← formworkout.app

Privacy Policy

Last Updated: 27 September 2026

This Privacy Policy describes how Form ("the App," "we," "us," or "our"), developed by Ben Hofmeister, collects, uses, stores, and protects your personal information. By using Form, you agree to the practices described in this policy.

1. Information We Collect

When you create an account and use Form, we collect the following personal information:

  • Email address — used for account creation, authentication, and communication regarding your account.
  • Name — used to personalise your experience within the App.
  • Age — used to provide relevant fitness recommendations and insights.
  • Gender — used to tailor workout-related calculations and recommendations.
  • Height — used for fitness metrics and progress tracking.
  • Weight — used for fitness metrics, progress tracking, and workout calculations.

In addition, the App automatically collects:

  • Workout and exercise data — the logs, routines, and workout history you create within the App.
  • Subscription status — information about whether you use the free or paid version of the App, managed through our subscription provider.
  • Device and usage information — basic technical data such as device type, operating system version, and app performance data used to improve the App.

If you join the FORM waitlist on our website, we collect your email address (and the page it was submitted from) solely to email you about the App's launch and early access. You can unsubscribe at any time.

Health, camera and AI features

  • Apple Health. With your permission FORM reads your body weight from Apple Health to pre-fill weigh-ins and writes completed workouts to Apple Health. You can revoke this at any time in the Health app. Health data is stored in your FORM account only when you confirm it.
  • Camera, microphone and photo library. FORM uses the camera and microphone only when you choose to record an exercise video for your coach. FORM uses the camera or your photo library when you choose to photograph a meal, pick an exercise video from your library, attach an image to a message to your coach, or save a share card to your photos. Videos, meal photos and message images are stored privately and shared only with a coach you have connected to and only while your sharing settings allow it.
  • AI features (Anthropic). FORM asks your permission before it sends any of your data to Anthropic. You are asked when you first use an AI estimate while logging a meal, or you can turn it on in the app under Settings. If you choose not to allow it, nothing is sent and you can still log meals by hand. You can turn this off at any time in the app under Settings → AI; from then on nothing more is sent. Summaries a coach sees about you are also only written with AI if you have allowed it. If you allow it: when you log a meal by photo or text, the photo or text is sent to Anthropic's Claude models to estimate the foods and portions, and you confirm or edit every estimate before it is saved. Where an AI feature is enabled, FORM may also send the training or nutrition data that feature needs — for example to write a weekly recap, an insight for your coach, or to understand a spoken set. Anthropic processes that data to return the result and, under the API terms FORM uses, does not use it to train its models.
  • Siri. If you use FORM's Siri shortcuts, Apple processes your voice request on your device or Apple's servers under Apple's privacy policy; FORM receives only the resulting text.
  • Exercise video and meal photos are deleted when you delete your account.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the App's functionality.
  • Create and manage your user account.
  • Track and display your workout history and fitness progress.
  • Process subscriptions and in-app purchases.
  • Communicate with you about your account, updates, or support enquiries.
  • Monitor app performance and diagnose technical issues.
  • Comply with legal obligations.

3. How We Store Your Information

Your personal information and workout data are stored securely in a cloud-based PostgreSQL database hosted by Supabase. Supabase provides industry-standard security measures including encryption in transit (TLS) and encryption at rest. Access to the database is restricted and protected by authentication controls.

4. Third-Party Service Providers

We use the following third-party services to operate the App. These providers process data on our behalf and are contractually obligated to protect your information:

  • Supabase (supabase.com) — backend infrastructure and database hosting. See their privacy policy.
  • RevenueCat (revenuecat.com) — subscription and in-app purchase management. See their privacy policy. Note: This provider may be replaced by an equivalent subscription management service in the future. This policy will be updated accordingly.
  • Anthropic (anthropic.com) — only if you allow it in the app, processes meal photos/text and training and nutrition data to generate estimates and summaries. See their privacy policy.
  • Railway (railway.com) — hosts the FORM server that the App connects to. Your account, training and other App data pass through it when you use the App. See their privacy policy.
  • Vercel (vercel.com) — hosts our website and the trainer web dashboard. It processes the requests made to them, including your IP address, and the data a trainer views in the dashboard — which can include data a client has chosen to share with them — passes through it. See their privacy notice.
  • Resend (resend.com) — sends the App's emails, for example an invitation from a coach, a notice that a coach has shared or updated your programme, or a waitlist confirmation. Resend receives the recipient's email address and the content of the email, which can include your name, your coach's name and a programme name. When you apply to become a trainer on FORM, in the App or on our website, the details you give (including your name and email address) are sent to us by email through Resend. Reports you file about a message or another user (your reason and the account IDs involved, never the message itself) are also emailed to us through Resend. See their privacy policy.
  • Expo (expo.dev) — delivers the App's push notifications to your device. Expo receives your device's push notification token and each notification's title and text, which can include the sender's name and a preview of a message, together with the information the App needs to open the right screen. See their privacy policy.

5. Analytics and Crash Reporting

The App uses the following analytics and crash-reporting services to help us understand how the App is used and to identify and fix technical issues. Each service is bound by its own privacy policy and acts as a data processor on our behalf.

  • PostHog (posthog.com) — product analytics. Collects a pseudonymous user identifier, screen views, feature interactions, device type, and OS version. Hosted in the EU (eu.i.posthog.com). PostHog data is used solely to improve the App and is never used for advertising, profiling, or sale to third parties. Our website uses PostHog in the same way. See their privacy policy.
  • Sentry (sentry.io) — crash and error reporting. Receives crash and error reports: stack traces, device type and OS version, your FORM user ID (a random identifier, not your name or email address), the app events leading up to the error, and performance measurements for a sample of app sessions and server requests. See their privacy policy.

6. Data Sharing

We do not sell, rent, or trade your personal information to third parties.

Your data is shared only with the third-party service providers listed in Sections 4 and 5, strictly for the purpose of operating and improving the App, and, where you have connected one, with your coach. These providers act as data processors on our behalf and are not permitted to use your data for their own purposes.

We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.

7. Your Rights

You have the following rights regarding your personal information:

  • Access — You may request a copy of the personal data we hold about you.
  • Correction — You may update or correct your personal information through the App's settings or by contacting us.
  • Deletion — You can delete your account yourself at any time in the App: go to Settings → Account → Delete Account. This deletes your account and the data linked to it straight away and cannot be undone. One exception: custom exercises you created are archived rather than deleted, so that anyone you coached who logged them keeps their training history. You can also ask us to delete your account by contacting us at the email address below (for example, if you can no longer sign in). Upon receiving a verified deletion request, we will delete your data within 30 days, except where retention is required by law.
  • Data Portability — You may request an export of your data in a commonly used format.

To exercise any of these rights, please contact us at benhofmeister3@gmail.com.

8. Data Retention

We retain your personal information and workout data for as long as your account is active or as needed to provide you with the App's services. If you delete your account, we will delete your personal data within 30 days, unless retention is required for legal or legitimate business purposes.

Anonymous or aggregated data that cannot be used to identify you may be retained indefinitely for analytical purposes.

9. Data Security

We take reasonable measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, secure authentication, and access controls. However, no method of electronic storage or transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Form is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at benhofmeister3@gmail.com.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers operate. By using the App, you consent to the transfer of your information to these countries, which may have different data protection laws than your jurisdiction.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Ben Hofmeister
Email: benhofmeister3@gmail.com

This privacy policy is provided in compliance with Apple's App Store Review Guidelines and applicable privacy laws.