Privacy Policy

1. What we collect

When you use Formi, we collect the following data:

• Account information: email address and password (hashed, we never store plaintext passwords)
• Fitness profile: experience level, training goals, available equipment, preferred training days, session length, age, gender, and any injuries or limitations you share during onboarding
• Workout logs: exercises performed, sets, reps, weights, and workout timestamps
• AI conversation history: messages exchanged with the coaching AI, including onboarding conversations and in-app coach chats
• Generated programmes: the training programmes created for you by the AI

2. How we use your data

Your data is used to:

• Generate and personalise your training programmes
• Power the AI coaching conversations
• Track your workout history and progress
• Adjust your programme based on feedback and logged workouts
• Improve the overall quality of the service

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. AI processing

Formi uses the Anthropic Claude API to power its coaching features. When you interact with the AI coach, your conversation messages and relevant fitness profile data are sent to Anthropic's servers for processing.

Anthropic processes this data according to their own privacy policy. We send only the minimum data necessary to provide coaching. Your conversations are not used to train AI models.

4. Data storage and security

Your data is stored using the following services:

• Supabase (PostgreSQL database) for all user data, programmes, and workout logs. Supabase provides row-level security and encrypted storage.
• Vercel for application hosting and server-side API processing.

We use industry-standard security practices including encrypted connections (HTTPS), hashed passwords, and row-level security policies to ensure you can only access your own data.

5. Cookies and tracking

Formi uses essential cookies for authentication (keeping you logged in). We do not currently use any third-party analytics, advertising cookies, or tracking pixels.

6. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your workout data

To exercise any of these rights, contact us at the address below.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete all your personal data within 30 days. Anonymised, aggregated data (e.g., general usage statistics) may be retained indefinitely.

8. Children

Formi is not intended for users under the age of 16. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it.

9. Changes to this policy

We may update this privacy policy as the product develops. We will notify you of significant changes through the app. Continued use after changes constitutes acceptance.

10. Contact

Questions about your privacy? Reach us at hello@formiapp.com