, and the timestamp you completed onboarding.

Diagnostics (only on TestFlight / App Store builds). Crash reports via Sentry, scrubbed of personal data. Not linked to your identity.

What we do NOT collect. Location. Contacts. Health data outside what you type in. Device identifiers for advertising. Behavioral tracking. Anything you didn't put in yourself.

How we use it

To show your data back to you. Logs, charts, the calendar, the e1RM estimate.
To compute insights. Maintenance kcal, autoregulation suggestions, weekly reflections — all derived from your own logs, on the server (Supabase).
AI features (optional, on demand). When you log a meal by text or photo, or run a form-check, we send the input to Anthropic's Claude API. Anthropic processes the request and returns a response; per Anthropic's API terms in effect at the time of writing, your input is not used to train their models.
To enforce abuse limits. We count AI requests per user per day to keep the service running. Counts are anonymous within our infrastructure but tied to your user id.

We do not share your data with marketing partners, brokers, or advertising networks.

Where it lives

Application database: Supabase (hosted on AWS, US region).
AI processing: Anthropic API.
Photo identification: photos you submit are sent to Anthropic for analysis; raw images are not retained on our servers beyond the request lifecycle. Macros and the AI's textual reasoning are stored under your account.

Your rights

Access + export. Settings → export your data as CSV.

Delete. Settings → Danger zone → Delete account. This wipes everything: meals, workouts, weight history, notes, routines, and the account row itself. Deletion is final.

Correct. Tap any logged item to edit it.

Withdraw consent. Stop using the app. Optionally delete your account first.

If you're in the EU/UK (GDPR) or California (CCPA), the rights above also constitute your right to access, port, and erase. Contact us if you need anything beyond what the in-app controls provide.

Children

Form is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has signed up, contact us and we'll delete the account.

Security

All connections to our backend use TLS.
Passwords are stored as salted hashes by Supabase Auth.
Database rows are isolated per user via Postgres row-level-security policies.
We never email you your password, and we never ask for it outside the sign-in screen.

We can't promise zero risk — nobody honestly can — but we follow the practices listed above and we'll tell you, in-app and by email, if a breach affects your data.

Changes

If we make material changes to this policy, we'll notify you in-app before they take effect.

Contact

form.support@proton.me">form.support@proton.me