Privacy Policy

Last updated: April 8, 2026

FormFuel ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the FormFuel mobile application.

1. Information We Collect

Account Information

• Email address (for account creation and login)
• Password (hashed — we never store plain-text passwords)

Profile Information

• Fitness goal, experience level, and dietary preference
• Height, weight, age, and gender (used to calculate body metrics)

Health & Fitness Data

• Workout logs (exercises, sets, reps, weights)
• Food logs (meals, calories, macronutrients)
• Weight history and body measurements
• Progress photos (stored in private, encrypted storage)
• Water intake logs
• Menstrual cycle data (only if you opt in via Preferences). Period start dates are stored in a row-level-security scoped table that only your account can read. We never include period start dates in analytics or any shareable surface, and we never auto-share with anyone. When you view AI-generated phase advice on the Cycle screen, only the current phase label and day-of-cycle number (e.g. "Follicular, day 6") are sent to our AI provider alongside your standard profile — never the underlying period dates. Disabling cycle tracking in Preferences hides the UI; deleting your account erases the underlying rows permanently.

Usage Data

• App crash logs and diagnostics (collected by Expo for stability improvements)

2. How We Use Your Information

We use your data solely to provide and improve FormFuel:

• Display your personalised workout plans and nutrition tracking
• Calculate body metrics (BMI, body fat %, TDEE)
• Generate AI coaching suggestions tailored to your profile
• Show your progress over time (weight trends, streaks, personal records)
• Process subscription payments (via Apple's App Store — we never see your payment details)

3. AI-Powered Features

FormFuel uses AI (powered by Anthropic's Claude) to provide coaching suggestions, food photo analysis, and weekly summaries. When you use these features:

• Your profile data (goal, level, stats) is sent to our secure server-side functions to generate personalised responses
• Food photos are processed to identify items and estimate macros — photos are not stored after analysis
• AI-generated content is for informational purposes only and is not medical advice

4. Data Storage & Security

• All data is stored on Supabase (hosted on AWS) with encryption at rest and in transit
• Row-Level Security (RLS) ensures you can only access your own data
• Progress photos are stored in a private storage bucket — accessible only via time-limited signed URLs
• Passwords are hashed using industry-standard algorithms
• We use HTTPS for all data transmission

5. Data Sharing

We do not sell, rent, or share your personal data with third parties.

Your data may only be shared in these limited circumstances:

• Service providers: Supabase (database hosting), Anthropic (AI processing), RevenueCat (subscription management) — these providers process data on our behalf under strict agreements
• Legal requirements: If required by law, regulation, or legal process
• With your consent: If you explicitly choose to share content (e.g., sharing a weekly summary image)

6. Data Retention

• Your data is retained as long as your account is active
• If you delete your account, all personal data (profile, logs, photos) is permanently deleted
• Anonymised, aggregated data may be retained for analytics

7. Your Rights

You have the right to:

• Access your data — all your data is visible within the app
• Correct your data — edit your profile and logs at any time
• Delete your data — contact us to delete your account and all associated data
• Export your data — contact us to request a copy of your data

8. Children's Privacy

FormFuel is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn that we have collected data from a child under 13, we will promptly delete it. If you are between 13 and 18, you must have a parent or guardian's permission to use FormFuel.

9. Third-Party Services

FormFuel integrates with the following third-party services:

• Supabase — Database, authentication, and file storage (supabase.com/privacy)
• Anthropic — AI processing for coaching and food analysis (anthropic.com/privacy)
• RevenueCat — Subscription and purchase management (revenuecat.com/privacy)
• Apple — App distribution and payment processing (apple.com/privacy)
• Expo — App updates and crash diagnostics (expo.dev/privacy)

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of FormFuel after changes constitutes acceptance of the updated policy. For significant changes, we will notify you through the app.

11. Contact Us

If you have any questions about this Privacy Policy or your data, contact us at:

support@formfuel.app