Form

Privacy Policy

Effective August 17, 2026

Form is a workout and activity journal. This policy explains what the app collects, how it is used, and the choices you have. The short version: your training and health data exist to run your journal and coaching experience. We do not sell it, use it for advertising, or share it with data brokers.

What we collect

• Account. You sign in with Apple. We receive a stable Apple identifier and, only when you choose to share them, your name or email address.
• Workout journal. Exercises, sets, repetitions, weight, duration, distance, notes, ratings, planned routines, and conversations with the training assistant.
• Training profile. Goals, experience, schedule, equipment, exercise preferences, coach style, and injuries or painful movements you choose to enter.
• Optional health and fitness data. If you authorize Apple Health access, Form reads the workout, activity, body-composition, sleep, recovery, heart, and respiratory metrics you permit and stores selected daily snapshots in your Form account. Form does not write to Apple Health.
• Purchases and feedback. Subscription status from Apple and RevenueCat, plus support or quality feedback you choose to submit. We never receive payment-card details.
• Service usage. A daily count of novel exercise-art requests is linked to your account to enforce abuse and cost limits. The counter does not contain the exercise name.

AI processing and your choice

Before entering Form, you choose whether to permit AI processing. If you do not agree, Form does not send workout or health context to AI providers and you cannot continue into the app.

If you agree, the workout messages you type, relevant conversation and training history, profile and preference details, and selected recovery, sleep, and heart context are processed through OpenRouter and selected AI model providers. This processing structures your journal, interprets corrections, and personalizes training guidance. It is not used for advertising or marketing.

When Form creates exercise artwork, it normalizes the exercise name and uses it to derive a hashed cache identifier so the same movement can reuse one image instead of being generated again. The shared, account-independent exercise-art library keeps that hashed identifier and artwork, not the free-text exercise label. Exercise names are for movement descriptions only; do not include names, contact details, or other personal information in them.

You can withdraw permission and stop future processing by deleting your Form account. You can also sign out to stop using the service without deleting stored data.

Apple Health

Apple Health sync is optional and off until you grant permission. You choose each category Form may read in Apple's authorization sheet. Health and fitness data are used only for your journal, recovery context, and personalized training features. They are never sold, used for advertising or marketing, or shared with data brokers.

How we use and share data

We use your data to authenticate you, keep your workout journal in sync, run AI-assisted logging and coaching, calculate training summaries and recovery context, provide subscriptions, respond to feedback, prevent abuse, and maintain the service.

Form relies on a small set of providers:

• Cloudflare runs the API and serves generated exercise artwork.
• Neon stores account, workout, health snapshot, program, conversation, feedback, and subscription records in Postgres.
• OpenRouter and selected AI model providers process the training content described above and generate exercise artwork.
• RevenueCat and Apple handle purchases, subscription status, Sign in with Apple, and Apple Health permissions.

We share only what each provider needs to perform its function and require service providers to protect that data consistently with this policy and applicable law. We do not authorize providers to use Form data for advertising.

Retention, export, and deletion

Your Form account and journal remain in cloud storage while the account is active. Service providers may retain short-lived operational or security records under their published policies and legal obligations.

You can export your Form data as a JSON file or permanently delete your account in the app under Profile. Deletion removes the account and its workouts, exercises, sets, health snapshots, profile, preferences, programs, conversation history, summaries, feedback, exercise-art usage counters, and subscription records from Form's live database, and revokes the stored Sign in with Apple credential when one is available. Account deletion does not cancel an Apple subscription; subscriptions are managed separately through Apple. A hashed cache identifier and artwork already contributed to the shared, account-independent exercise-art library may remain after account deletion, but the free-text label is not kept there and the shared asset is not connected to your account.

Contact

Questions or privacy requests: dev@intake-app.app.