Privacy Policy

a. Physique Images (1–5):

To provide personalized analysis, the app allows you to upload between one and five images of your body. These images are processed securely and used solely for AI-driven physique evaluation. They are not stored permanently unless explicitly cached locally for display in history, and they are never used for training purposes or third-party sharing.

b. Onboarding Data:

To personalize analysis and recommendations, Forma collects:

• Height (cm or ft/in)
• Weight (kg or lbs)
• Age (calculated from birth date)
• Gender
• Fitness Goal (Lose fat, Gain muscle, Maintain)

This information is processed locally and may be stored in your device's memory or linked with your subscription tier.

c. Device Information:

We collect non-personal, technical data including:

• Device model
• Operating system version
• System language and region

This helps us optimize the app for different devices and user locales.

d. Usage Data:

We track general engagement such as:

• How often the app is opened
• Number of image analyses performed
• Taps on core features like "Start Analysis" or "Generate Workout"

This is anonymized and used for improving app performance and feature prioritization.

e. Subscription & Purchase Data:

Forma uses App Store billing systems. We receive confirmation of subscription type and validity through secure receipts:

• Plan type (Free, Weekly+, Yearly+)
• Transaction status (Active, Canceled, Expired)

We do not receive or store payment card information.

f. Optional Profile Data:

Users may optionally input their name in the profile section for personalization. This information remains strictly local to the device and is not transmitted, stored remotely, or accessible by us.

a. Image Storage and Retention:

Any physique images you upload are either processed directly on-device or, if applicable, temporarily transmitted to secure cloud infrastructure solely for the purpose of analysis. These images are automatically deleted immediately after the analysis is complete. They are never stored permanently or reused for any other purpose.

b. User Data Storage:

No personal user data is stored on remote servers. All onboarding inputs (height, weight, age, gender, goals) are processed locally on your device and remain under your control. We do not store your personal information or access it via a user account system. Any optional profile data, such as your name (if entered by you), is also kept locally and never transmitted to us.

c. Supabase Usage (Internal Only):

Supabase is used exclusively to store internal, static app data such as our exercise database. No personally identifiable user information is stored on Supabase or any cloud infrastructure.

d. Security Measures:

All communications between the app and any cloud services are encrypted using industry-standard protocols (e.g., HTTPS/TLS). Access to any temporary processing services is tightly controlled and secured using authentication, rate-limiting, and isolation practices. We also monitor systems for potential vulnerabilities or threats on an ongoing basis.

For Users in the European Union (EU):

If you are located in the EU, your personal data is protected under the General Data Protection Regulation (GDPR). You have the right to:

• Access, correct, or delete your data
• Restrict or object to our processing of your data
• Request data portability
• Withdraw consent at any time
• File a complaint with your local Data Protection Authority

We are committed to complying with GDPR principles and ensuring that your data is handled with transparency and security.

For Users in Canada:

If you are a resident of Canada, Forma adheres to the principles outlined in the Personal Information Protection and Electronic Documents Act (PIPEDA). This includes:

• Limiting data collection to what is necessary
• Ensuring accuracy and security of data
• Providing access to your information upon request
• Retaining personal data only as long as needed

If you have any questions or concerns about your privacy rights or data transfers, feel free to contact us at artus@lunarsolutions.ch.

a. Consent

We ask for your explicit consent before processing any personal data that could be subject to GDPR regulations. This includes:

• When you tap "I agree" or a similar confirmation button before starting the physique analysis
• When you interact with the app features that require data input (e.g., submitting photos or onboarding details)

You have the right to withdraw your consent at any time. Doing so may limit your ability to use certain features of the app, but it will not affect the lawfulness of processing based on consent before its withdrawal.

b. Legitimate Interest

We may process certain non-sensitive data under the legal basis of legitimate interest in cases where:

• We need to analyze usage data to improve app performance and usability
• We handle crash reports or errors for debugging purposes
• We ensure system integrity and protect against abuse

We carefully assess that these interests are not overridden by your rights and freedoms under GDPR. You may object to this processing at any time by contacting us at artus@lunarsolutions.ch.

• Gemini API (by Google Cloud)

We use the Gemini 2.0 API to process your uploaded physique images and onboarding data (height, weight, etc.) for the purpose of generating AI-based fitness analysis. Images are transmitted securely and are not stored after processing. Google may collect metadata (e.g., request frequency) for operational purposes, in compliance with their own privacy policy.

• RevenueCat

RevenueCat is used to manage in-app purchases and subscriptions. It handles billing and receipts for the Apple App Store. We do not receive or store your payment information directly — all transactions are processed securely via Apple. RevenueCat provides us with anonymized subscription status (active, canceled, etc.) but not personal identifiers unless permitted by Apple.

• Supabase

Supabase powers the app's workout database and handles limited technical analytics (e.g., app error logs, performance stats). No sensitive personal data (e.g., names, images, or user identifiers) are stored in Supabase unless absolutely necessary. Any onboarding data or preferences are stored locally on your device unless explicitly needed for functionality.

Onboarding Data Your height, weight, age, gender, and goal preferences (provided during onboarding) are stored locally on your device. This information is retained until you either delete the app or manually reset the app's local storage via in-app settings (if available).

Physique Images Your uploaded photos are temporarily stored only for the duration of analysis. Once the AI analysis is complete, images are automatically and permanently deleted. They are never used for training, sharing, or storage beyond that single analysis session.

Subscription and Receipt Data Subscription status and purchase receipts are managed via RevenueCat and securely stored according to their policies. This data is retained as long as your subscription remains active and is required to verify your premium access.

Resetting the App You can reset or clear all stored onboarding data (such as height, weight, age, goals) by deleting the Forma app from your device. This will automatically remove all locally stored information. If a reset feature is available in the app's settings, you may also use it to clear your data without uninstalling.

Analysis Photos Photos uploaded for analysis are automatically deleted after the session and are never stored beyond the analysis. There is no need for manual deletion of these files.

Subscription Receipts Forma uses RevenueCat to manage subscriptions, which stores receipt data securely. If you wish to request deletion of this data, or if you believe any other data may have been retained improperly, you may email us at artus@lunarsolutions.ch with your request.