Privacy Policy

When you use FormAI, we collect the following categories of personal data to provide and improve our service:

• Account information — your email address and, optionally, your first name.
• Profile data you provide during onboarding — your age, gender, height, weight, sport or activity, training goals, experience level, available equipment, and any injuries or physical limitations you disclose.
• Sport-specific performance data — personal bests, working weights, race goals, and other metrics you enter for your chosen sports.
• Training data generated through your use of the app — your AI-generated training plans, session logs, and daily check-ins (sleep, energy, soreness, stress, bodyweight).
• AI conversation history between you and the FormAI coaching assistant, including daily summaries generated from that history.
• Health and body data — if you choose to enter it. This includes body composition results (e.g. DEXA, InBody scans), blood and lab markers, cardiovascular test results, GP or medical reports you upload, and physical measurements.
• Wearable and fitness tracker data — if you connect a device or service (Garmin, Whoop, Oura, Polar, Apple Health, Google Health Connect), we access data such as heart rate variability, resting heart rate, recovery scores, sleep, training load, and completed workouts, as permitted by your connection settings.
• Technical and usage information — device type, app version, crash reports, and general usage patterns, collected via Sentry and PostHog to help us maintain and improve the app.

Your data is used exclusively to provide you with a personalised training and coaching experience:

• Profile, sport, and training data are used to generate AI-powered training plans tailored to your goals, equipment, and physical condition.
• Health and body data, where provided, gives your AI coach additional physiological context — for example, flagging a low ferritin result or respecting a GP-noted training restriction. Medical notes are treated as hard constraints by the AI, not suggestions. The AI does not diagnose, and is not a substitute for professional medical advice.
• Wearable data, where connected, is used to adjust coaching recommendations based on recovery and training load, and to automatically verify completed workouts against your plan.
• Conversation history is used to provide contextually relevant coaching responses.
• Crash and usage data (Sentry, PostHog) is used solely to identify and fix bugs and understand feature usage — never for advertising.
• We may use anonymised, aggregated data to improve our AI models and app features.

We do not sell your personal data to third parties, and we do not use your data for advertising purposes.

FormAI uses a small number of carefully selected third-party services to operate:

• Supabase — our database, authentication, and file storage provider (EU/Ireland region). Your account data, training information, and any uploaded health documents are stored securely here.
• OpenRouter — processes your AI coaching requests, routing your relevant profile, training, and (where applicable) health context to generate a coaching response.
• Garmin Connect, Whoop, Oura, Polar, Apple Health, Google Health Connect — only if you choose to connect a wearable or health data source, in accordance with your permissions and their own privacy terms.
• Sentry — receives crash and error reports to help us fix bugs. Never includes your health data or conversation content.
• PostHog — receives anonymised usage analytics (EU region) to help us understand feature usage. Never includes your health data or conversation content.
• RevenueCat — manages subscription billing where applicable, in accordance with their own privacy policy.

All third-party providers are required to handle your data securely and in compliance with applicable data protection laws.

Your data is retained for as long as your account is active. Wearable data older than 2 years is automatically pruned unless you opt into long-term storage. Health data can be deleted instantly by you from profile settings, separate from full account deletion.

To delete your account and all associated data, email id.harryallen@gmail.com. We process deletion requests within 30 days.

If you are a resident of the European Union or European Economic Area, you have the following rights — including with respect to special category health data:

• The right to access the personal data we hold about you.
• The right to request correction of any inaccurate or incomplete data.
• The right to request erasure of your personal data (the right to be forgotten).
• The right to restrict or object to the processing of your data.
• The right to data portability — to receive a copy of your data, including wearable and health data, in a machine-readable format.
• The right to withdraw consent at any time, including revoking health data consent specifically without affecting the rest of your account.
• The right to lodge a complaint with a supervisory authority if you believe your rights have been violated.

To exercise any of these rights, contact us at id.harryallen@gmail.com.

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. All data is transmitted over encrypted connections (HTTPS/TLS). Health documents and wearable access tokens are encrypted at rest. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

FormAI is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child under 16 has provided us with personal data, contact id.harryallen@gmail.com and we will take steps to delete the information.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email. Continued use of FormAI after changes are published constitutes acceptance of the updated policy.

Questions, concerns, or requests regarding this Privacy Policy or how we handle your data can be sent to id.harryallen@gmail.com. We aim to respond within 5 business days.