LEGAL

Privacy policy

Effective September 15, 2026

This policy explains how Forma handles information in the current mobile app and related support services.

Information you provide and local storage

Forma stores the profile details you choose to provide, such as age, sex, height, weight, goals, activity, training experience, equipment, injuries, allergies, and food preferences. Your chats, saved workouts, diets, schedules, and preferences are stored on your device. Messages may contain additional health information, including hormone, medication, symptom, or laboratory-result details. Only provide information you want processed for your request.

Forma does not provide a complete cloud backup of this local content. Your operating system may include app data in a device backup, depending on its settings. The current app does not require a Forma login or an email-protected credit account.

AI processing, voice, and meal photos

When you send a chat message or use an AI feature, Forma sends relevant messages, profile details, and workout or diet calendar context through its server, hosted on Render, to OpenAI. Starter plans can also be generated by Forma's own planning service. Data necessary to fulfill these requests is transmitted over encrypted connections.

Voice transcription uploads your recording for processing. The transcript remains editable before you explicitly send it as a chat message. Read aloud sends response text for speech generation. Meal-photo analysis uploads a resized image for analysis and keeps a local copy. Camera, photo, and microphone permissions are used for the feature you choose.

For interrupted or background requests, Forma temporarily caches the completed assistant response and structured plan output for delivery and retries, for up to 24 hours. Active jobs can also retain the planning context needed to validate the result. These records are separate from a complete chat backup.

OpenAI processes information under its API data controls. Forma requests that responses not be stored as application state; this does not mean all provider security or abuse-monitoring records are immediately deleted. See OpenAI's data controls for its processing and retention practices.

Optional food localization

If you choose location-based food suggestions, Forma requests foreground location permission and uses a one-time location to derive your city, region, and country. Forma does not send precise coordinates with coach requests or keep a coordinate history. Coarse food-location context is saved locally and may accompany relevant food or diet requests. You can also enter a location manually or decline the feature.

Regional context is an optional signal for familiar foods. It does not identify your religion, ethnicity, or nationality and does not represent live inventory, prices, or seasonality. The display-only country code used for a Profile map remains local.

Subscriptions and usage limits

Apple or Google processes Forma Pro and Forma Ultra subscription payments. Forma does not receive your payment-card or bank-account number. Its server verifies store purchase evidence and keeps pseudonymous subscription, entitlement, usage, reservation, and limited transaction or lifecycle records to provide the paid allowance, prevent duplicate spending, and handle refunds or revoked purchases.

The current app uses direct app-store billing. It does not use a separate Forma credit wallet or require a Firebase Authentication login. Firebase App Check is not enforced in this release. Subscription verification and server-side usage limits still apply. Clearing app data does not itself cancel an Apple or Google subscription or erase store transactions.

Optional response feedback

Like and Dislike feedback is sent only after you first give optional consent. Report unsafe or inappropriate is a separate action with its own confirmation. These submissions send the selected AI response, your vote or report reason, any complaint you choose to provide, model and app metadata, timestamps, and response-scoped verification references to Google Firebase Firestore.

Authorized Forma staff may manually review this information to evaluate response quality and safety. The selected response may repeat personal, health, hormone, medication, Profile, chat, or coarse-location details. Review it before sharing. Your prompt, Profile, other chats, and location are not uploaded separately as part of response feedback.

Feedback is never used for advertising, data sale, cross-app tracking, or training a general-purpose or third-party AI model. Response-feedback text and rating/report events are not sent to Firebase Analytics. Records are marked to expire 90 days after submission; Firestore TTL removal is asynchronous and may occur later. You can withdraw consent to stop future rating submissions. This does not delete past feedback.

Use Profile → Privacy & data → Delete submitted feedback to remove submissions for which this installation still holds the response verification references. A content-free pseudonymous deletion barrier prevents an older retry from restoring erased feedback. It contains a response-scoped reference and deletion/expiry timestamps, but no response text, prompt, Profile field, chat, plan, or location. It is also marked for 90-day expiry.

Support requests

Information you choose to include in a support report or email, including a complaint, plan details, exercise or food information, and attachments, is used to investigate your request. Structured problem reports received by Forma's server may be stored in Firestore with app metadata and a 90-day expiry timestamp. Email correspondence follows the email provider's retention practices. Contact support about deletion of these records; the response-feedback deletion button does not delete support emails or all other server records.

Reminders and response notifications

If allowed, Forma schedules local plan reminders and uses Expo Push Service to deliver response-ready notifications through Apple Push Notification service or Firebase Cloud Messaging. The server processes a push token and request reference for delivery. A notification may show an excerpt of an AI response on your lock screen. Control notification previews and permissions in your device settings. Android alarm access is optional for on-time reminders.

Diagnostics and service providers

Forma and its providers may process IP addresses, request identifiers, app and operating-system versions, request times, response status, usage counts, and error or crash information to operate, secure, and troubleshoot the service. Build-enabled diagnostics use Firebase Crashlytics and Expo Observe. These records are separate from your local chat history; Forma configures operational telemetry to avoid intentionally attaching Profile fields, saved plans, or chat text.

Service providers include Render for the backend, OpenAI for AI processing, Google Firebase Firestore for subscription/usage and submitted-report records, Firebase Crashlytics and Expo for diagnostics, Apple and Google for payments and device services, Expo and platform push services for notification delivery, and Cloudflare for exercise media. Media requests include ordinary network information such as your IP address and the requested resource. Forma does not sell personal information or use advertising or cross-app tracking.

Information may be processed outside your country and disclosed when required by law or necessary to protect users and the service.

Health information and age

Forma provides educational fitness and nutrition information. It is not a medical service, doctor, diagnosis, prescription, or substitute for a qualified healthcare professional. AI answers, workout and diet plans, and calorie estimates may be inaccurate; review them before acting. Forma is not an emergency service.

Forma is intended for users aged 13 and older. Users under 18 should involve a parent or guardian and seek qualified guidance for training, nutrition, and health decisions. Do not use the app if you are below the minimum age required in your region. Contact support if you believe a child below that minimum has provided information.

Retention and your choices

Delete local data in Profile → Privacy & data → Delete all data. Where available, Forma also attempts to remove linked submitted response feedback before clearing local references and reports a failure rather than claiming success. Uninstalling or clearing storage cannot by itself send a server deletion request. Use the in-app controls first when possible.

These controls do not immediately erase the temporary response-delivery cache. It expires under the job retention described above. Local deletion does not retroactively erase limited crash, security, provider abuse-monitoring, billing, or support records. Such records may remain for the applicable operational, dispute, legal, or provider retention period. Deleting app data does not cancel your subscription.

Settings → Privacy & Safety provides the medical notice, permission controls, and policy links. You may request access, correction, or deletion of server-held personal information by contacting support. Depending on your region, you may also have rights to object, restrict processing, or complain to a data-protection authority. We may request information needed to locate your records and verify the request; never send a password or full payment details.

Contact and policy updates

Email mentaledgesupport@gmail.com for privacy, support, or data requests. The effective date above identifies this policy version. Material changes will be reflected here and, where appropriate, in the app.